ROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x18, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  742.648929][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  742.658707][T14006] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:53:30 executing program 0:
memfd_create(&(0x7f0000000000)=',{,$k(^]\xe7$\x00', 0x0)

[  742.693386][T14006] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  742.745423][T14006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  742.771328][T14006] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/541/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  742.818889][T14006] overlayfs: missing 'lowerdir'
[  742.963198][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:31 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:31 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x1)
write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120)

01:53:31 executing program 4:
socketpair(0x1d, 0x0, 0x1, &(0x7f0000001140))

01:53:31 executing program 1:
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)

01:53:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0x0, 0x204}, 0x14}}, 0x0)

01:53:31 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:31 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
getsockname$packet(r0, 0x0, 0x0)

[  743.499170][T14032] loop2: detected capacity change from 0 to 512
01:53:31 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x343400, 0x0)

01:53:31 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0), 0x8, 0x10, &(0x7f0000000a00)={0x1}, 0x10}, 0x80)

01:53:31 executing program 1:
bpf$PROG_LOAD_XDP(0x14, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:31 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xc, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  743.617689][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:31 executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/cgroups\x00', 0x0, 0x0)

[  743.692960][T14032] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  743.715561][T14032] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  743.773618][T14032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  743.787354][T14032] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/542/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  743.855085][T14032] overlayfs: missing 'lowerdir'
[  743.884754][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:32 executing program 5:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3f}, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0xfffffffffffffffe]}, 0x8})

01:53:32 executing program 1:
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f40)='personality\x00')
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0)

01:53:32 executing program 0:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)

01:53:32 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x20)

01:53:32 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:32 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)

01:53:32 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000800)={0x3, @default, 0xffffffffffffffff})

01:53:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r0)

[  744.456113][T14056] loop2: detected capacity change from 0 to 512
01:53:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}}, 0x0)

[  744.535919][T14056] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  744.572343][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:32 executing program 5:
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100))
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140))

[  744.598164][T14056] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:53:32 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/schedstat\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)

01:53:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="780200002f6ed5"], 0x278}}, 0x0)

01:53:32 executing program 4:
setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0)

01:53:32 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000080000000000000050000001834000001001000000000000000000018000000ff7f0000fe"], &(0x7f0000000800)='GPL\x00', 0x6, 0xd3, &(0x7f0000000840)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  744.658604][T14056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
01:53:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, 0x0, 0x0)

[  744.708846][T14056] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/543/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  744.822533][T14056] overlayfs: missing 'lowerdir'
[  744.913978][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:33 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:33 executing program 0:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0)

01:53:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

01:53:33 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f00000007c0), 0x40000, 0x0)

01:53:33 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20)

01:53:33 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:33 executing program 0:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000016c0), 0x940, 0x0)

01:53:33 executing program 4:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, 0x0)

01:53:33 executing program 1:
socket(0x573406d0f52468f6, 0x0, 0x0)

01:53:33 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  745.391156][T14091] loop2: detected capacity change from 0 to 512
[  745.455148][T14091] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  745.503339][T14101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  745.535178][T14091] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:53:33 executing program 5:
socket(0x2, 0xa, 0x1)

01:53:33 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

[  745.554812][T14091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  745.584591][T14091] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/544/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  745.637207][T14091] overlayfs: missing 'lowerdir'
[  745.712382][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:34 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:34 executing program 0:
bpf$PROG_LOAD_XDP(0x1e, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:34 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xf4240, &(0x7f00000007c0)=@framed={{}, [@btf_id, @initr0]}, &(0x7f0000000800)='GPL\x00', 0x0, 0xd3, &(0x7f0000000840)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00), 0x10}, 0x80)

01:53:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)

01:53:34 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:34 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x1a, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:34 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  746.278323][T14113] loop2: detected capacity change from 0 to 512
[  746.329045][T14113] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:53:34 executing program 4:
bpf$PROG_LOAD_XDP(0x16, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:34 executing program 0:
bpf$PROG_LOAD_XDP(0x1a, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:34 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x4, 0x7fffffff}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20)

[  746.403638][T14123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:34 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000440)=""/151, 0x1a, 0x97, 0x1}, 0x20)

01:53:34 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x2, 0xd3, &(0x7f0000000840)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  746.499210][T14113] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  746.558571][T14113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  746.583076][T14113] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/545/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  746.619628][T14113] overlayfs: missing 'lowerdir'
[  746.689909][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:35 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:35 executing program 1:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000002800), r0)

01:53:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)

01:53:35 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$xdp(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {0x0}], 0x2}, 0x0)

01:53:35 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:35 executing program 5:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0)

01:53:35 executing program 4:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

01:53:35 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

01:53:35 executing program 0:
memfd_create(&(0x7f0000000000)=',{,$k(^]\xe7$\x00', 0x6)

[  747.214285][ T1232] ieee802154 phy0 wpan0: encryption failed: -22
[  747.220630][ T1232] ieee802154 phy1 wpan1: encryption failed: -22
[  747.232847][T14143] loop2: detected capacity change from 0 to 512
01:53:35 executing program 5:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/249, 0xf9)

01:53:35 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b58b0c00ffffffff184300000100000000000000000000008510"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xaf, &(0x7f0000000080)=""/175, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:35 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000440)=""/151, 0x32, 0x97, 0x1}, 0x20)

[  747.314693][T14155] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  747.317214][T14143] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  747.344222][T14143] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  747.367313][T14143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  747.416371][T14143] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/546/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  747.446468][T14143] overlayfs: missing 'lowerdir'
[  747.510513][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:36 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:36 executing program 5:
syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0x0)

01:53:36 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x8, 0xd3, &(0x7f0000000840)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:36 executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00'}}, 0x118)

01:53:36 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f40)='personality\x00')
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0)

01:53:36 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:36 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$fb(r0, &(0x7f0000000600)=""/142, 0x8e)

01:53:36 executing program 4:
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x0, "7ecad6152a06b73f85de808ef9830b02af87dfe7612a3d3a4f8ae8f93f46bfe1"})
getrusage(0x1, &(0x7f00000000c0))

[  748.154184][T14167] loop2: detected capacity change from 0 to 512
01:53:36 executing program 0:
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)

[  748.187134][T14167] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  748.215708][T14167] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  748.221508][T14177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  748.239247][T14167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
01:53:36 executing program 1:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x282041, 0x0)

[  748.253497][T14167] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/547/file0 supports timestamps until 2038-01-19 (0x7fffffff)
01:53:36 executing program 4:
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000002d00), 0xffffffffffffffff)

01:53:36 executing program 5:
socket$inet(0x2, 0x0, 0x1ff)

[  748.357281][T14167] overlayfs: missing 'lowerdir'
[  748.500865][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:37 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)

01:53:37 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x5, &(0x7f00000007c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000800)='GPL\x00', 0x3b371401, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x1, 0xf}, 0x10}, 0x80)

01:53:37 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000080)=@raw=[@jmp], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:37 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:37 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:37 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000001c0)={@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, 0x0, [@bcast, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

01:53:37 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000080)=@raw=[@jmp, @kfunc], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xaf, &(0x7f0000000400)=""/175, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:37 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x1b, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:37 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x16, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:37 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
geteuid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)

[  749.075529][T14197] loop2: detected capacity change from 0 to 512
01:53:37 executing program 1:
pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000340)={0x8}, &(0x7f0000000380)={0x77359400}, 0x0)

01:53:37 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cebbbca5"}, 0x0, 0x2, {0x0}})

[  749.158853][T14197] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  749.181051][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:37 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter, 0x48)

01:53:37 executing program 0:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
connect$can_j1939(r0, 0x0, 0x0)

01:53:37 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x81000)

[  749.259431][T14197] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  749.340368][T14197] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/548/file0 supports timestamps until 2038-01-19 (0x7fffffff)
01:53:37 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./f'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

[  749.448971][T14197] overlayfs: missing 'lowerdir'
[  749.525638][T14223] loop2: detected capacity change from 0 to 512
[  749.539182][T14223] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  749.558559][T14223] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  749.571362][T14223] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/549/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  749.600405][T14223] overlayfs: failed to resolve './f': -2
01:53:38 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:38 executing program 1:
r0 = fsopen(&(0x7f0000000940)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

01:53:38 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')

01:53:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)

01:53:38 executing program 0:
getrandom(&(0x7f00000003c0)=""/15, 0xf, 0x0)

01:53:38 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./f'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:38 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@initr0]}, &(0x7f0000000800)='GPL\x00', 0x0, 0xd3, &(0x7f0000000840)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x1, 0xf}, 0x10}, 0x80)

01:53:38 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x7, &(0x7f00000007c0)=@framed={{}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @initr0]}, &(0x7f0000000800)='GPL\x00', 0x3b371401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x2}, 0x8, 0x10, 0x0}, 0x80)

01:53:38 executing program 0:
openat$vcs(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0)

01:53:38 executing program 4:
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x12800, 0x0)

[  749.990768][T14232] loop2: detected capacity change from 0 to 512
[  750.074457][T14238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  750.098914][T14232] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:53:38 executing program 1:
openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x10080, 0x0)

01:53:38 executing program 0:
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
openat$null(0xffffffffffffff9c, &(0x7f0000000e80), 0x6c00, 0x0)

[  750.125777][T14232] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  750.180425][T14232] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/550/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  750.241445][T14232] overlayfs: failed to resolve './f': -2
01:53:39 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/15, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:39 executing program 4:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)

01:53:39 executing program 5:
memfd_create(&(0x7f0000000000)=',{,$k(^]\xe7$\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000740))

01:53:39 executing program 0:
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x9754, &(0x7f000001c600)="$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")
r0 = getpid()
ioprio_set$pid(0x1, r0, 0x2004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0)
sendfile(r2, r2, 0x0, 0x10000)
sched_setscheduler(0x0, 0x0, 0x0)

01:53:39 executing program 1:
bpf$PROG_LOAD_XDP(0x15, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:39 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./f'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x194, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@chsw_timing={0x68, 0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0x5a, 0xf, [@dsss={0x3, 0x1, 0x24}, @preq={0x82, 0x51, @not_ext={{}, 0x0, 0x0, 0x0, @device_a, 0x0, "", 0x0, 0x0, 0x5, [{{}, @broadcast}, {{}, @device_b}, {{}, @broadcast}, {{}, @broadcast}, {}]}}]}, @NL80211_ATTR_IE={0xf1, 0x2a, [@fast_bss_trans={0x37, 0xe2, {0x0, 0x6, "a5a537e691446f9f2e4bb3bc78311971", "78cec8bf8418fbbdccbdd2f573956757779e3695277f7d567e10e5e06afbf486", "fc53d2a318e331befa9c481c40c5a43d2e5507b2605b3f1c4ac8b64e14228034", [{0x0, 0x26, "2dac7b52faf367119edf328f855df2e80694543974a62b92c4e432f042c93a7c339ddcdcb650"}, {0x0, 0xc, "9329cf179cb362df41b87f7d"}, {0x0, 0x21, "e011683167cb80883e4773b31e319ac4f591f9e6011f393ed92e8f4780a3797495"}, {0x0, 0x23, "9a768d11609358b282009faca43bf32b2a747c5958e62d592929f94f8e7f643a16282e"}, {0x0, 0x8, "79afa9bdeb6940f3"}, {0x0, 0x6, "69e8fc51e2f4"}]}}, @mesh_config={0x71, 0x7}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xcb4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xfd, 0x80, [@channel_switch={0x25, 0x3}, @erp={0x2a, 0x1}, @prep={0x83, 0x25}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @random_vendor={0xdd, 0xb4, "65bd468323c4d709451dc18b21707c27ae056275a131b47905de2bebb58d6a91f702337f5f17fcb3e15f4de83a564bb9b708f71521320bc6dc26448a9c0cb0d12d73a48e848f9139a46513e9dc4bf2b74247c53166c30ff54aac272d11a7773835602439a72b627180c88c5e31959ce50f5fae178018a0c8f52e4b4d1719427168c2e47f4b771004fc6527a2e715466beb7e048800b47055cadbfd056dbe9b8ec1c5d0a4d209d237aa3f7d4cc4195e2c9f6c74cc"}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d, 0x7f, [@supported_rates={0x1, 0x7, [{}, {}, {}, {}, {}, {}, {}]}, @supported_rates={0x1, 0x3, [{}, {}, {}]}, @dsss={0x3, 0x1}, @mesh_id={0x72, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x49, 0x2, "035a5b8b55fda92144b342e03ee8fe006239ffe8e28bef25e8cb0c6d5a3d39763f87f033133f049ce9a449de1c0707915f86d80f2196a592846baae021d484fd7b2d9c24df"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "7759905bb67a44c2253f681265"}]}, @NL80211_ATTR_BEACON_HEAD={0x34d, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @void, @val={0x1, 0x6, [{}, {}, {}, {}, {}, {}]}, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0xe5, {0x0, 0x0, 0x0, "dc26a73d41937172d7f3b3a1ea90bd53ec646db52a33d7531c7b7f95a559c2a4ec89859a519a3f742bedead8fd1775c17244660a87ee9c143c255c95b26f26d1c6c1b828a99bf63a0181a7f4be4fdd79da01f501aad77cb7ce88ed8b8cd93ccfb836e8e624fc088a7b8e47fdfe0f52bebff2594e60fca710d63dc0deb4dec1dcd52e435d4041174c926e18b249989118aa5ab9670c0f4f2284db239d3440dac4fcf37b92f95ed048f6f97be9994ad1495053266226f9ee6ce30857ab8d81796e4fefbca591eb593ccf03143ef34cd5121f0b0b93a71221784444efbbdeb73e5d3852"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x6, "4fb4edf79f7f"}, {0xdd, 0xa6, "04b15a1202aa38939f9e196a086759432ef1cd50ff2c0116f6067d8bafb7043246169f4eab3dfefa37146ef23dd1c36ee498b2bfa8d50356e0275bf1a54712d738a5de3c3cf08170d7f38920c613e3a582d83fbe0c848b7b3e08d6104aa116782a4b2575c60507be3a604d0629d28c1f94f959d84f45210363aedb5b1b7de57ee36a9a608f403a0f7ee00d4c4b8c3920a45007d2c65fd27ea58d4bc010d85df528d987f4f1b9"}, {0xdd, 0xbc, "d1f2996a5237a61d702933250e934f46068831f1c7f72ec3800cd5dbc2c6715d581279f33b6f48968a869045197abe0087c844e33c1c2f80c3dfbbb9f6bdd6277aa4836131648dcb73dad3a10a1dd1578511640bc6af9819845b97251a64a62bda9434e012671c50f764fbfc93688b80040ccf943b3eac5faa7162f558efa5027f8b17dc49f6785e3401784bc3b2bf6c7b7a78792b6ed8aa0af4487118fbd51da1e0849b413e4cd8b94cd2fa8bcdfb4ad8e88acb9d909a740bc6cb4a"}, {0xdd, 0xa2, "3474f1bd3447a9a0f3b9922373d657c67d2dba9b66257a9cf5d2b9388d2d07fdd991f2399c5c95321052824ca928d153bad99a75585bdc5ba57f73a406073a977a9908deba6fa9a5eb2154718e3c8b5851e8f855c06340a48926c8d5c0a688019e36c22ec3dd2133fec6954ac92797d8906963a520055ce78cdb7a426ffc58d7f6531886f8fdfeea9d5725ed4fa0b80613f21b652e71e863ff8e6224d708931e61e8"}]}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x775, 0x91, "5ba5c171b3db3d85b2309339aba3f1c4465f4913bb2b8de140fc8f67f610a311b4bc450f20c77ed5b48509a2b444dffe2eb52fcc6351d781f667b0c214415f7945b942fd33cb4f7d331f6d996342f0f225e1be8c415bc6f84bfcb660b1ffa074387aefb692073e6071d08edaec1ff86d2a935f35a891620d9183e72534839780ae34cdd7ef8ebf3d2b98a84644fa61893c005f34e43e8029918378a051a9537fd0e7d3f111961b7695fac5b99eee21274c82d59ee3ff171be1aaebb07a91deaca85c049e9826248b043716b89eb5af325926003894ad41a2427afe644214295e55f227c4254c17a75ea14dd8068c86b8661706d428c287336a57da24ea199e4f7dd846e5de7ccca68027f4c91969f37844a33c4cf8442057ff71311a02ef862de075df0df276e4849f1623090b7a71d4764288b9e9f46888f385dc8eb4184fa5aec6cfb427fa76f1e69d938b57492172e062093a622fc8e2e5bf9f72a632d72c31d24168fea4511ee7f1ff35ecc8dcea6bb1d924b70a530113313d0a55659923dc023e692af1037b0966a08905b81fd8befa0d8723c2894b0b26e3812fcfc5ff19d6746afbb08966e9ecb7ed910edd9a2970da8c84340af1ce5c78f2743a5546a1e978a8581c8c4422df837da2b32e3a41da6d5721e5d04d5d57f2ef53130e0a0eb5cb80ac39b449dcd9f5976d20ce9807fbde481996da5332b7f335d05b4ceaf80ba12c9cfe832ebb6cf610e719dd7b70b0d60d7b2945f33e59b85d2cbf89f9d42c3017c63bb41dafd668843388e8842ccb133732e0c6843da529152571a8e3bdd941171b0dcb711c11e7c43b3c9ef929149975a50ab52c8857a4828b941e7d18a2d4bd159fb47b1278f94a1597f71e8b7ae6fc948c86911b7759f6468fda90a7b0c0f9eb35e007871cd4f14e3464c7d90ccea1ba0172fae3b929b5ca6431659100f84052723fbc6b78c047c420c1ebe0d863b6c5c1a8d563a04d68ec3183151519276d94c2957cc25d3664126ca87fda011e2139ba2a1ec80904b8013933dc6f0eb15ce5e122fbe6059e36e9b49d4a0b6de9b0be2c6246cc55794740c0a09e7fdbecefdf340d704df7719123f183986dcea9852cb41965d8a61c70a2c5c585d8754f6e34a0b44a2b54115613dcf1e31fd564c5c508ddf798ad3baa985de73d76538f3884498725268a7d2fa1ab290efbc3ae6adaa34036c9f735d2deda8c1cd16ff977f171b135547c20beeb7e0c622054eecd0236f6b3ec4393fb3a9cc4d8946b87d973781025a83e816570b86450d32f6aa9ed53bed38d63ab880a9eda138ea9c0f59c30f35997764481feecd712c89b3b5a701b54257c0aea667a9c4cf2be2241615b16e090c663d63931c81beec7ee3ddf78e7c4a9adff678bcaac908581186a48123d36338468920a702111f1d77d95d51e6e2c2d21c987ce05afb3b62180d7e46047934c3284420a561d5bc90f5a677024e926dbccc6eae5cc79382582e57601a1b9f83b445c24be23d000066045cc705404ed11a21d44646a22e70099ea5510ff7a51bad08e45a9cb66f5ee38549ca8cf5e9db9dc19bf4d8aee9622199cf04b695dd1fca2bf071cebbb56fdcda77d75a03764ef8e0dda4d7d7577e18e516cb508b754a68a54c7c7832220f1a3a7a2bab939fd4dcad154a6d6199b222a154785b7b9c4dbe57528e7c5a9970327271e6500515d7bb03bf9d0151c69efb49c5950fa2496679e7655fffd71bad86da41ed5ede2a8fb071f5a1cc90c59c39e87e8281558ef4bc581f1b6c02e73699150ba244a853719edae1e5d6fa286a3f2cfbde8485e2b97a6e1114beec69b938f84379ca6091cf6ec7fed2e3cd93370e237c8fc33ba65e838032afd5275f81226a006b0bccbd7c145491426f757ad6f1512a1b2517700d31740532d19076cf26d829b143c62c01e0f4ad5856a6c0575ca24447bdddccfeab14eabe33e0e8703f0c3221cff82c3aaa3bf30aae2b0412e721c16b21555819044a064ed296f5996b6f21631bee6aeed54c6ff60246a60964533e02604405e23d84801f652ff2896e5d8802129f8f08dd21a4706c252c56973219e10d6b186b2f8d0fae54e227e8a43a3695c87f1d883aa3271909cc2494f43f57d924dfe07503a8885cad42d5c2df30930d67cd42c7daf710afb549a410112514556553ddece90322f1c4946b54f3e2d2a2d049c84a8a290478be83bb959b5d0e692b38699e35ac2b91ff758c7fa5f1f1741e3f76313e8a08ef4a9e2fa792b90e919eef2ff5b2ad8538547094984ecabe7c0217da4219d9e0e59dcccbe8d724467fb5cd0aef3a351552ca3c53514d03295696503b89bb09c34775c763309e967c5c4d5f8be0706c77d547be2b7a2733f8c6ab7026623ad8805cf0f106ff3810c0315ab0fa07f7b996fcbc61a5998ebe1dbb085a1fa3b3c97958ce4e8214233d624e97ffaf4934dda3733c2184f9210f0963f483ba115bfd21d775ac5030ddcb0587213dc9762d872f9f5b3bcb3ecf7e6af37cb4a4cd2218e2f5be46f5087423a8ee78f41af11f2d759cfa5ec9d682831b646a7b2b98f0a89024538b33569eb987e25529a04221ef89044fca31327fed4a5d3745c81a103b4df822b511b668247482c9ad3432994da564f221d4c8bcae6b4349e250ced0a4835c228ceac3b54aa932f1f4c154b03aeeafd2078604d12"}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@random_vendor={0xdd, 0x6, "2ec823cbecf1"}]}]]}]}, 0xec4}}, 0x0)

01:53:39 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
socket(0x0, 0x800, 0x8a)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002240), 0x80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000002400))
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000024c0), r0)
openat$full(0xffffffffffffff9c, &(0x7f00000025c0), 0x40801, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x24, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008c}, 0x4800)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000028c0)={@dev, @dev}, &(0x7f0000002900)=0xc)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000002e80), r0)

01:53:39 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x282041, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0)

[  750.971472][T14260] loop2: detected capacity change from 0 to 512
[  751.021230][T14260] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  751.042023][T14265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  751.091322][T14260] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:53:39 executing program 5:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3f}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfffffffffffffffe]}, 0x8})

[  751.150189][T14260] EXT4-fs mount: 6 callbacks suppressed
[  751.150209][T14260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
01:53:39 executing program 4:
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)

[  751.242998][T14260] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/551/file0 supports timestamps until 2038-01-19 (0x7fffffff)
01:53:39 executing program 1:
r0 = getpid()
syz_open_procfs$userns(r0, 0x0)
syz_open_procfs(r0, 0x0)

[  751.354564][T14260] overlayfs: failed to resolve './f': -2
[  751.473610][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.593219][T14259] loop0: detected capacity change from 0 to 32768
[  751.604274][T14259] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  751.638885][T14259] XFS (loop0): Ending clean mount
01:53:39 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/15, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x194, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@chsw_timing={0x68, 0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0xff4d]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0x5a, 0xf, [@dsss={0x3, 0x1}, @preq={0x82, 0x51, @not_ext={{}, 0x9, 0x0, 0x0, @device_a, 0x0, "", 0x0, 0x0, 0x5, [{{}, @broadcast, 0x6}, {{}, @device_b}, {{0x0, 0x0, 0x1}, @broadcast}, {{}, @broadcast}, {{0x0, 0x0, 0x1}, @device_a, 0x5}]}}]}, @NL80211_ATTR_IE={0xf1, 0x2a, [@fast_bss_trans={0x37, 0xe2, {0x0, 0x6, "a5a537e691446f9f2e4bb3bc78311971", "78cec8bf8418fbbdccbdd2f573956757779e3695277f7d567e10e5e06afbf486", "fc53d2a318e331befa9c481c40c5a43d2e5507b2605b3f1c4ac8b64e14228034", [{0x0, 0x26, "2dac7b52faf367119edf328f855df2e80694543974a62b92c4e432f042c93a7c339ddcdcb650"}, {0x0, 0xc, "9329cf179cb362df41b87f7d"}, {0x0, 0x21, "e011683167cb80883e4773b31e319ac4f591f9e6011f393ed92e8f4780a3797495"}, {0x0, 0x23, "9a768d11609358b282009faca43bf32b2a747c5958e62d592929f94f8e7f643a16282e"}, {0x0, 0x8, "79afa9bdeb6940f3"}, {0x0, 0x6, "69e8fc51e2f4"}]}}, @mesh_config={0x71, 0x7}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5f000000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x4, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xcb4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xfd, 0x80, [@channel_switch={0x25, 0x3}, @erp={0x2a, 0x1}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x4c}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @random_vendor={0xdd, 0xb4, "65bd468323c4d709451dc18b21707c27ae056275a131b47905de2bebb58d6a91f702337f5f17fcb3e15f4de83a564bb9b708f71521320bc6dc26448a9c0cb0d12d73a48e848f9139a46513e9dc4bf2b74247c53166c30ff54aac272d11a7773835602439a72b627180c88c5e31959ce50f5fae178018a0c8f52e4b4d1719427168c2e47f4b771004fc6527a2e715466beb7e048800b47055cadbfd056dbe9b8ec1c5d0a4d209d237aa3f7d4cc4195e2c9f6c74cc"}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d, 0x7f, [@supported_rates={0x1, 0x7, [{}, {}, {}, {}, {}, {}, {}]}, @supported_rates={0x1, 0x3, [{}, {}, {}]}, @dsss={0x3, 0x1, 0x80}, @mesh_id={0x72, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x9d, 0x0, 0x24]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x49, 0x2, "035a5b8b55fda92144b342e03ee8fe006239ffe8e28bef25e8cb0c6d5a3d39763f87f033133f049ce9a449de1c0707915f86d80f2196a592846baae021d484fd7b2d9c24df"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "7759905bb67a44c2253f681265"}]}, @NL80211_ATTR_BEACON_HEAD={0x34d, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @void, @val={0x1, 0x6, [{}, {}, {}, {0x0, 0x1}, {}, {}]}, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0xe5, {0x0, 0x0, 0xfe, "dc26a73d41937172d7f3b3a1ea90bd53ec646db52a33d7531c7b7f95a559c2a4ec89859a519a3f742bedead8fd1775c17244660a87ee9c143c255c95b26f26d1c6c1b828a99bf63a0181a7f4be4fdd79da01f501aad77cb7ce88ed8b8cd93ccfb836e8e624fc088a7b8e47fdfe0f52bebff2594e60fca710d63dc0deb4dec1dcd52e435d4041174c926e18b249989118aa5ab9670c0f4f2284db239d3440dac4fcf37b92f95ed048f6f97be9994ad1495053266226f9ee6ce30857ab8d81796e4fefbca591eb593ccf03143ef34cd5121f0b0b93a71221784444efbbdeb73e5d3852"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1}}, @val={0x76, 0x6}, [{0xdd, 0x6, "4fb4edf79f7f"}, {0xdd, 0xa6, "04b15a1202aa38939f9e196a086759432ef1cd50ff2c0116f6067d8bafb7043246169f4eab3dfefa37146ef23dd1c36ee498b2bfa8d50356e0275bf1a54712d738a5de3c3cf08170d7f38920c613e3a582d83fbe0c848b7b3e08d6104aa116782a4b2575c60507be3a604d0629d28c1f94f959d84f45210363aedb5b1b7de57ee36a9a608f403a0f7ee00d4c4b8c3920a45007d2c65fd27ea58d4bc010d85df528d987f4f1b9"}, {0xdd, 0xbc, "d1f2996a5237a61d702933250e934f46068831f1c7f72ec3800cd5dbc2c6715d581279f33b6f48968a869045197abe0087c844e33c1c2f80c3dfbbb9f6bdd6277aa4836131648dcb73dad3a10a1dd1578511640bc6af9819845b97251a64a62bda9434e012671c50f764fbfc93688b80040ccf943b3eac5faa7162f558efa5027f8b17dc49f6785e3401784bc3b2bf6c7b7a78792b6ed8aa0af4487118fbd51da1e0849b413e4cd8b94cd2fa8bcdfb4ad8e88acb9d909a740bc6cb4a"}, {0xdd, 0xa2, "3474f1bd3447a9a0f3b9922373d657c67d2dba9b66257a9cf5d2b9388d2d07fdd991f2399c5c95321052824ca928d153bad99a75585bdc5ba57f73a406073a977a9908deba6fa9a5eb2154718e3c8b5851e8f855c06340a48926c8d5c0a688019e36c22ec3dd2133fec6954ac92797d8906963a520055ce78cdb7a426ffc58d7f6531886f8fdfeea9d5725ed4fa0b80613f21b652e71e863ff8e6224d708931e61e8"}]}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x775, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@random_vendor={0xdd, 0x6, "2ec823cbecf1"}]}]]}]}, 0xec4}}, 0x0)

01:53:39 executing program 4:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)

01:53:40 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000080)=@raw=[@jmp], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xaf, &(0x7f0000000400)=""/175, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:40 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir='])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:40 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

01:53:40 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x10001, [{0x5}]}]}}, &(0x7f0000000440)=""/151, 0x32, 0x97, 0x1}, 0x20)

01:53:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff)

01:53:40 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0)
getpeername$ax25(r0, 0x0, 0x0)

[  751.885612][ T5066] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  751.920383][T14297] loop2: detected capacity change from 0 to 512
01:53:40 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:40 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/cgroups\x00', 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000024c0), r0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000002d00), 0xffffffffffffffff)

[  751.947405][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  751.994727][T14297] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:53:40 executing program 1:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@void, @val={0xc}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x5)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x6c00, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x28, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0)

[  752.111795][T14297] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  752.136299][T14297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  752.154035][T14297] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/552/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  752.261415][T14297] overlay: Bad value for 'upperdir'
[  752.352253][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:40 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/15, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:40 executing program 4:
r0 = socket(0x2, 0xa, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0)

01:53:40 executing program 5:
bpf$PROG_LOAD_XDP(0x22, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:40 executing program 1:
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x88082, 0x0)

01:53:40 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir='])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:40 executing program 0:
syz_genetlink_get_family_id$wireguard(&(0x7f0000002200), 0xffffffffffffffff)

01:53:40 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48)

01:53:40 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/vmstat\x00', 0x0, 0x0)

01:53:40 executing program 5:
r0 = socket(0x2, 0xa, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000009c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000740)={0x0}}, 0x0)

[  752.830245][T14324] loop2: detected capacity change from 0 to 512
[  752.896279][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:41 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x3, 0x9, &(0x7f0000000200)=""/9, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:41 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  752.931202][T14324] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:53:41 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}}, 0x4000001)

[  753.064982][T14324] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  753.079044][T14324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  753.091916][T14324] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/553/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  753.116934][T14324] overlay: Bad value for 'upperdir'
[  753.151742][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:41 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:41 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x5, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:41 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x80)

01:53:41 executing program 1:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000fc0), 0x282980, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0)

01:53:41 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:41 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir='])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:41 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$fb(r0, 0x0, 0x0)

01:53:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0, 0x14}}, 0x0)

01:53:41 executing program 1:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x545202, 0x0)

[  753.739905][T14352] loop2: detected capacity change from 0 to 512
01:53:42 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)

01:53:42 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040), 0x28)

01:53:42 executing program 1:
bpf$PROG_LOAD_XDP(0x9, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  753.839722][T14363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  753.887586][T14352] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  753.968740][T14352] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  754.012203][T14352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  754.025023][T14352] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/554/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  754.058863][T14352] overlay: Bad value for 'upperdir'
[  754.113814][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:42 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:42 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/cpuinfo\x00', 0x0, 0x0)

01:53:42 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}}, 0x0)

01:53:42 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x7, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

01:53:42 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,i'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:42 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x1c, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:42 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xb, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x404, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

01:53:42 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000940), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0)

[  754.700944][T14379] loop2: detected capacity change from 0 to 512
01:53:42 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x7, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  754.793384][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  754.808068][T14379] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  754.828942][T14379] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  754.844413][T14379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
01:53:43 executing program 0:
bpf$PROG_LOAD_XDP(0x17, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  754.888172][T14379] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/555/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  754.926248][T14379] overlay: Unknown parameter 'i'
[  754.980497][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:43 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:43 executing program 5:
r0 = fsopen(&(0x7f0000000940)='bpf\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000980)='\x00', 0x0, r1)

01:53:43 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@alu]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

01:53:43 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,i'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:43 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@alu]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:43 executing program 0:
fsopen(&(0x7f0000000940)='bpf\x00', 0x0)

01:53:43 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xf, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:43 executing program 4:
r0 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r0)

01:53:43 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x8f}, 0x48)

[  755.642429][T14407] loop2: detected capacity change from 0 to 512
01:53:43 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
geteuid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
openat$null(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x5)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0)

[  755.684425][T14413] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:43 executing program 5:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff)

[  755.752285][T14407] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  755.809940][T14407] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  755.842105][T14407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  755.859319][T14407] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/556/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  755.907853][T14407] overlay: Unknown parameter 'i'
[  755.941048][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:44 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:44 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)

01:53:44 executing program 1:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x0)

01:53:44 executing program 4:
bpf$PROG_LOAD_XDP(0xd, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:44 executing program 5:
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0)
socket(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000024c0), 0xffffffffffffffff)

01:53:44 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,i'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:44 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000080000000000000050000001834000001001000000000000000000018000000ff7f0000fe46b0"], &(0x7f0000000800)='GPL\x00', 0x6, 0xd3, &(0x7f0000000840)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:44 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x10001}]}}, &(0x7f0000000440)=""/151, 0x26, 0x97, 0x1}, 0x20)

01:53:44 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f40)='personality\x00')
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='/proc/cgroups\x00', &(0x7f0000000040)="86", 0x1)

[  756.565637][T14433] loop2: detected capacity change from 0 to 512
01:53:44 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x8}]}}, &(0x7f0000000440)=""/151, 0x26, 0x97, 0x1}, 0x20)

01:53:44 executing program 0:
r0 = memfd_create(&(0x7f0000000000)=',{,$k(^]\xe7$\x00', 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

[  756.624538][T14433] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  756.654932][T14446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:44 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
accept$netrom(r0, 0x0, 0x0)

[  756.704174][T14433] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  756.717326][T14433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  756.732412][T14433] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/557/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  756.799516][T14433] overlay: Unknown parameter 'i'
[  756.889384][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:45 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:45 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$xdp(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0)

01:53:45 executing program 4:
bpf$PROG_LOAD_XDP(0x1e, 0x0, 0x0)

01:53:45 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

01:53:45 executing program 0:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x0)

01:53:45 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:45 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x17, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:45 executing program 4:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x0)

01:53:45 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x8, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:45 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000140)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x9, &(0x7f0000000200)=""/9, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  757.499755][T14463] loop2: detected capacity change from 0 to 512
[  757.567708][T14466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:45 executing program 4:
bpf$PROG_LOAD_XDP(0x11, 0x0, 0x0)

01:53:45 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x68}}, 0x0)

[  757.704912][T14463] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  757.750969][T14463] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  757.768006][T14463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  757.780479][T14463] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/558/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  757.807687][T14463] overlay: Bad value for 'index'
[  757.865825][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:46 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:46 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b5"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:46 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x1)
write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120)

01:53:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

01:53:46 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000080)="98", 0x1)

01:53:46 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:46 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

01:53:46 executing program 5:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3f}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)

01:53:46 executing program 0:
bpf$PROG_LOAD_XDP(0xe, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  758.452947][T14490] loop2: detected capacity change from 0 to 512
01:53:46 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80)

01:53:46 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040))

[  758.493774][T14496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:46 executing program 1:
bpf$PROG_LOAD_XDP(0x8, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  758.529243][T14490] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  758.633666][T14490] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  758.662030][T14490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  758.675732][T14490] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/559/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  758.713166][T14490] overlay: Bad value for 'index'
[  758.746935][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:47 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:47 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x5}]}]}}, &(0x7f0000000440)=""/151, 0x32, 0x97, 0x1}, 0x20)

01:53:47 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

01:53:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x14, 0xf, 0x6, 0x201}, 0x14}}, 0x0)

01:53:47 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x8f, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48)

01:53:47 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:47 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801}, 0x14}}, 0x0)

01:53:47 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket(0x0, 0x0, 0x0)

01:53:47 executing program 1:
socket(0x2, 0x6, 0x6)

01:53:47 executing program 5:
openat$ttynull(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

[  759.357749][T14513] loop2: detected capacity change from 0 to 512
01:53:47 executing program 4:
bpf$PROG_LOAD_XDP(0x3, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  759.458368][T14513] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:53:47 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00), 0x10}, 0x80)

[  759.527816][T14513] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  759.599696][T14513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  759.632259][T14513] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/560/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  759.681590][T14513] overlay: Bad value for 'index'
[  759.748256][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:48 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0)

01:53:48 executing program 5:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3f}, 0x0, 0x0)

01:53:48 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:48 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

01:53:48 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xd, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:48 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x19, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:48 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00')
fsmount(r0, 0x0, 0x0)

01:53:48 executing program 1:
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)

[  760.241636][T14543] loop2: detected capacity change from 0 to 512
01:53:48 executing program 5:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

01:53:48 executing program 0:
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/cgroups\x00', 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000024c0), r0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000002d00), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x0)

[  760.344441][T14543] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:53:48 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xe, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:48 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x5}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20)

01:53:48 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000001500)='oom_score\x00')
ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0)

[  760.401131][T14543] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  760.473520][T14543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  760.511930][T14543] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/561/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  760.545003][T14543] overlay: Bad value for 'index'
[  760.603638][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:49 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:49 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:53:49 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000940), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000980)={0x0, @raw_data="4e79c84247012241fd684df57b09a9c0565d105645d49b35b43a107024e8ee4e4e6d64310e4c03a91defd9cdf4986cdf4ed67b0af129df30059960bff282dd707907cf9b8b7f116401c565adaaabf97b54384d3e966d2e4c51356797d0ebcd9f2fad6e459fdf53c657ad8f46acf8a5e87a06a31201420c056a93cb63ce906faec07017b3b6e343a567c82d570081f49017f337b654c261f2362d8becf4a67b4a6e233e0a6085167cb99ae0c0ac6b5fb67e7c54ded59c44d47bb5a100c41d6594910c372194a0e19c"})

01:53:49 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cebbbca5"}, 0x0, 0x2, {0x0}})

01:53:49 executing program 0:
bpf$PROG_LOAD_XDP(0x13, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:49 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:49 executing program 0:
bpf$PROG_LOAD_XDP(0x1c, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:49 executing program 5:
syz_genetlink_get_family_id$wireguard(&(0x7f00000024c0), 0xffffffffffffffff)

01:53:49 executing program 4:
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)

[  761.193160][T14576] loop2: detected capacity change from 0 to 512
01:53:49 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000440)=""/151, 0x0, 0x97}, 0x20)

01:53:49 executing program 0:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000fc0), 0x282980, 0x0)

01:53:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0)

[  761.300085][T14576] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  761.323879][T14576] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  761.363468][T14576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  761.377049][T14576] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/562/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  761.400519][T14576] overlay: Bad value for 'index'
[  761.476317][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:50 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:50 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x4}]}]}}, 0x0, 0x32}, 0x20)

01:53:50 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:50 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=o'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:50 executing program 1:
syz_open_procfs(0x0, &(0x7f00000009c0)='net/llc/core\x00')

01:53:50 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b58b0c00ffffffff184300000100000000000000000000008510"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:50 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff)

01:53:50 executing program 5:
write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0)

01:53:50 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0)

01:53:50 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  762.149737][T14600] loop2: detected capacity change from 0 to 512
01:53:50 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:50 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))

[  762.241608][T14600] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  762.260999][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  762.300571][T14600] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  762.315772][T14600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  762.329872][T14600] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/563/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  762.358650][T14600] overlay: Bad value for 'index'
[  762.464217][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:51 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:51 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/cgroups\x00', 0x0, 0x0)
connect$nfc_raw(r0, &(0x7f0000000000), 0x10)

01:53:51 executing program 0:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)

01:53:51 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)

01:53:51 executing program 1:
bpf$PROG_LOAD_XDP(0x1d, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:51 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:51 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000005c0)={&(0x7f0000000500), 0x8, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}}, 0x0)

01:53:51 executing program 5:
syz_open_dev$vcsn(&(0x7f0000000000), 0x90d3, 0xfa7001)

01:53:51 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)})

[  763.121405][T14630] loop2: detected capacity change from 0 to 512
01:53:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002d00)={'vcan0\x00'})

01:53:51 executing program 0:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0)

[  763.178674][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
01:53:51 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

[  763.229066][T14630] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  763.333263][T14630] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  763.351682][T14630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  763.365269][T14630] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/564/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  763.409153][T14630] overlayfs: upper fs needs to support d_type.
[  763.440704][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:52 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:52 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

01:53:52 executing program 5:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00')

01:53:52 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)

01:53:52 executing program 4:
syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x410001)

01:53:52 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:52 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x15, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:52 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:52 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})

01:53:52 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  764.027678][T14654] loop2: detected capacity change from 0 to 512
[  764.081977][T14654] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  764.143568][T14654] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  764.158063][T14654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  764.170515][T14654] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/565/file0 supports timestamps until 2038-01-19 (0x7fffffff)
01:53:52 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48)

01:53:52 executing program 0:
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x1e5040, 0x0)

[  764.178322][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  764.205937][T14654] overlayfs: upper fs needs to support d_type.
[  764.302398][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:53 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:53 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:53 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/cgroups\x00', 0x0, 0x0)
connect$nfc_raw(r0, 0x0, 0x0)

01:53:53 executing program 5:
openat$null(0xffffffffffffff9c, 0x0, 0x343400, 0x0)

01:53:53 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000080)=@raw=[@kfunc], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:53 executing program 0:
bpf$PROG_LOAD_XDP(0xf, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:53 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

01:53:53 executing program 4:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x203, 0x0)

01:53:53 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000940), 0x1d1, 0x2)

01:53:53 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000440)=""/151, 0x26, 0x97, 0x1}, 0x20)

[  764.994912][T14680] loop2: detected capacity change from 0 to 512
01:53:53 executing program 0:
mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

[  765.055975][T14680] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  765.110703][T14680] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  765.144247][T14680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  765.179576][T14680] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/566/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  765.236315][T14680] overlayfs: upper fs needs to support d_type.
[  765.264239][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:53 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:53 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/cgroups\x00', 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000024c0), r0)

01:53:53 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000140)=@framed={{}, [@alu={0x7}, @cb_func]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:53 executing program 5:
sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

01:53:53 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
socketpair(0x0, 0xe, 0x0, &(0x7f0000000400))

01:53:53 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:54 executing program 4:
bpf$PROG_LOAD_XDP(0x23, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0)

01:53:54 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000940), 0x0, 0x2)

01:53:54 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newneigh={0x50, 0x1c, 0x0, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, [@NDA_PROTOCOL={0x5, 0xc, 0x20}, @NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_VLAN={0x6}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0xee, 0x10000000, 0x2}}, @NDA_VLAN={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000001c0))
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x61caae2b3e122957}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x3c}}, 0x8080)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x10080, 0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x24000080)
read$fb(r0, &(0x7f0000000600)=""/142, 0x8e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@multicast2, @dev}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000940)={@broadcast, @broadcast, <r2=>0x0}, &(0x7f0000000980)=0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x7, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0xd3, &(0x7f0000000840)=""/211, 0x41000, 0x11, '\x00', r2, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x1, 0xf, 0x4aa}, 0x10}, 0x80)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, 0x0, 0xc080)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c00))
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000001500))

[  765.944052][T14710] loop2: detected capacity change from 0 to 512
01:53:54 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)

01:53:54 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

[  766.030122][T14710] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  766.104940][T14710] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  766.133115][T14710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  766.155368][T14710] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/567/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  766.206482][T14710] overlayfs: upper fs needs to support d_type.
[  766.238722][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:54 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$fb(r0, 0x0, 0x0)

01:53:54 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/schedstat\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

01:53:54 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00')

01:53:54 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000940), 0x1d1, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000980)={0x2, @raw_data="4e79c84247012241fd684df57b09a9c0565d105645d49b35b43a107024e8ee4e4e6d64310e4c03a91defd9cdf4986cdf4ed67b0af129df30059960bff282dd707907cf9b8b7f116401c565adaaabf97b54384d3e966d2e4c51356797d0ebcd9f2fad6e459fdf53c657ad8f46acf8a5e87a06a31201420c056a93cb63ce906faec07017b3b6e343a567c82d570081f49017f337b654c261f2362d8becf4a67b4a6e233e0a6085167cb99ae0c0ac6b5fb67e7c54ded59c44d47bb5a100c41d6594910c372194a0e19c"})

01:53:54 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:54 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:55 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x13, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:55 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x601, 0x0)

01:53:55 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f00000025c0), 0x40801, 0x0)

01:53:55 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, 0x0)

[  766.896848][T14733] loop2: detected capacity change from 0 to 512
01:53:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x194, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@chsw_timing={0x68, 0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0xfffd, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0x5a, 0xf, [@dsss={0x3, 0x1, 0x24}, @preq={0x82, 0x51, @not_ext={{}, 0x0, 0x0, 0x0, @device_a, 0x0, "", 0x0, 0x0, 0x5, [{{}, @broadcast}, {{}, @device_b}, {{}, @broadcast}, {{}, @broadcast}, {}]}}]}, @NL80211_ATTR_IE={0xf1, 0x2a, [@fast_bss_trans={0x37, 0xe2, {0x0, 0x6, "a5a537e691446f9f2e4bb3bc78311971", "78cec8bf8418fbbdccbdd2f573956757779e3695277f7d567e10e5e06afbf486", "fc53d2a318e331befa9c481c40c5a43d2e5507b2605b3f1c4ac8b64e14228034", [{0x0, 0x26, "2dac7b52faf367119edf328f855df2e80694543974a62b92c4e432f042c93a7c339ddcdcb650"}, {0x0, 0xc, "9329cf179cb362df41b87f7d"}, {0x0, 0x21, "e011683167cb80883e4773b31e319ac4f591f9e6011f393ed92e8f4780a3797495"}, {0x0, 0x23, "9a768d11609358b282009faca43bf32b2a747c5958e62d592929f94f8e7f643a16282e"}, {0x0, 0x8, "79afa9bdeb6940f3"}, {0x0, 0x6, "69e8fc51e2f4"}]}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2}}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0xff]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xcb4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xfd, 0x80, [@channel_switch={0x25, 0x3}, @erp={0x2a, 0x1}, @prep={0x83, 0x25, @ext={{}, 0x7f, 0x0, @device_a, 0x0, @device_a, 0x3, 0x8}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @random_vendor={0xdd, 0xb4, "65bd468323c4d709451dc18b21707c27ae056275a131b47905de2bebb58d6a91f702337f5f17fcb3e15f4de83a564bb9b708f71521320bc6dc26448a9c0cb0d12d73a48e848f9139a46513e9dc4bf2b74247c53166c30ff54aac272d11a7773835602439a72b627180c88c5e31959ce50f5fae178018a0c8f52e4b4d1719427168c2e47f4b771004fc6527a2e715466beb7e048800b47055cadbfd056dbe9b8ec1c5d0a4d209d237aa3f7d4cc4195e2c9f6c74cc"}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d, 0x7f, [@supported_rates={0x1, 0x7, [{}, {0x0, 0x1}, {}, {}, {}, {}, {}]}, @supported_rates={0x1, 0x3, [{0x1, 0x1}, {}, {}]}, @dsss={0x3, 0x1}, @mesh_id={0x72, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x49, 0x2, "035a5b8b55fda92144b342e03ee8fe006239ffe8e28bef25e8cb0c6d5a3d39763f87f033133f049ce9a449de1c0707915f86d80f2196a592846baae021d484fd7b2d9c24df"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "7759905bb67a44c2253f681265"}]}, @NL80211_ATTR_BEACON_HEAD={0x34d, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @void, @val={0x1, 0x6, [{}, {}, {}, {}, {}, {}]}, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0xe5, {0x0, 0x0, 0x0, "dc26a73d41937172d7f3b3a1ea90bd53ec646db52a33d7531c7b7f95a559c2a4ec89859a519a3f742bedead8fd1775c17244660a87ee9c143c255c95b26f26d1c6c1b828a99bf63a0181a7f4be4fdd79da01f501aad77cb7ce88ed8b8cd93ccfb836e8e624fc088a7b8e47fdfe0f52bebff2594e60fca710d63dc0deb4dec1dcd52e435d4041174c926e18b249989118aa5ab9670c0f4f2284db239d3440dac4fcf37b92f95ed048f6f97be9994ad1495053266226f9ee6ce30857ab8d81796e4fefbca591eb593ccf03143ef34cd5121f0b0b93a71221784444efbbdeb73e5d3852"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x6, "4fb4edf79f7f"}, {0xdd, 0xa6, "04b15a1202aa38939f9e196a086759432ef1cd50ff2c0116f6067d8bafb7043246169f4eab3dfefa37146ef23dd1c36ee498b2bfa8d50356e0275bf1a54712d738a5de3c3cf08170d7f38920c613e3a582d83fbe0c848b7b3e08d6104aa116782a4b2575c60507be3a604d0629d28c1f94f959d84f45210363aedb5b1b7de57ee36a9a608f403a0f7ee00d4c4b8c3920a45007d2c65fd27ea58d4bc010d85df528d987f4f1b9"}, {0xdd, 0xbc, "d1f2996a5237a61d702933250e934f46068831f1c7f72ec3800cd5dbc2c6715d581279f33b6f48968a869045197abe0087c844e33c1c2f80c3dfbbb9f6bdd6277aa4836131648dcb73dad3a10a1dd1578511640bc6af9819845b97251a64a62bda9434e012671c50f764fbfc93688b80040ccf943b3eac5faa7162f558efa5027f8b17dc49f6785e3401784bc3b2bf6c7b7a78792b6ed8aa0af4487118fbd51da1e0849b413e4cd8b94cd2fa8bcdfb4ad8e88acb9d909a740bc6cb4a"}, {0xdd, 0xa2, "3474f1bd3447a9a0f3b9922373d657c67d2dba9b66257a9cf5d2b9388d2d07fdd991f2399c5c95321052824ca928d153bad99a75585bdc5ba57f73a406073a977a9908deba6fa9a5eb2154718e3c8b5851e8f855c06340a48926c8d5c0a688019e36c22ec3dd2133fec6954ac92797d8906963a520055ce78cdb7a426ffc58d7f6531886f8fdfeea9d5725ed4fa0b80613f21b652e71e863ff8e6224d708931e61e8"}]}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x779, 0x91, "5ba5c171b3db3d85b2309339aba3f1c4465f4913bb2b8de140fc8f67f610a311b4bc450f20c77ed5b48509a2b444dffe2eb52fcc6351d781f667b0c214415f7945b942fd33cb4f7d331f6d996342f0f225e1be8c415bc6f84bfcb660b1ffa074387aefb692073e6071d08edaec1ff86d2a935f35a891620d9183e72534839780ae34cdd7ef8ebf3d2b98a84644fa61893c005f34e43e8029918378a051a9537fd0e7d3f111961b7695fac5b99eee21274c82d59ee3ff171be1aaebb07a91deaca85c049e9826248b043716b89eb5af325926003894ad41a2427afe644214295e55f227c4254c17a75ea14dd8068c86b8661706d428c287336a57da24ea199e4f7dd846e5de7ccca68027f4c91969f37844a33c4cf8442057ff71311a02ef862de075df0df276e4849f1623090b7a71d4764288b9e9f46888f385dc8eb4184fa5aec6cfb427fa76f1e69d938b57492172e062093a622fc8e2e5bf9f72a632d72c31d24168fea4511ee7f1ff35ecc8dcea6bb1d924b70a530113313d0a55659923dc023e692af1037b0966a08905b81fd8befa0d8723c2894b0b26e3812fcfc5ff19d6746afbb08966e9ecb7ed910edd9a2970da8c84340af1ce5c78f2743a5546a1e978a8581c8c4422df837da2b32e3a41da6d5721e5d04d5d57f2ef53130e0a0eb5cb80ac39b449dcd9f5976d20ce9807fbde481996da5332b7f335d05b4ceaf80ba12c9cfe832ebb6cf610e719dd7b70b0d60d7b2945f33e59b85d2cbf89f9d42c3017c63bb41dafd668843388e8842ccb133732e0c6843da529152571a8e3bdd941171b0dcb711c11e7c43b3c9ef929149975a50ab52c8857a4828b941e7d18a2d4bd159fb47b1278f94a1597f71e8b7ae6fc948c86911b7759f6468fda90a7b0c0f9eb35e007871cd4f14e3464c7d90ccea1ba0172fae3b929b5ca6431659100f84052723fbc6b78c047c420c1ebe0d863b6c5c1a8d563a04d68ec3183151519276d94c2957cc25d3664126ca87fda011e2139ba2a1ec80904b8013933dc6f0eb15ce5e122fbe6059e36e9b49d4a0b6de9b0be2c6246cc55794740c0a09e7fdbecefdf340d704df7719123f183986dcea9852cb41965d8a61c70a2c5c585d8754f6e34a0b44a2b54115613dcf1e31fd564c5c508ddf798ad3baa985de73d76538f3884498725268a7d2fa1ab290efbc3ae6adaa34036c9f735d2deda8c1cd16ff977f171b135547c20beeb7e0c622054eecd0236f6b3ec4393fb3a9cc4d8946b87d973781025a83e816570b86450d32f6aa9ed53bed38d63ab880a9eda138ea9c0f59c30f35997764481feecd712c89b3b5a701b54257c0aea667a9c4cf2be2241615b16e090c663d63931c81beec7ee3ddf78e7c4a9adff678bcaac908581186a48123d36338468920a702111f1d77d95d51e6e2c2d21c987ce05afb3b62180d7e46047934c3284420a561d5bc90f5a677024e926dbccc6eae5cc79382582e57601a1b9f83b445c24be23d000066045cc705404ed11a21d44646a22e70099ea5510ff7a51bad08e45a9cb66f5ee38549ca8cf5e9db9dc19bf4d8aee9622199cf04b695dd1fca2bf071cebbb56fdcda77d75a03764ef8e0dda4d7d7577e18e516cb508b754a68a54c7c7832220f1a3a7a2bab939fd4dcad154a6d6199b222a154785b7b9c4dbe57528e7c5a9970327271e6500515d7bb03bf9d0151c69efb49c5950fa2496679e7655fffd71bad86da41ed5ede2a8fb071f5a1cc90c59c39e87e8281558ef4bc581f1b6c02e73699150ba244a853719edae1e5d6fa286a3f2cfbde8485e2b97a6e1114beec69b938f84379ca6091cf6ec7fed2e3cd93370e237c8fc33ba65e838032afd5275f81226a006b0bccbd7c145491426f757ad6f1512a1b2517700d31740532d19076cf26d829b143c62c01e0f4ad5856a6c0575ca24447bdddccfeab14eabe33e0e8703f0c3221cff82c3aaa3bf30aae2b0412e721c16b21555819044a064ed296f5996b6f21631bee6aeed54c6ff60246a60964533e02604405e23d84801f652ff2896e5d8802129f8f08dd21a4706c252c56973219e10d6b186b2f8d0fae54e227e8a43a3695c87f1d883aa3271909cc2494f43f57d924dfe07503a8885cad42d5c2df30930d67cd42c7daf710afb549a410112514556553ddece90322f1c4946b54f3e2d2a2d049c84a8a290478be83bb959b5d0e692b38699e35ac2b91ff758c7fa5f1f1741e3f76313e8a08ef4a9e2fa792b90e919eef2ff5b2ad8538547094984ecabe7c0217da4219d9e0e59dcccbe8d724467fb5cd0aef3a351552ca3c53514d03295696503b89bb09c34775c763309e967c5c4d5f8be0706c77d547be2b7a2733f8c6ab7026623ad8805cf0f106ff3810c0315ab0fa07f7b996fcbc61a5998ebe1dbb085a1fa3b3c97958ce4e8214233d624e97ffaf4934dda3733c2184f9210f0963f483ba115bfd21d775ac5030ddcb0587213dc9762d872f9f5b3bcb3ecf7e6af37cb4a4cd2218e2f5be46f5087423a8ee78f41af11f2d759cfa5ec9d682831b646a7b2b98f0a89024538b33569eb987e25529a04221ef89044fca31327fed4a5d3745c81a103b4df822b511b668247482c9ad3432994da564f221d4c8bcae6b4349e250ced0a4835c228ceac3b54aa932f1f4c154b03aeeafd2078604d12aae10d04"}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_IE={0x4}]]}]}, 0xec4}}, 0x40080)

01:53:55 executing program 5:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

01:53:55 executing program 4:
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

[  767.008343][T14733] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  767.038856][T14733] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:53:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

[  767.054907][T14733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  767.067827][T14733] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/568/file0 supports timestamps until 2038-01-19 (0x7fffffff)
01:53:55 executing program 4:
openat$ttynull(0xffffffffffffff9c, &(0x7f00000004c0), 0x827c0, 0x0)

01:53:55 executing program 0:
bpf$PROG_LOAD_XDP(0xa, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  767.121648][T14733] overlayfs: upper fs needs to support d_type.
[  767.256698][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:55 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:55 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000440)=""/151, 0x32, 0x97, 0x1}, 0x20)

01:53:55 executing program 5:
memfd_create(&(0x7f0000000000)='*%\x00', 0x0)

01:53:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0)

01:53:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:55 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)

01:53:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000540)={&(0x7f0000000240), 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)

01:53:56 executing program 1:
mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

01:53:56 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="85"], &(0x7f0000000800)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  767.862180][T14771] loop2: detected capacity change from 0 to 512
01:53:56 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/asound/timers\x00', 0x0, 0x0)

[  767.925270][T14771] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:53:56 executing program 4:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001300)={0xffffffffffffffff}, 0x4)

01:53:56 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan0\x00'})

[  767.981166][T14771] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  768.014596][T14771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  768.036705][T14771] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/569/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  768.115778][T14771] overlayfs: upper fs needs to support d_type.
[  768.165963][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:56 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:56 executing program 0:
bpf$PROG_LOAD_XDP(0x6, 0x0, 0x0)

01:53:56 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x8}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

01:53:56 executing program 5:
bpf$PROG_LOAD_XDP(0x18, 0x0, 0x0)

01:53:56 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20)

01:53:56 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:56 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x1e, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:56 executing program 4:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0)

01:53:56 executing program 1:
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0xffff80009b93ffff)

01:53:56 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000140)=@framed={{}, [@alu={0x7}, @cb_func]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x9, &(0x7f0000000200)=""/9, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  768.739152][T14799] loop2: detected capacity change from 0 to 512
[  768.787859][T14799] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  768.822455][T14799] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:53:57 executing program 5:
bpf$PROG_LOAD_XDP(0x11, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:57 executing program 4:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f40)='personality\x00')

[  768.843236][T14799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  768.862991][T14799] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/570/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  768.973537][T14799] overlayfs: upper fs needs to support d_type.
[  769.029507][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:57 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:57 executing program 5:
geteuid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000004a0008002dbd7000fcdbdf250a003800", @ANYRES32=0x0, @ANYBLOB="07000000080002000c00000008000200050000001400010000000000000000000000ffff0a0101001400010000000000000000000000ffffe000000114000100fe8000000000000000120000000000bb"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff)

01:53:57 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x8}]}}, 0x0, 0x26}, 0x20)

01:53:57 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x1d, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:57 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:57 executing program 4:
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0xffff80009b00ffff)

01:53:57 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:57 executing program 4:
socketpair(0x1a, 0x0, 0x0, &(0x7f0000001240))

01:53:57 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0)

01:53:57 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x0, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  769.730344][T14818] loop2: detected capacity change from 0 to 512
01:53:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xa3001c2}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0)

[  769.817088][T14818] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:53:58 executing program 4:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0)

[  769.857897][T14818] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  769.872786][T14818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  769.885341][T14818] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/571/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  769.937839][T14818] overlayfs: upper fs needs to support d_type.
[  769.986244][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:58 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:58 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x4}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20)

01:53:58 executing program 0:
r0 = fsopen(&(0x7f0000000940)='bpf\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff)

01:53:58 executing program 5:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x282041, 0x0)
accept$netrom(r0, 0x0, 0x0)

01:53:58 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:58 executing program 4:
bpf$PROG_LOAD_XDP(0x1c, 0x0, 0x0)

01:53:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x194, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0xff, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@chsw_timing={0x68, 0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0x5a, 0xf, [@dsss={0x3, 0x1}, @preq={0x82, 0x51, @not_ext={{0x0, 0x0, 0x1}, 0x9, 0x0, 0x8, @device_a, 0x0, "", 0x0, 0x0, 0x5, [{{}, @broadcast}, {{}, @device_b}, {{}, @broadcast}, {{}, @broadcast}, {}]}}]}, @NL80211_ATTR_IE={0xf1, 0x2a, [@fast_bss_trans={0x37, 0xe2, {0x0, 0x6, "a5a537e691446f9f2e4bb3bc78311971", "78cec8bf8418fbbdccbdd2f573956757779e3695277f7d567e10e5e06afbf486", "fc53d2a318e331befa9c481c40c5a43d2e5507b2605b3f1c4ac8b64e14228034", [{0x0, 0x26, "2dac7b52faf367119edf328f855df2e80694543974a62b92c4e432f042c93a7c339ddcdcb650"}, {0x0, 0xc, "9329cf179cb362df41b87f7d"}, {0x0, 0x21, "e011683167cb80883e4773b31e319ac4f591f9e6011f393ed92e8f4780a3797495"}, {0x3, 0x23, "9a768d11609358b282009faca43bf32b2a747c5958e62d592929f94f8e7f643a16282e"}, {0x0, 0x8, "79afa9bdeb6940f3"}, {0x0, 0x6, "69e8fc51e2f4"}]}}, @mesh_config={0x71, 0x7}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ba}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xcb4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xfd, 0x80, [@channel_switch={0x25, 0x3}, @erp={0x2a, 0x1}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_a, 0x3, 0x0, @device_a, 0x10001}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @random_vendor={0xdd, 0xb4, "65bd468323c4d709451dc18b21707c27ae056275a131b47905de2bebb58d6a91f702337f5f17fcb3e15f4de83a564bb9b708f71521320bc6dc26448a9c0cb0d12d73a48e848f9139a46513e9dc4bf2b74247c53166c30ff54aac272d11a7773835602439a72b627180c88c5e31959ce50f5fae178018a0c8f52e4b4d1719427168c2e47f4b771004fc6527a2e715466beb7e048800b47055cadbfd056dbe9b8ec1c5d0a4d209d237aa3f7d4cc4195e2c9f6c74cc"}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d, 0x7f, [@supported_rates={0x1, 0x7, [{}, {}, {}, {0x0, 0x1}, {}, {}, {}]}, @supported_rates={0x1, 0x3, [{}, {}, {}]}, @dsss={0x3, 0x1}, @mesh_id={0x72, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x49, 0x2, "035a5b8b55fda92144b342e03ee8fe006239ffe8e28bef25e8cb0c6d5a3d39763f87f033133f049ce9a449de1c0707915f86d80f2196a592846baae021d484fd7b2d9c24df"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "7759905bb67a44c2253f681265"}]}, @NL80211_ATTR_BEACON_HEAD={0x34d, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @void, @val={0x1, 0x6, [{}, {}, {}, {}, {}, {}]}, @val={0x3, 0x1}, @val={0x4, 0x6, {0x1}}, @val={0x6, 0x2}, @val={0x5, 0xe5, {0x0, 0x0, 0x0, "dc26a73d41937172d7f3b3a1ea90bd53ec646db52a33d7531c7b7f95a559c2a4ec89859a519a3f742bedead8fd1775c17244660a87ee9c143c255c95b26f26d1c6c1b828a99bf63a0181a7f4be4fdd79da01f501aad77cb7ce88ed8b8cd93ccfb836e8e624fc088a7b8e47fdfe0f52bebff2594e60fca710d63dc0deb4dec1dcd52e435d4041174c926e18b249989118aa5ab9670c0f4f2284db239d3440dac4fcf37b92f95ed048f6f97be9994ad1495053266226f9ee6ce30857ab8d81796e4fefbca591eb593ccf03143ef34cd5121f0b0b93a71221784444efbbdeb73e5d3852"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x6, "4fb4edf79f7f"}, {0xdd, 0xa6, "04b15a1202aa38939f9e196a086759432ef1cd50ff2c0116f6067d8bafb7043246169f4eab3dfefa37146ef23dd1c36ee498b2bfa8d50356e0275bf1a54712d738a5de3c3cf08170d7f38920c613e3a582d83fbe0c848b7b3e08d6104aa116782a4b2575c60507be3a604d0629d28c1f94f959d84f45210363aedb5b1b7de57ee36a9a608f403a0f7ee00d4c4b8c3920a45007d2c65fd27ea58d4bc010d85df528d987f4f1b9"}, {0xdd, 0xbc, "d1f2996a5237a61d702933250e934f46068831f1c7f72ec3800cd5dbc2c6715d581279f33b6f48968a869045197abe0087c844e33c1c2f80c3dfbbb9f6bdd6277aa4836131648dcb73dad3a10a1dd1578511640bc6af9819845b97251a64a62bda9434e012671c50f764fbfc93688b80040ccf943b3eac5faa7162f558efa5027f8b17dc49f6785e3401784bc3b2bf6c7b7a78792b6ed8aa0af4487118fbd51da1e0849b413e4cd8b94cd2fa8bcdfb4ad8e88acb9d909a740bc6cb4a"}, {0xdd, 0xa2, "3474f1bd3447a9a0f3b9922373d657c67d2dba9b66257a9cf5d2b9388d2d07fdd991f2399c5c95321052824ca928d153bad99a75585bdc5ba57f73a406073a977a9908deba6fa9a5eb2154718e3c8b5851e8f855c06340a48926c8d5c0a688019e36c22ec3dd2133fec6954ac92797d8906963a520055ce78cdb7a426ffc58d7f6531886f8fdfeea9d5725ed4fa0b80613f21b652e71e863ff8e6224d708931e61e8"}]}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x775, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@random_vendor={0xdd, 0x6, "2ec823cbecf1"}]}]]}]}, 0xec4}}, 0x0)

01:53:58 executing program 1:
syz_genetlink_get_family_id$tipc2(&(0x7f0000002d00), 0xffffffffffffffff)

01:53:58 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48)

01:53:58 executing program 5:
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0)

01:53:58 executing program 4:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)

01:53:58 executing program 0:
bpf$PROG_LOAD_XDP(0x7, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  770.744437][T14853] loop2: detected capacity change from 0 to 512
[  770.840298][T14853] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  770.871631][T14853] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  770.912940][T14853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  770.925302][T14853] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/572/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  770.970848][T14853] overlayfs: upper fs needs to support d_type.
[  770.999350][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:53:59 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:53:59 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f40)='personality\x00')
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0)
syz_clone(0x5220480, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)

01:53:59 executing program 1:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

01:53:59 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'gre0\x00', 0x0})

01:53:59 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000740))

01:53:59 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:53:59 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0xd3, &(0x7f0000000840)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  771.600963][T14877] loop2: detected capacity change from 0 to 512
01:53:59 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})

01:53:59 executing program 4:
bpf$PROG_LOAD_XDP(0x4, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  771.645454][T14877] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  771.681888][T14877] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:53:59 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b58b0c00ffffffff1843000001000000000000000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xaf, &(0x7f0000000080)=""/175, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:53:59 executing program 0:
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0xc440, 0x0)

01:53:59 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)

[  771.705189][T14877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  771.726004][T14877] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/573/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  771.769793][T14877] overlayfs: upper fs needs to support d_type.
[  771.863615][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:00 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:00 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:00 executing program 4:
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)

01:54:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

01:54:00 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000013c0)={&(0x7f0000001280), 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@val, @val={0xc}}}, [@NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL, @NL80211_MESHCONF_PLINK_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOTMODE, @NL80211_MESHCONF_CONFIRM_TIMEOUT, @NL80211_MESHCONF_HOLDING_TIMEOUT, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL, @NL80211_MESHCONF_MAX_RETRIES, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT]}, @NL80211_ATTR_WIPHY, @NL80211_ATTR_MESH_CONFIG={0x0, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL]}]}, 0x7}}, 0x0)

01:54:00 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x1)
write$UHID_CREATE(r0, 0x0, 0x0)

01:54:00 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:00 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000470601"], 0x20}}, 0x0)

01:54:00 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  772.519232][T14903] loop2: detected capacity change from 0 to 512
01:54:00 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  772.604629][T14903] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:54:00 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000140)=@framed={{}, [@alu={0x0, 0x0, 0x3}, @cb_func]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x9, &(0x7f0000000200)=""/9, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  772.711226][T14903] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  772.736938][T14903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  772.749697][T14903] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/574/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  772.784771][T14903] overlayfs: upper fs needs to support d_type.
[  772.823068][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:01 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xffffff9a}}, 0x0)

01:54:01 executing program 1:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x301, 0x0)

01:54:01 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)})

01:54:01 executing program 0:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000400))

01:54:01 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:01 executing program 5:
fanotify_init(0x50, 0x0)

01:54:01 executing program 1:
syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0)

01:54:01 executing program 4:
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100))
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)

[  773.459041][T14931] loop2: detected capacity change from 0 to 512
[  773.545108][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  773.577002][T14937] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
01:54:01 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@ipv6_getaddr={0x20, 0x16, 0x0, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0xe0, 0xc8}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000150}, 0x0)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x9)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001840)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f0000001580)={0x230, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdac}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "e33cf2660aff93837b9d644468a04f602ec12c54c77efd1adb233b45b8b0"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0xda, 0x3, "49310a542238cf54f418718c4e0c5189610036122c2f83d9ab0fed777358274e3edaccb7eff5b75d0edc2fc334d27a91052c6059c50f893a0ada8c7d5cfbce432ba5137f200d1b8a9a8081a7efc560c383780f97e2a01279d809d1a2d3158ce4a2cc3aad720696d93b4fece3bd780a9d56978e591563a1fab657b24a0b542d0aed55fba19df18ca53875a8646a6210fbcff9d3a6daa217f2ecaa107c2e0c10298f9f98fc44917d10536bf8231a3e1b932f54efa33c78ca6b815decce453ba4d89e6c1b3db291b29c7f9a23d3f58d73019156399e814c"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
syz_genetlink_get_family_id$wireguard(&(0x7f00000024c0), 0xffffffffffffffff)

01:54:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x194, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@chsw_timing={0x68, 0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0x5a, 0xf, [@dsss={0x3, 0x1}, @preq={0x82, 0x51, @not_ext={{}, 0x0, 0x0, 0x0, @device_a, 0x0, "", 0x0, 0x0, 0x5, [{{}, @broadcast}, {{}, @device_b}, {{}, @broadcast}, {{}, @broadcast}, {}]}}]}, @NL80211_ATTR_IE={0xf1, 0x2a, [@fast_bss_trans={0x37, 0xe2, {0x0, 0x6, "a5a537e691446f9f2e4bb3bc78311971", "78cec8bf8418fbbdccbdd2f573956757779e3695277f7d567e10e5e06afbf486", "fc53d2a318e331befa9c481c40c5a43d2e5507b2605b3f1c4ac8b64e14228034", [{0x0, 0x26, "2dac7b52faf367119edf328f855df2e80694543974a62b92c4e432f042c93a7c339ddcdcb650"}, {0x0, 0xc, "9329cf179cb362df41b87f7d"}, {0x0, 0x21, "e011683167cb80883e4773b31e319ac4f591f9e6011f393ed92e8f4780a3797495"}, {0x0, 0x23, "9a768d11609358b282009faca43bf32b2a747c5958e62d592929f94f8e7f643a16282e"}, {0x0, 0x8, "79afa9bdeb6940f3"}, {0x0, 0x6, "69e8fc51e2f4"}]}}, @mesh_config={0x71, 0x7}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xcb4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xfd, 0x80, [@channel_switch={0x25, 0x3}, @erp={0x2a, 0x1}, @prep={0x83, 0x25}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @random_vendor={0xdd, 0xb4, "65bd468323c4d709451dc18b21707c27ae056275a131b47905de2bebb58d6a91f702337f5f17fcb3e15f4de83a564bb9b708f71521320bc6dc26448a9c0cb0d12d73a48e848f9139a46513e9dc4bf2b74247c53166c30ff54aac272d11a7773835602439a72b627180c88c5e31959ce50f5fae178018a0c8f52e4b4d1719427168c2e47f4b771004fc6527a2e715466beb7e048800b47055cadbfd056dbe9b8ec1c5d0a4d209d237aa3f7d4cc4195e2c9f6c74cc"}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d, 0x7f, [@supported_rates={0x1, 0x7, [{}, {}, {}, {}, {}, {}, {}]}, @supported_rates={0x1, 0x3, [{}, {}, {}]}, @dsss={0x3, 0x1}, @mesh_id={0x72, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x49, 0x2, "035a5b8b55fda92144b342e03ee8fe006239ffe8e28bef25e8cb0c6d5a3d39763f87f033133f049ce9a449de1c0707915f86d80f2196a592846baae021d484fd7b2d9c24df"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "7759905bb67a44c2253f681265"}]}, @NL80211_ATTR_BEACON_HEAD={0x34d, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @void, @val={0x1, 0x6, [{}, {}, {}, {}, {}, {}]}, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0xe5, {0x0, 0x0, 0x0, "dc26a73d41937172d7f3b3a1ea90bd53ec646db52a33d7531c7b7f95a559c2a4ec89859a519a3f742bedead8fd1775c17244660a87ee9c143c255c95b26f26d1c6c1b828a99bf63a0181a7f4be4fdd79da01f501aad77cb7ce88ed8b8cd93ccfb836e8e624fc088a7b8e47fdfe0f52bebff2594e60fca710d63dc0deb4dec1dcd52e435d4041174c926e18b249989118aa5ab9670c0f4f2284db239d3440dac4fcf37b92f95ed048f6f97be9994ad1495053266226f9ee6ce30857ab8d81796e4fefbca591eb593ccf03143ef34cd5121f0b0b93a71221784444efbbdeb73e5d3852"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x6, "4fb4edf79f7f"}, {0xdd, 0xa6, "04b15a1202aa38939f9e196a086759432ef1cd50ff2c0116f6067d8bafb7043246169f4eab3dfefa37146ef23dd1c36ee498b2bfa8d50356e0275bf1a54712d738a5de3c3cf08170d7f38920c613e3a582d83fbe0c848b7b3e08d6104aa116782a4b2575c60507be3a604d0629d28c1f94f959d84f45210363aedb5b1b7de57ee36a9a608f403a0f7ee00d4c4b8c3920a45007d2c65fd27ea58d4bc010d85df528d987f4f1b9"}, {0xdd, 0xbc, "d1f2996a5237a61d702933250e934f46068831f1c7f72ec3800cd5dbc2c6715d581279f33b6f48968a869045197abe0087c844e33c1c2f80c3dfbbb9f6bdd6277aa4836131648dcb73dad3a10a1dd1578511640bc6af9819845b97251a64a62bda9434e012671c50f764fbfc93688b80040ccf943b3eac5faa7162f558efa5027f8b17dc49f6785e3401784bc3b2bf6c7b7a78792b6ed8aa0af4487118fbd51da1e0849b413e4cd8b94cd2fa8bcdfb4ad8e88acb9d909a740bc6cb4a"}, {0xdd, 0xa2, "3474f1bd3447a9a0f3b9922373d657c67d2dba9b66257a9cf5d2b9388d2d07fdd991f2399c5c95321052824ca928d153bad99a75585bdc5ba57f73a406073a977a9908deba6fa9a5eb2154718e3c8b5851e8f855c06340a48926c8d5c0a688019e36c22ec3dd2133fec6954ac92797d8906963a520055ce78cdb7a426ffc58d7f6531886f8fdfeea9d5725ed4fa0b80613f21b652e71e863ff8e6224d708931e61e8"}]}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x775, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@random_vendor={0xdd, 0x6, "2ec823cbecf1"}]}]]}]}, 0xec4}}, 0x0)

01:54:01 executing program 5:
ioprio_set$uid(0x0, 0x0, 0x4007)

[  773.587215][T14931] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  773.612376][T14931] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  773.613171][T14931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  773.613300][T14931] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/575/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  773.670170][T14931] overlayfs: upper fs needs to support d_type.
[  773.811218][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:02 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:02 executing program 1:
bpf$PROG_LOAD_XDP(0x21, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:02 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x21, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:02 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x9, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:02 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, 0x0, r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:02 executing program 5:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000024c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

01:54:02 executing program 1:
getpeername$ax25(0xffffffffffffffff, 0x0, 0x0)

01:54:02 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/cgroups\x00', 0x0, 0x0)

01:54:02 executing program 0:
bpf$PROG_LOAD_XDP(0x1b, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  774.424380][T14958] loop2: detected capacity change from 0 to 512
[  774.467643][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  774.489820][T14958] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:54:02 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})

01:54:02 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
capset(&(0x7f0000000000), 0x0)

01:54:02 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000001280))

[  774.559818][T14967] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  774.614398][T14958] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  774.636959][T14958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  774.649530][T14958] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/576/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  774.693592][T14958] overlayfs: upper fs needs to support d_type.
[  774.729711][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:03 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:03 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x4, 0xd3, &(0x7f0000000840)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:03 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@alu]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x9, &(0x7f0000000200)=""/9, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:03 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000080)=@raw=[@jmp], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:03 executing program 5:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

01:54:03 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, 0x0, r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:03 executing program 4:
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000001200), &(0x7f0000001280)=0x80)

01:54:03 executing program 1:
socketpair(0x1d, 0x0, 0x0, &(0x7f0000001140))

01:54:03 executing program 0:
getpid()
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x4000000)
syz_clone(0x5220480, &(0x7f0000001280)="eeaadaffc86bccdeffca5b4c99524f46d3286d89405f3a6d6f1508fa12883b18f974eef0d7c9f8b239584339cc08e41993a09a94a2052c64dfd18a43c02047b63e4f62957df3afd0412db0e4dce40700000000000000aea510fa70419db0835aa5a6638ed26e36fcc7dea67409e3631eb22ccc9747aa1780c3d463fc43e3093a3cfdc581ce72e2bbc74bc0860ee27c6e93d38bd35535d81351fe97fd341a4889f758565abd78fb144a4610dc3ecd65f1a9eec3a0c54d1c4299a849bff8eae9f9d36e466b5a7d5b", 0xc7, &(0x7f00000000c0), 0x0, 0x0)

01:54:03 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x7, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  775.335460][T14987] loop2: detected capacity change from 0 to 512
[  775.386939][T14987] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  775.407624][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  775.421145][T14987] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:54:03 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0}, 0x20)

[  775.444120][T14998] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  775.466221][T14987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  775.482845][T14992] can: request_module (can-proto-0) failed.
01:54:03 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000940), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000980)={0x2, @raw_data="4e79c84247012241fd684df57b09a9c0565d105645d49b35b43a107024e8ee4e4e6d64310e4c03a91defd9cdf4986cdf4ed67b0af129df30059960bff282dd707907cf9b8b7f116401c565adaaabf97b54384d3e966d2e4c51356797d0ebcd9f2fad6e459fdf53c657ad8f46acf8a5e87a06a31201420c056a93cb63ce906faec07017b3b6e343a567c82d570081f49017f337b654c261f2362d8becf4a67b4a6e233e0a6085167cb99ae0c0ac6b5fb67e7c54ded59c44d47bb5a100c41d6594910c372194a0e19c"})

[  775.483379][T14987] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/577/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  775.623778][T14987] overlayfs: upper fs needs to support d_type.
[  775.662952][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:04 executing program 1:
syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x40)

01:54:04 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000024c0), 0xffffffffffffffff)

01:54:04 executing program 4:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x10}, 0x10}}, 0x0)

01:54:04 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x4}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20)

01:54:04 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:04 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, 0x0, r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:04 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x4, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

01:54:04 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x1)
write$UHID_CREATE(r0, 0x0, 0x0)

01:54:04 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80)

[  776.240666][T15011] loop2: detected capacity change from 0 to 512
[  776.308531][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  776.338806][T15011] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:54:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14}, 0xfffffffffffffcb6}}, 0x0)

01:54:04 executing program 5:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

01:54:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x5)

01:54:04 executing program 0:
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x42480, 0x0)

[  776.357768][T15019] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  776.383105][T15011] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:54:04 executing program 5:
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000))
getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))

01:54:04 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x9, &(0x7f0000000200)=""/9, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  776.455133][T15011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  776.468804][T15011] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/578/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  776.544168][T15011] overlayfs: upper fs needs to support d_type.
[  776.620894][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:05 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:05 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x10, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:05 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[], 0x14}}, 0x0)

01:54:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xffffff9a}}, 0x0)

01:54:05 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x194, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x3, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@chsw_timing={0x68, 0x4, {0x1, 0x4}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x3]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1, 0xbe}]}, @NL80211_ATTR_BEACON_TAIL={0x5a, 0xf, [@dsss={0x3, 0x1, 0x24}, @preq={0x82, 0x51, @not_ext={{0x1, 0x0, 0x1}, 0x9, 0x0, 0x0, @device_a, 0x0, "", 0x0, 0x0, 0x5, [{{}, @broadcast, 0x6}, {{}, @device_b}, {{}, @broadcast, 0x1}, {{}, @broadcast}, {}]}}]}, @NL80211_ATTR_IE={0xf1, 0x2a, [@fast_bss_trans={0x37, 0xe2, {0x0, 0x6, "a5a537e691446f9f2e4bb3bc78311971", "78cec8bf8418fbbdccbdd2f573956757779e3695277f7d567e10e5e06afbf486", "fc53d2a318e331befa9c481c40c5a43d2e5507b2605b3f1c4ac8b64e14228034", [{0x0, 0x26, "2dac7b52faf367119edf328f855df2e80694543974a62b92c4e432f042c93a7c339ddcdcb650"}, {0x4, 0xc, "9329cf179cb362df41b87f7d"}, {0x0, 0x21, "e011683167cb80883e4773b31e319ac4f591f9e6011f393ed92e8f4780a3797495"}, {0x3, 0x23, "9a768d11609358b282009faca43bf32b2a747c5958e62d592929f94f8e7f643a16282e"}, {0x0, 0x8, "79afa9bdeb6940f3"}, {0x0, 0x6, "69e8fc51e2f4"}]}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x4, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xcb4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xfd, 0x80, [@channel_switch={0x25, 0x3}, @erp={0x2a, 0x1}, @prep={0x83, 0x25}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @random_vendor={0xdd, 0xb4, "65bd468323c4d709451dc18b21707c27ae056275a131b47905de2bebb58d6a91f702337f5f17fcb3e15f4de83a564bb9b708f71521320bc6dc26448a9c0cb0d12d73a48e848f9139a46513e9dc4bf2b74247c53166c30ff54aac272d11a7773835602439a72b627180c88c5e31959ce50f5fae178018a0c8f52e4b4d1719427168c2e47f4b771004fc6527a2e715466beb7e048800b47055cadbfd056dbe9b8ec1c5d0a4d209d237aa3f7d4cc4195e2c9f6c74cc"}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d, 0x7f, [@supported_rates={0x1, 0x7, [{}, {0x1}, {}, {}, {}, {0x18}, {0x4}]}, @supported_rates={0x1, 0x3, [{}, {}, {}]}, @dsss={0x3, 0x1}, @mesh_id={0x72, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0xf801, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x9d, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x49, 0x2, "035a5b8b55fda92144b342e03ee8fe006239ffe8e28bef25e8cb0c6d5a3d39763f87f033133f049ce9a449de1c0707915f86d80f2196a592846baae021d484fd7b2d9c24df"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "7759905bb67a44c2253f681265"}]}, @NL80211_ATTR_BEACON_HEAD={0x34d, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @from_mac=@broadcast}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x8, @random, 0x0, @void, @val={0x1, 0x6, [{}, {}, {0x5, 0x1}, {}, {0x2f}, {0x36}]}, @val={0x3, 0x1}, @val={0x4, 0x6, {0x1}}, @val={0x6, 0x2}, @val={0x5, 0xe5, {0x0, 0x0, 0x0, "dc26a73d41937172d7f3b3a1ea90bd53ec646db52a33d7531c7b7f95a559c2a4ec89859a519a3f742bedead8fd1775c17244660a87ee9c143c255c95b26f26d1c6c1b828a99bf63a0181a7f4be4fdd79da01f501aad77cb7ce88ed8b8cd93ccfb836e8e624fc088a7b8e47fdfe0f52bebff2594e60fca710d63dc0deb4dec1dcd52e435d4041174c926e18b249989118aa5ab9670c0f4f2284db239d3440dac4fcf37b92f95ed048f6f97be9994ad1495053266226f9ee6ce30857ab8d81796e4fefbca591eb593ccf03143ef34cd5121f0b0b93a71221784444efbbdeb73e5d3852"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1}}, @val={0x76, 0x6, {0x0, 0x0, 0x15}}, [{0xdd, 0x6, "4fb4edf79f7f"}, {0xdd, 0xa6, "04b15a1202aa38939f9e196a086759432ef1cd50ff2c0116f6067d8bafb7043246169f4eab3dfefa37146ef23dd1c36ee498b2bfa8d50356e0275bf1a54712d738a5de3c3cf08170d7f38920c613e3a582d83fbe0c848b7b3e08d6104aa116782a4b2575c60507be3a604d0629d28c1f94f959d84f45210363aedb5b1b7de57ee36a9a608f403a0f7ee00d4c4b8c3920a45007d2c65fd27ea58d4bc010d85df528d987f4f1b9"}, {0xdd, 0xbc, "d1f2996a5237a61d702933250e934f46068831f1c7f72ec3800cd5dbc2c6715d581279f33b6f48968a869045197abe0087c844e33c1c2f80c3dfbbb9f6bdd6277aa4836131648dcb73dad3a10a1dd1578511640bc6af9819845b97251a64a62bda9434e012671c50f764fbfc93688b80040ccf943b3eac5faa7162f558efa5027f8b17dc49f6785e3401784bc3b2bf6c7b7a78792b6ed8aa0af4487118fbd51da1e0849b413e4cd8b94cd2fa8bcdfb4ad8e88acb9d909a740bc6cb4a"}, {0xdd, 0xa2, "3474f1bd3447a9a0f3b9922373d657c67d2dba9b66257a9cf5d2b9388d2d07fdd991f2399c5c95321052824ca928d153bad99a75585bdc5ba57f73a406073a977a9908deba6fa9a5eb2154718e3c8b5851e8f855c06340a48926c8d5c0a688019e36c22ec3dd2133fec6954ac92797d8906963a520055ce78cdb7a426ffc58d7f6531886f8fdfeea9d5725ed4fa0b80613f21b652e71e863ff8e6224d708931e61e8"}]}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x77b, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_IE={0x4}]]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x2004c045}, 0x40080)

01:54:05 executing program 4:
openat$random(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0)

01:54:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0)

01:54:05 executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_triestat\x00')

[  777.167077][T15049] loop2: detected capacity change from 0 to 512
01:54:05 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private=0xa010101}}}})

01:54:05 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000002200), 0xffffffffffffffff)

[  777.247304][T15049] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  777.267639][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  777.286348][T15049] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  777.313073][T15062] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  777.321351][T15049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  777.343138][T15049] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/579/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  777.414299][T15049] overlayfs: upper fs needs to support d_type.
[  777.470045][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:06 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:06 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}}, 0x0)

01:54:06 executing program 5:
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000080))

01:54:06 executing program 1:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

01:54:06 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

01:54:06 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:06 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0)

01:54:06 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x3c0, 0x320})

[  778.066831][T15073] loop2: detected capacity change from 0 to 512
01:54:06 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x660ff0beaa6f0f29}, 0x14}}, 0x0)

01:54:06 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r1, 0x1}, 0x1c}}, 0x0)

[  778.131978][T15073] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  778.164432][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:06 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000480)="1be53aeacbb6f1bcd92b937ceb00de8a58b1e96c2c9bb794d6012003bc5832dd240dccc6d37066c6cf9a75daf6b5275a4127", 0x32}, {&(0x7f0000001340)="753656e4b2989373b28891d23dd296ca95bdae0b45c3da4ee27214734a483f711e8df64b365bc96e17fe059ef7faf3883a75f260dd089ff0fc265c8ee8ced2105ec05c16604ef1f85e09f5c55756b94ab9ca7de2cff42564bd7396ac105c3481313e5b887359cc639ab11f0b1161f5c92ca99209960a32f93e10f225273bf26335205bb7c64a5ab8e425ee96a44a1706bf1576", 0x93}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001180)="cd84d48caacea05e36a234e1d958e0f5c2ba333ee75fba56a925fc4036b3a9febf8854d0db8688392adffb", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="01940ba4ffbad11f56c19006cdf23de5d1961552e8009f58b7e4f4e96729fbacc41f51b3a0648076e509", 0x2a}, {&(0x7f0000000640)="18db12e2e06bd3c42be10fd574f96eae050a32d8d92eee2b93", 0x19}], 0x2}}], 0x3, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0)

[  778.192822][T15073] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  778.207984][T15083] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  778.216497][T15073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
01:54:06 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100))
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x3c, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b)

[  778.230446][T15073] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/580/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  778.305391][T15073] overlayfs: upper fs needs to support d_type.
[  778.390098][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:07 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:07 executing program 4:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x0, 0xc9, 0x40}}}, 0x9)

01:54:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xa)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0)

01:54:07 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100), 0x6)
write$binfmt_misc(r0, 0x0, 0xd)

01:54:07 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:07 executing program 4:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
semtimedop(0x0, &(0x7f0000000440)=[{0x3, 0x100}, {}], 0x2, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000007c0))

01:54:07 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="4737dc62cc375baecc944ee35fc1dc96c2916975de0036bf50d2d28141117b017931d5aecb8bfb04c46e89f2f57b0e490d9ef2c1700ab90d8d6478fb319dde2c77f0353649926fa66c1ec83c9bfd0dc92a099cb76504d51ec6ad1c8de973a8b49fc05c79a2edd773199bffb15d535d321299be95ec4f7245895b", 0x7a}, {&(0x7f0000000180)="358b32e86a1aa6964d24796e77a51c9e0b026fabf4dbaa19029ba51e0af4d44585ce3c9a99620ef75c2dfe3a3fe89e7d4377c548f4c0e3791ab49ab1c950d4d5e9eb546fc4e7d74cf4c1ce41c2dc244c7d44a7ab0ee61384380cf616bdeec0b96c03d5e7eaebd77887b41ee472", 0x6d}, {&(0x7f0000000280)="d890f35e9119377cecc915def13c2dc8d8", 0x11}], 0x3}, 0x0)
recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/247, 0xf7}], 0x1}}], 0x1, 0x0, 0x0)

[  778.988554][T15098] loop2: detected capacity change from 0 to 512
01:54:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, &(0x7f00000000c0)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, 0xe8)

[  779.052764][T15098] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  779.083330][T15098] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  779.096789][T15098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  779.123686][T15098] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/581/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  779.124416][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0)

01:54:07 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0)
sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x4}]}, 0x20}}, 0x0)

[  779.174998][T15098] overlayfs: upper fs needs to support d_type.
01:54:07 executing program 5:
syz_clone(0x22089080, 0x0, 0x0, 0x0, 0x0, 0x0)

[  779.250564][T15111] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
01:54:07 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

[  779.360389][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  779.504086][T15129] loop2: detected capacity change from 0 to 512
[  779.523442][T15129] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  779.550632][T15129] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  779.564801][T15129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  779.587426][T15129] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/582/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  779.669615][T15129] overlayfs: upper fs needs to support d_type.
[  779.724070][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:08 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:08 executing program 4:
r0 = socket$inet(0x2, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

01:54:08 executing program 5:
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002000))
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xcb98e33a129f371e, 0x50032, 0xffffffffffffffff, 0x0)

01:54:08 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:08 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000080), 0xc)

01:54:08 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:08 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

[  779.930816][T15140] loop2: detected capacity change from 0 to 512
01:54:08 executing program 0:
semget$private(0x0, 0x2, 0x65e)

01:54:08 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0xb02800, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_winnt}, {@uni_xlate}, {@utf8}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@dont_measure}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@audit}, {@subj_user={'subj_user', 0x3d, 'iocharset'}}, {@appraise}]}, 0xff, 0x24b, &(0x7f0000000940)="$eJzs3UFIlGkYB/BnVtd114URVhCWhR3Yy8Kygwqed2QxCgeKZAglIskRwhFBYaAg9VZ46BB08NCxWxR06da1S6fArlGH6Jh08RBMOJ/MmI0xlvqB/n6XeeB9/nzPzAvzMYd5v8t/zM1Ozy/ObGy8je7uTHQWohCbmeiNH6IjEisBABwnm7VavK8l0p4FADga7v8AcPK0ef8/d4QjAQCH7Nt//9+dePpqqlwYjkx07d3V+d0TAgAHbXxicmykWBw9n8t1R8zdrJaqpeQ1WR+ZiatRiXIMRDY+RtQakvrUmeLoQK6uN0pzy9v55Wqpo5lfi3IMRjZ6W+cHk3zu8/yP8cvO6w9FNvpa54da5rvi77925PORjRdXYj4qMR1b2WZ+aTCX+/9scVf+p3rfLrf++XX1z57FhSPeJQAAAAAAAAAAAAAAAAAAAAAAjpt8rqHl+T35/F7rSX4f5wM1ztdZrec743eHAwIAAAAAAAAAAAAAAAAAAEDd4rXrs1OVSnmhUUzeGetbr/7378KXS8esWPvt+enR2w/3lfp5+3NLffiUi8cPyuv3L10cb6v5w8t68azn4OfJtLkXW337v8RKJMWFG19pfpT2XrRX9N8rTD1Zev2u3VTKX0wAAAAAAAAAAAAAAAAAAHACNf/0m/YkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCe5vP/D614M9w/lPbbBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADghPsUAAD//4H3rwM=")

[  780.004880][T15140] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  780.046567][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  780.063027][T15148] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  780.084804][T15140] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:54:08 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x28}, 0x28)

01:54:08 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000100)='pim6reg\x00'})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000080))
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000c40)={'vxcan1\x00'})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040), 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0)

[  780.091884][T15150] loop1: detected capacity change from 0 to 256
[  780.115756][T15140] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/583/file0 supports timestamps until 2038-01-19 (0x7fffffff)
01:54:08 executing program 4:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

[  780.222995][T15140] overlayfs: upper fs needs to support d_type.
01:54:08 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:08 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x2c)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getaddr={0x18}, 0x18}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private2}})

01:54:08 executing program 1:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c40)=[0x0], &(0x7f0000000140), 0x0, 0x1, 0x0, 0x0, r1})

01:54:08 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:08 executing program 4:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

01:54:08 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none}}}, 0xa)

01:54:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0xe21}, 0x12)
listen(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @private=0xa010102}, 0xfffffffffffffe8c)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="58000000140019", 0x7}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x5, 0x0, 0xf04f, 0xe803}, 0x700)

01:54:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

01:54:09 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}, @ip_tos_u8={{0x11}}], 0x38}}], 0x1, 0x0)

[  780.900933][T15168] loop2: detected capacity change from 0 to 512
[  780.967425][T15168] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  780.987956][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  781.006291][T15178] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
01:54:09 executing program 4:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x0, "90f88e", 0x0, 0x0, "64b4601af777d44fc7205c6fea49efb01e5ba05a0e8124919328908c7d4620833fdb268f61a93a5243f62e91646927581aafb65db8dec0c187d466b113aa905c860d238cad7827f4b4e61ea4bb45e036e08f10392601acb06aa324c44eb46fd2fce7f5fe24a08ec0f42528303484b8b57e0a51add05df464566fd2cb065eae3881a08d41fee207e7e529a5f598ae57d70e7c04c6558d451cb8a00eb360cd230c082e64b192934294767992f515327f9a444254717b29430515939ba6cdab1f2bfb653bff701cce2d8a2369acd1e18b7b069749ae1eaaf281bdf1703dd9a54b081c68a8a252c0029ea8bd7affd93edca1"}]}}}, 0x102)

[  781.015435][T15168] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  781.035358][T15168] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/584/file0 supports timestamps until 2038-01-19 (0x7fffffff)
01:54:09 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000005a00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)

01:54:09 executing program 0:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x44)

[  781.128169][T15168] overlayfs: upper fs needs to support d_type.
[  781.310690][ T5078] EXT4-fs unmount: 3 callbacks suppressed
[  781.310704][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:09 executing program 4:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@none, 0x0, 0x0, 0x0, '2w^'}, {@none, 0x0, 0x0, 0x0, "eedec7"}]}}}, 0x20)

01:54:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f00000005c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90)

01:54:09 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x400454a4, &(0x7f0000000040)={0x3})

01:54:09 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a000100"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:09 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:09 executing program 4:
r0 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}}, 0x0)

[  781.786034][T15199] loop2: detected capacity change from 0 to 512
01:54:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2aef1dd0008000000001005542da39ccc184897d8dac9dfc64fcf6cc31e2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

01:54:10 executing program 0:
r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x801c581f, &(0x7f0000000040))

01:54:10 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @loopback}}}, 0x90)

[  781.875050][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  781.903769][T15209] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
01:54:10 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

01:54:10 executing program 0:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
write$sysctl(r0, 0x0, 0x0)

[  781.915552][T15199] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:54:10 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfffffffc}}, 0x18)

01:54:10 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x4b30, 0x0)

01:54:10 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b)

[  782.014110][T15199] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  782.043474][T15199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
01:54:10 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

[  782.056072][T15199] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/585/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  782.094589][T15199] overlayfs: upper fs needs to support d_type.
[  782.194925][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  782.279017][T15220] kvm: emulating exchange as write
[  782.329293][T15232] loop2: detected capacity change from 0 to 512
[  782.341243][T15232] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  782.370176][T15232] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  782.386720][T15232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  782.402297][T15232] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/586/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  782.446571][T15232] overlayfs: upper fs needs to support d_type.
[  782.492491][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:10 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a000100"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:10 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond_slave_0\x00'})

01:54:10 executing program 0:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r0, 0x609, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0)

01:54:10 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)

01:54:10 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d66dba15d29d2a34ed2b19e44b52712fe8fa8c95b74596049cab2b959761989d"}})

01:54:10 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:10 executing program 1:
r0 = socket(0x1d, 0x2, 0x7)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, @ssrr={0x89, 0xb, 0x0, [@dev, @loopback]}, @rr={0x7, 0x7, 0x0, [@multicast1]}, @ssrr={0x89, 0x2b, 0x0, [@rand_addr, @dev, @private, @dev, @broadcast, @rand_addr, @private, @broadcast, @remote, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@multicast1}, {@multicast2}, {}]}, @ra={0x94, 0x4}]}}}}})

01:54:10 executing program 4:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)

01:54:10 executing program 5:
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x808, &(0x7f0000000600)=ANY=[@ANYBLOB="00db16829f6f223801fbf346fbcb361a39ddaf9d9f3c0af9a8ab94c7941e0e3c9475e63359aed78788f36d3a46db8aec833c27bd3e04b336aad4e94458ea4c54b693744f778aee571c4196000005000000a2a5d06be49880db3e328d0ed6fe222fcfd1fc4111df0263d4e1e05f9b2b7969943681ca1edbb19a3ab3d79e2c96a3f281528a5f87018ff44d3446025929889bf379606d3cf3e50000000000000000000000007f3dd0c8e01c91244d054cddd790eea2f6714eba57910555eea84c0516a8e0b01d76f1fbc57484429c9f884d0200c95f3f0c2da8d7568bd94f391939728fd37ad1a183a83309a14772bc28a04eaaeb297596b0768da1bb86d329f3a19ba1d6cc665df9d78165158170eef9b268c259fe12c43c970496535266b997c20a4e75df43f06b2fa7f27c1ac5aefcc161b6000000000000000cc29d041d2511fc5c9ef862ce97493abf6adfcd06c4800d6a1a287c96a228e129e77cec5e998224d095a150eb8d1b376b4664844b8b544b5a90dcfc79b3d31cf6ba07cf00bfbfaf033cba704a157300008675894b7452356fa8f600eb1b31b21f4323ff6421d65777fa3cab7c0930f09ccb714d081efd3067d135f258fc02ed63ebcc485f16f88c3801030c70565a197e6e14c9c98dcd9ed70309ad000000c9121f9c16df753adadf0100000000000000000000000000c3da828f339f8ce96e57518d0d56edf2e6da7bbcd8e1c799f485db64d813e5e45cd106b5b7e64713c49ce3c0e487b3a05ad77d66d1bc0d4178fe5b3bbe072ecd077a3d8409d3e6f1e2fccb08bd60e0661a8b5f7f632f975a34ebf978ddae5d6580ab252aa5ef19e1ffd1cc4084bd6f22a2dd98719a3b1ff7ab049a58554c157e715b17f368250ee5e93a140517cafbbe09a9c3e72e306bbb01d78339c8bbb0d69a14c8437ba1c736ea7c3fd50932e9ba6e64f24b3d6e50634a7cf58b40810f269896ac5b65133907"], 0x1, 0xa07, &(0x7f0000001540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

[  782.720915][T15240] block nbd0: not configured, cannot reconfigure
[  782.746267][T15243] loop2: detected capacity change from 0 to 512
01:54:10 executing program 0:
set_mempolicy(0x2, &(0x7f0000000080)=0x9, 0x6)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x2404c7fc, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000001940)="8b8b92c9dd4228f4b079022e96427edb1ebe3f52b3090c7f47016a62d18bc86feb1e7652db758f5a274b5050389051b28b684914226329ce9121b6115a3cf1b6ffd9f0ea3f2c385fdfa4c450d732aed05fb918fd343522e878f8017895763345eef5341304e2394deb56115e52002e53d4b5ba074dc33b1840e9e7a3548f92a7fcbfeef2eb213bb6bfa8d72d15d73196796df3c8f50b51886521e2161df3d29eb8b1972a2882735e90e1e197895eaa413d01fa66384d599737ac3f76610af2106504a5bea9efb2aa7900cdd76e8e279126bf3fc4c4fb7671f1bddaf6ec2be2b62e4fb8e6e636c4ae0c4d5ea689b0022f9faa690741fa77b97d470a792f2a7fc6477a84559973bbd2af4c04c7b1aac2a968f09ebc934562be23c1956431a68c7673e30a14d0671bba6c43028e4b63952037d758c95ac8d19984bfe8e1ed03bf7637c305813aa14cd685524eca8500968ad77c2993e280fb3df0785a2fb05dd1ef27e0e3c06d5f74df5bcc5376a7304deb581bd5ec5b1d6a7884a08ca260d57e627615059e93f8baed56679cc892444a5c0a951fefc25b0875924dd54a6d4f61f5ec9537d0d9ffd8cdb1f0f289171c4cd89f9f3470ef551d985755f447095f4e331f875a7b05e12dbcb1648df98382062bc74c96761c84a54c39024dcd1b5ccee8357aa953dd33e9a8d20d3d0381cfc37eadf1d2f53a972da428442ee17366a9e3852f0ecd7d6aa8ed4fd7fd1e4e880357b07743e79ff01cddef677a8ee635c78d5a25bee8bbb10701a14d1eefea8370e1b4d8e2d5192064a84bdcc37f949ead4fe834a277eeb194bb3465bf4cb73401dbaac9667c34eec8f69076eebb608fe82216694506d50b75abb6f2a7f1722e38efad663396c979debbe1c62e25016fa0380acf6db062eb7792c4d5f1c533b18709cbc02a2801bdc64c0e0d79f60583fb4a35fb805f1cfabbe819579dad7c1c20c0ae05936c05fbe850c5b36987ff4b613acdd3b2395228a208ee68b3474738b22205db8fa73f40fa6da69908e289162903eab63f8198583b65f4113062a54cf2485529439f5e2fbc4fcab4235bf7546d7c30451bfb77adf6be8609dbb8401da8e7e47f96471bd601df9a8f4d5e284098695b5636edd6529a95debd3fe91c0ec7ed4d9aea83e33122f9be7c440b1acc3a9e306dbfc90cddce71f6aa834c2f96ce4dfa523be471666a11023edeee7736fb49562f1efff0efc17843953ea06623395012b426d84c37ca986c4c57d998fea5acd3b87a03fee4344afee3547a88978fd80f6398c8793384fc52acb7dfc8f227beccd14164c94e944c9f5cd87ef79c0ed2c65e8e63e01837ac6174864d0a4e0b47a192c500cb79da431d182910b84c36ba55a3bf0e56bda127a97b0b131cc59b2837ee78239ffa2e51d442619b27d37234990aa601dda0cdceb2ca5b9db20641dfde8df91c9f36fc6e3fbc3d3b77432c0c1b64b60a5094454d137a51e5178e51c76e3ffb9b294892b3442889d1e12f6c5fb6f2cd53727c9ed3982b8b5a45ebf6fc67f7edc8b7cddaf506fc80c5dade4ae88f0262f9613981f7b5258bf6b3d879537c0820b94e1954bae8005d2d767a8eacc19916bdf00ccdb1dfbd2325d62db19476d19de18953396ce68b3b415c08df5984b68e9324628d7f27c162e81936e6780cb2da877a0deeb96211f96e14cacdd288324e7553914524c38e18398edfbe243c0b65646e55c3ee9f0865f87b433db9add5298e7aa935bc094b3e2b7f59854189c35321f9ce4f66fd9a403ec5a4ce66e862167ae066463c5e4d39661e231da72f1a69c2fb9989e7254f77d8bad2c7f0e471f9fe188787c221a8443d86d97dfadfcd9e0833f39c34b5c6c1981dc9b03aa1fee63bdc23b5384c4d0a12e70a335616f57465abade193e5c88e30a638334c25aa964bf7741ca4a92958771a475a7b2daafed9a657f7080191decc135bbf5ed313503b8f50f9ee4a365f866d0ee3ea02f786ed108aa1ab6e1ea640339d1bfe2e61558013ac4cf8e92a96550d96a610c7447f9a70f3d38429aa0e927fe783e1cb48964cede41ef1f840ff70a510132301a6323e65140988b9012e7e5dc830d1d962e3b29c39ed303af6e2fdf721ef117128d82773aef3339f5ec5c7c20f3195a4228ccc557ecba112b4790831ed639a382ac6e0c975b3e699374c30032df5e306be7d49da3345ea5bac9d8227c61a6883a972c478f3cba4db4ab8fc8abd94d39d9fdcf4c6d51a45afc1dade5db8f2e8291a2186350a748a7baee832e6593ecc61bcf65206797c935e41654136e81712d91ec73581f4e25c61e764d0bb475475dfe3b54e6eeca40b825276f55b65222e9eceaf798422033e16d30740b6d96e99dccf4af869ae5e39d7f978ec2c299a82f51b2a0c4eeda152f569f07034587f3613293de0d4f2ea89a9b5a0c16bf93b00eaec01e566419f07f1556e75eb33bcd5bd1764224a33c5e946dd2605ac0e5ca7a376446d05d5a5d4bb75383e06d77a74c7ffbcfd8a002e1bf50246defda9883d477faa06da43382db30c238dd2ffbfebcc86a01a720e9a7674b170db10c25132ef6b22ec9e9e21e4f2c1a519c5657fc73dac38ec6eadafd5ef197538550ffe1e97f1c1d5c2163c17e0f000a0822b1fdb4a409502ec7c47d3d8b415075503006ee6ca7ff2eb8f60a2e3d6192013fdd8fb83d31ddfbd09b70304a524eaa9394133437dece9410a215ad144ea94bf0ba0c42d85098b9c3a5a508b21e5ee4ae930848f5134f6a64a414302652a1f246076bf2d8c6621806a924b7c4de10ab88ed3ace11103e437ccfaeb1a8882b41d2b580f133a2890365f30e93d50dcdc84ce1dbecc430574acecde3407ec1e59a3c80d8a08f8f7571a52cd8eff52cb45d5ade742b8469a2df05e8558c50494c6c5818b5385decc97eaf834306eb27cc89de622c192ffc5052f7b975477a330cea340942a95d21dbe258ccf5bdbd4bf9c3ab576f1f016d3ab9b62e14e33b4e0384786a5a34123be16548db84ecc59f8318de6c5580511205f77a062e00a25e518344be7062c63145a263079bc4e805841e62d665ca5f59895d288ad924dbda1afa83e0cdfd31f72b2bf5c50d11bac22474cb2f4cadf4e0b3f9610c5d6fe7354cb4789b5924186a33a6f23dea08467a661073c7250ddf4c1e81662c6f332e01d9c510c04b390965f72d0dcd77d3e907ddd1a4059f6ddc2b3acb33a9d47bc449092b6f268fa8e173c6e230b26b62e7fd94a833d4a02a632054545bca5c2f8efc3ff9e54e3fa6bf5276f20dbe72f0e66c6ffbf0182754087c432d98a002586dc2867fb5abbe0d9f6210f39f464dd319da8dcdc00e837a1d9402394cb618bd11313c574b5293df1ad145eacca7dc5517993dee2cfc4ed23eb29985a8cba6b5af0e7cb304cd192dea62b926d1116d7917b01f5da857ed6724f50b3f947156b7df3991ea666f5a408dde20742825d9dabc3f5f7bfa75ca3d195f534c9fb7330c11b4ca5726c8e3f0a7550f8bcdde39d8a137aaacf48f79b5dc1788ec9d0c5c1769e88ba5fe038f523fbd47ff1cd65cb9857cbc7d5934047317d80a17df136a9c128243de9ba04877be74e4fe70e8a2969a132db7be777f74bc20de3b9654f281b589efdaaf9fd788e0d5485b0d707210fdafa7b8d7201c40c6fd95f3b1bc601b7901be32b171095af6818fa9209733d7662b8ac3619188823de6bcefc17296cca4ff74ca4e98af13098305a76615a60dd9c58e9725bf7e2848cda04bc312243dae540595f6d234acbef8214918ebc281ed7b885b2530d6391a4ab5a0e04658d7ac249a5366eb013a9900e7540c8a3f0403c90d4d31c57e6bbdc897e6923d190518bfc3d7e644a9dc78fab49c2814a408aba4cd98b38c494502bd4c8981ebeeec3702caef5b74e24ff711b9fbf438c1342cedf6ee8c53cddebbc90a7079f5fb3883a067405e2721367a42f40fdcdc35155e46f71f0de85e4d58627e460ace4899cbd6d7a653179b97deefd7d069705d390c2b9a63a1c4adb6c50f56be876cb3a022c774b879226915b6be1aa3b13980592356e3523840eee586315cb3430502f8206f56e9f9e13a69f604c8ed922ce57eba39a7b89efec312435de75171b245250a19cf73d565663d7acfbfadfa36131a9a0e5ff5ae2e264d190215b9e91b44204463fb4df6d33e65ab3b3e44f73e2972b229e26a51ea652eceab3a241a154750354020489fc594993cf3a3648e7fa220ae469de0c42516e88f02805d57deca53072857d265dcba33a7cbe42d9aef54f6ac4650634738dc1744f2515e6d4af0a06dced85d4de6a44bbcec3d229653c0b777e31c51b628644a85dd9f93b70fe846da289e2de7e1d8f59267fe3c2444a6e9c16673cc25cccd67af67dc74ecc597b72187d188672126dd641cfe7394d426491cef44ddfc8d9570edc0c5e9c71bc5a2db77357f0280b89d6a6b3fdd9bf59b9d1b4e2715517965f69ad4406f3294be9b08aa1447487687b3e79bb8e4d1f3d332d4a1c2a693f1b63d2b10b3716a6a518c2c48410176b7792cce98ab46511ce2aa5bdf375cef8f557c5c581affc79dface6226f43103010d6eb1d4529049b0231115c3d756080deded56ed4f6686b2ad5084a3dc94b308d1d5e0b05b99492a50b7ce9f837d034c15c47e6d7cc463f3c7011b3699c74e587375182c465dd8ac4ef4796b0c0a22cc42621454c2df6faf68d9773bbb02965004dd354a79b7a85b1883eb97c151ba2136ebb2eee170180330ddfc8c55df31181cb4896953c0adbdf9b4a528765dec34ffe2a66e8d7869901cb9e9842f92f52db41fc3e1c092c5fc3123f9d296335750ce110fd8b13a9bd48f5773e2f47a2ced1144d672a4b9ef9fddbac6a31db61be62d5cb33e4a30518593f60a496a4bc8fd177ceb45c474aafab374d30faa795255ad0f5e2b4bfe4b64151319b2b9314e19f95b712545bd2cad1cb4f819df933fc61340cc9925c4528ee53d2ae537bcbb7e3b68ad069b49ac99cd476ee4a98ab2e945ead7f67a34a49d5aa51bc9dd8a5031b1b0ffbcb264028d66793b0da0ebb1a3873220425060732ffc8444a9b39bdfc7558f55b7b9514f01c01720152c8f37bd4893efb5a7c18672ae1fbc436a272e6454dea7970c8c6f7d09dd244cffad181d2f51b6dab7c11bae5e67737d85c4349080bcdee39113dc2a47949d05e5d5cb696849ed537577a2ae330b4c88007e25304660890e04e58f32ce40cde7bf2a46ea54b0bcb2f7917f7746ff42983b84d742c38169b1a1df1477ceb0e55f1756c96e7e053db13f8b90609d9efc088ead0a1af3076a8df8e7e3d6f1205140c80abab400842fc1847841eb48156f1c512809b779fadc858df7c825c1b9defd8bdbae71ab66896077f5b3fe15e99faff610423c061483734cdb519747b6845316cd09b5ae0e191abc7a020d5bd8a02f4ea3ecbf12391672e29a10963112481bffbb99bda4ac6ca52e3013ec5244cb0ca9df98098329443b5ee0fbe72a7caf3fb07d633b7070268e2513be144e058b92377e0d38907d6a92d7d27f87a88086f29501a1b2f0b34503bec048087c35c036ad84570b2dd2bb322ea30dd9ba9f5c1bf95f7a7e2ce8b010badd23c6f03253aede1a1083954f693bfc17c8f617b9d72579ffe73a1b6f3121a84504e21c748d7e31f70e53f587c1948761824bd5fdd83c02e02bc894bc633e751355cae4f7cbf8e706c47b64181fa61eb88cc27d1e27043d2916b5df8d6c2", 0x1035, 0x4044010, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000900)=""/4105, 0x1009}], 0x1, 0x0, 0x0, 0x5000000}, 0x102)

01:54:11 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000780)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f00000007c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)

[  782.809714][T15243] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  782.843393][T15243] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  782.871235][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  782.881325][T15251] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  782.891620][T15243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  782.913130][T15243] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/587/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  782.944210][T15252] loop5: detected capacity change from 0 to 2048
[  782.962481][T15243] overlayfs: upper fs needs to support d_type.
01:54:11 executing program 4:
semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x100, 0x1800}, {}], 0x2, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000007c0))

[  783.034306][T15259] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  783.105225][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:11 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a000100"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0xeb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-/-{(\x1f,^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '),\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '${:$$!}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'g@,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '^$\'.@*#@/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x150, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '1/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&*.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\t@\x1c,%}/\\\xa5-&/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'(#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{v\xf1-r\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-\x94}.\xc3\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xca5, 0x5, "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"}]}]}, 0xec4}}, 0x0)

01:54:11 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:11 executing program 5:
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x96)

01:54:11 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x8912, 0x20000000)

01:54:11 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40086602, &(0x7f0000000040))

01:54:11 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04481b"], 0x1e)

01:54:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x194, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@chsw_timing={0x68, 0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0x5a, 0xf, [@dsss={0x3, 0x1}, @preq={0x82, 0x51, @not_ext={{}, 0x0, 0x0, 0x0, @device_a, 0x0, "", 0x0, 0x0, 0x5, [{{}, @broadcast}, {{}, @device_b}, {{}, @broadcast}, {{}, @broadcast}, {}]}}]}, @NL80211_ATTR_IE={0xf1, 0x2a, [@fast_bss_trans={0x37, 0xe2, {0x0, 0x6, "a5a537e691446f9f2e4bb3bc78311971", "78cec8bf8418fbbdccbdd2f573956757779e3695277f7d567e10e5e06afbf486", "fc53d2a318e331befa9c481c40c5a43d2e5507b2605b3f1c4ac8b64e14228034", [{0x0, 0x26, "2dac7b52faf367119edf328f855df2e80694543974a62b92c4e432f042c93a7c339ddcdcb650"}, {0x0, 0xc, "9329cf179cb362df41b87f7d"}, {0x0, 0x21, "e011683167cb80883e4773b31e319ac4f591f9e6011f393ed92e8f4780a3797495"}, {0x0, 0x23, "9a768d11609358b282009faca43bf32b2a747c5958e62d592929f94f8e7f643a16282e"}, {0x0, 0x8, "79afa9bdeb6940f3"}, {0x0, 0x6, "69e8fc51e2f4"}]}}, @mesh_config={0x71, 0x7}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x0, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xcb4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xfd, 0x80, [@channel_switch={0x25, 0x3}, @erp={0x2a, 0x1}, @prep={0x83, 0x25}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @random_vendor={0xdd, 0xb4, "65bd468323c4d709451dc18b21707c27ae056275a131b47905de2bebb58d6a91f702337f5f17fcb3e15f4de83a564bb9b708f71521320bc6dc26448a9c0cb0d12d73a48e848f9139a46513e9dc4bf2b74247c53166c30ff54aac272d11a7773835602439a72b627180c88c5e31959ce50f5fae178018a0c8f52e4b4d1719427168c2e47f4b771004fc6527a2e715466beb7e048800b47055cadbfd056dbe9b8ec1c5d0a4d209d237aa3f7d4cc4195e2c9f6c74cc"}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d, 0x7f, [@supported_rates={0x1, 0x7, [{}, {}, {}, {}, {}, {}, {}]}, @supported_rates={0x1, 0x3, [{}, {}, {}]}, @dsss={0x3, 0x1}, @mesh_id={0x72, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x49, 0x2, "035a5b8b55fda92144b342e03ee8fe006239ffe8e28bef25e8cb0c6d5a3d39763f87f033133f049ce9a449de1c0707915f86d80f2196a592846baae021d484fd7b2d9c24df"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "7759905bb67a44c2253f681265"}]}, @NL80211_ATTR_BEACON_HEAD={0x34d, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @void, @val={0x1, 0x6, [{}, {}, {}, {}, {}, {}]}, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0xe5, {0x0, 0x0, 0x0, "dc26a73d41937172d7f3b3a1ea90bd53ec646db52a33d7531c7b7f95a559c2a4ec89859a519a3f742bedead8fd1775c17244660a87ee9c143c255c95b26f26d1c6c1b828a99bf63a0181a7f4be4fdd79da01f501aad77cb7ce88ed8b8cd93ccfb836e8e624fc088a7b8e47fdfe0f52bebff2594e60fca710d63dc0deb4dec1dcd52e435d4041174c926e18b249989118aa5ab9670c0f4f2284db239d3440dac4fcf37b92f95ed048f6f97be9994ad1495053266226f9ee6ce30857ab8d81796e4fefbca591eb593ccf03143ef34cd5121f0b0b93a71221784444efbbdeb73e5d3852"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x6, "4fb4edf79f7f"}, {0xdd, 0xa6, "04b15a1202aa38939f9e196a086759432ef1cd50ff2c0116f6067d8bafb7043246169f4eab3dfefa37146ef23dd1c36ee498b2bfa8d50356e0275bf1a54712d738a5de3c3cf08170d7f38920c613e3a582d83fbe0c848b7b3e08d6104aa116782a4b2575c60507be3a604d0629d28c1f94f959d84f45210363aedb5b1b7de57ee36a9a608f403a0f7ee00d4c4b8c3920a45007d2c65fd27ea58d4bc010d85df528d987f4f1b9"}, {0xdd, 0xbc, "d1f2996a5237a61d702933250e934f46068831f1c7f72ec3800cd5dbc2c6715d581279f33b6f48968a869045197abe0087c844e33c1c2f80c3dfbbb9f6bdd6277aa4836131648dcb73dad3a10a1dd1578511640bc6af9819845b97251a64a62bda9434e012671c50f764fbfc93688b80040ccf943b3eac5faa7162f558efa5027f8b17dc49f6785e3401784bc3b2bf6c7b7a78792b6ed8aa0af4487118fbd51da1e0849b413e4cd8b94cd2fa8bcdfb4ad8e88acb9d909a740bc6cb4a"}, {0xdd, 0xa2, "3474f1bd3447a9a0f3b9922373d657c67d2dba9b66257a9cf5d2b9388d2d07fdd991f2399c5c95321052824ca928d153bad99a75585bdc5ba57f73a406073a977a9908deba6fa9a5eb2154718e3c8b5851e8f855c06340a48926c8d5c0a688019e36c22ec3dd2133fec6954ac92797d8906963a520055ce78cdb7a426ffc58d7f6531886f8fdfeea9d5725ed4fa0b80613f21b652e71e863ff8e6224d708931e61e8"}]}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x779, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_IE={0x4}]]}]}, 0xec4}}, 0x0)

01:54:11 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)

01:54:11 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0xc0481273, &(0x7f0000000300)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1adbeafb7d3bde667e2a3e280c79fbf1d158bdc33c5041ee05f52558753cfd33fb7af6df3a9aefdff61ee4ab7531e178a8467b359749f72c5550cf9f3b71e8b", "158e7443b89548d445ec69a309fdbff23b86f0db4f9f900be2befb655b0220549b15158b784da6e9bb4fb6e6660440f88ee7f5712af3b1b4cae3f15e58c2a9df", "586f4b8d4d8ef268df4e753e471f9491e61e9153c8ba5bbbbe81080eead9a780"}})

[  783.695727][ T5085] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  783.722047][T15271] loop2: detected capacity change from 0 to 512
[  783.764922][T15271] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  783.785735][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:12 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @loopback}})
ioctl$RTC_EPOCH_SET(r0, 0x8940, 0x20000000)

01:54:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x80081270, 0x0)

[  783.821985][T15278] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  783.832488][T15271] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  783.846046][ T5085] Bluetooth: hci4: unexpected event 0x48 length: 27 > 3
[  783.846082][ T5085] Bluetooth: hci4: wrong event for mode 0
[  783.887857][T15271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  783.904559][T15271] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/588/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  783.953445][T15271] overlayfs: upper fs needs to support d_type.
[  784.057073][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:12 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:12 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x3c}}, 0x0)

01:54:12 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2000070, 0x0)
read(r1, &(0x7f0000000040)=""/14, 0xe)
close_range(r0, 0xffffffffffffffff, 0x0)

01:54:12 executing program 5:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000000cd80), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f000000cd40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fff}}, 0x50)

01:54:12 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000001900))

01:54:12 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:12 executing program 1:
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$unlink(0x9, 0x0, r0)

01:54:12 executing program 4:
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

01:54:12 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1})
chdir(&(0x7f0000000000)='./file0\x00')
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6b7a7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x10}, 0x48, 0xffffffffffffffff)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x16d27e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)

[  784.629878][T15298] loop2: detected capacity change from 0 to 512
[  784.651702][T15298] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
01:54:12 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000400)={'ipvlan1\x00', 0x400})

[  784.703556][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  784.726869][T15298] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
01:54:12 executing program 4:
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r1, r0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x101, &(0x7f0000000440), &(0x7f0000000240)=0x98)

01:54:12 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="4737dc62cc375baecc944ee35fc1dc96c2916975de0036bf50d2d28141117b01", 0x20}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/32, 0x20}], 0x1}}], 0x1, 0x0, 0x0)

[  784.818520][T15298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  784.863524][T15298] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/589/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  784.966906][T15298] overlayfs: upper fs needs to support d_type.
[  785.092447][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  785.185592][T15308] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  785.198367][T15308] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)"
[  785.209492][   T27] audit: type=1800 audit(1688954053.360:48): pid=15308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1947 res=0 errno=0
01:54:13 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:13 executing program 0:
r0 = socket$kcm(0xa, 0x3, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x36, 0x0, 0x0)

01:54:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xb, 0x0, 0x0)

01:54:13 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlinkat(r2, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x24, &(0x7f00000005c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90)

01:54:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000040))

01:54:13 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:13 executing program 4:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4)

01:54:13 executing program 1:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0)

01:54:13 executing program 5:
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0)

01:54:13 executing program 1:
r0 = syz_usbip_server_init(0x0)
write$usbip_server(r0, &(0x7f0000000080)=@ret_unlink, 0x30)

[  785.591272][T15338] loop2: detected capacity change from 0 to 512
[  785.620493][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  785.670184][T15338] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  785.698857][T15349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
01:54:13 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040e70200000000000000010902240001010700000904"], 0x0)

[  785.773650][T15338] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  785.789586][T15338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  785.803245][T15338] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/590/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  785.828434][T15338] overlayfs: upper fs needs to support d_type.
[  786.050492][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.182871][ T7571] usb 6-1: new high-speed USB device number 8 using dummy_hcd
01:54:14 executing program 4:
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1000", 0x28, 0x11, 0x0, @dev, @mcast2, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x28}}}}}}}, 0x0)

01:54:14 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:14 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x140)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
unlink(&(0x7f0000000140)='./file0\x00')
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, 0x38)
mkdir(&(0x7f00000038c0)='./file0\x00', 0x0)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003940)={&(0x7f0000003900)='./file1\x00'}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003a80)={r0, 0x0, &(0x7f0000003a40)=""/46}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003bc0)={r0, &(0x7f0000003ac0), &(0x7f0000003b00)=""/187}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000063c0)={0x6, 0x5, &(0x7f0000006200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@jmp, @kfunc]}, &(0x7f0000006240)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000006340)={0x0, 0xb, 0x4, 0x7}, 0x10}, 0x80)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000006440)={0xffffffffffffffff, 0x10001}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000008880)={0x0, 0x0, 0x0}, 0x100)
mkdir(&(0x7f00000088c0)='./file1\x00', 0x11b)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000008980)={0xffffffffffffffff, 0x0}, 0x20)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

01:54:14 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:14 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="6f9cb27b4e15a2b80834b47eda25a26aa1e5d2e3b317518c7d39d94933", 0x1d}, {&(0x7f0000000180)="365371a2e8dac63415746e5f6b4b71f8feea8f28f9671ec27f2a89564a9c09805c3e8ee7148f610f32fd07a06c7838a4336e1005dc27da39e14eee67d8c3bfdf1afaa6fd1c", 0x45}, {&(0x7f0000000200)="330e2558fd01e26cc1af2c11db71bf95f0a8760b29665f1935b3b988219f", 0x1e}], 0x3}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/233, 0xe9}], 0x1}}], 0x1, 0x40, 0x0)

[  786.455176][T15361] loop2: detected capacity change from 0 to 512
01:54:14 executing program 1:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
io_setup(0x1, &(0x7f0000001500)=<r1=>0x0)
io_submit(r1, 0xe, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x0, r0, 0x0}, 0x0])

[  786.530048][T15361] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  786.548243][    C1] vkms_vblank_simulate: vblank timer overrun
[  786.563135][ T7571] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  786.574546][T15361] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  786.575095][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  786.587102][ T7571] usb 6-1: New USB device found, idVendor=02e7, idProduct=0000, bcdDevice= 0.00
[  786.607924][T15361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  786.609322][ T7571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.690455][T15361] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/591/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  786.777545][T15361] overlayfs: upper fs needs to support d_type.
[  786.881241][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.902979][ T7571] usb 6-1: string descriptor 0 read error: -71
[  786.937146][ T7571] usb 6-1: USB disconnect, device number 8
01:54:15 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:15 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x80045400, &(0x7f0000000040))

01:54:15 executing program 1:
pselect6(0x40, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000700)={0x0, 0x989680}, 0x0)

01:54:15 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0)

01:54:15 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x22)

[  787.194556][T15378] loop2: detected capacity change from 0 to 512
[  787.240540][T15378] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  787.270789][T15378] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  787.284537][T15378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  787.323134][T15378] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/592/file0 supports timestamps until 2038-01-19 (0x7fffffff)
01:54:15 executing program 5:
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xcf, 0x2, 0x0, 0x86, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x18, 0x2}}]}}]}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)

01:54:15 executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x600040d0)

01:54:15 executing program 1:
syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty, @val, {@arp={0x806, @generic={0x1, 0x0, 0x6, 0x0, 0x0, @local, "", @remote, "7478cf0fe7b5ae777d8b8689379867f5"}}}}, 0x0)

01:54:15 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c61"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:15 executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf9, 0xc3, 0x78, 0x40, 0x147a, 0xe017, 0x8658, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x9a, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x25, 0x6a, 0xfd, 0x0, [], [{}]}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001740)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)

01:54:15 executing program 1:
syz_clone3(&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000680)=""/127, 0x7f, 0x0, 0x0}, 0x58)

[  787.481155][T15378] overlayfs: upper fs needs to support d_type.
[  787.505202][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  787.722871][ T5132] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  787.770352][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
01:54:16 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0)

[  787.822802][ T7574] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  787.957786][T15403] loop2: detected capacity change from 0 to 512
[  788.005544][T15403] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  788.034417][T15403] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  788.073020][T15403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  788.131129][T15403] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/593/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  788.202824][ T7574] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  788.230552][T15403] overlayfs: upper fs needs to support d_type.
[  788.316358][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  788.333783][ T5132] usb 6-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  788.343803][ T5132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.352875][ T5132] usb 6-1: Product: syz
[  788.357264][ T5132] usb 6-1: Manufacturer: syz
[  788.382806][ T7574] usb 5-1: New USB device found, idVendor=147a, idProduct=e017, bcdDevice=86.58
[  788.387641][ T5132] usb 6-1: SerialNumber: syz
[  788.391881][ T7574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.391911][ T7574] usb 5-1: Product: syz
[  788.391930][ T7574] usb 5-1: Manufacturer: syz
[  788.391949][ T7574] usb 5-1: SerialNumber: syz
[  788.472008][ T7574] usb 5-1: config 0 descriptor??
01:54:16 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:16 executing program 1:
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

01:54:16 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c61"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:16 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3UtrXG0dAPD/mWTe9BJN1HfxKrwXbCUt2pmksW1w0VYQdwWl7mtIJiFkkgmZSW1CkRQ/gCCi3XblRvADCNKPIEJB96KiFG110YV65MycaUycaRIyF0x+P3hynnP9/5+TzJlzedoTwJn1SUTcjYiRiLgaERP59EJeYrdVsuVev3q8kJUk0vT+X5NI8mnZYkleMhfz1c61Bh3Vt3dW56vVymY+Xm6sbZTr2zvXVtbmlyvLlfXZ2Zmbc7fmbsxN96SdWbtuf+NPP/nhz755+1df+d7vH/zlyvezfMfz+e129FprnxSzffHWaERs9iPYEIzk7SkOOxEAAI4kO8f/bER8sXn+PxEjzbO5o0n6mhkAAADQK+md8fhnEpECAAAAp1ah2Qc2KZTyvgDjUSiUSq0+vO/HhUK1Vm98eam2tb7Y6is7GcXC0kq1Mp33qZ2MYpKNzzTre+PX344n+/oA/3jifHN+aaFWXRzebQ8AAAA4Uy4euP7/x0Tr+v8dngwsOQAAAKB3JoedAAAAANB3/3v9/2woeQAAAAD94/k/AAAAnGrfuncvK2n7/deLD7e3VmsPry1W6qulta2F0kJtc6O0XKstV9OxiLXDtlet1Ta+Gutbj8qNSr1Rrm/vPFirba03HqzsewU2AAAAMECf+fj575KI2P3a+WbJvJf9GOmygr4CcGoUjrPwH/uXBzB43b7mgdNvdNgJAENTbA2SYecBDM9hB4CunXd+3ftcAACA/pj6fOfn/6N79waAU+pYz/+BU8Xzfzi7PP+Hs6voDADOvP4//0/TQ7cFAAD01XizJIVS/ixwPApv0paYjGKytFKtTEfEpyPitxPFsWx8prlm4h8NAAAAAAAAAAAAAAAAAAAAAAAAAMARpWkSKQAAAHCqRRT+nOTv/5qauDx+8P7Ae8mbieaw+XaA+z99NN9obM5k0/+WT49oPM2nXz/OnQdvHgcAAIB+aV+nt6/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXXr96vNAug4z78usRMdkp/micaw7PRTEiLvw9idH2Sh9HJBEx0oP4u08i4oNO8ZMsrZjMs9gXPyIKEXG+mUXf43+YpmnH+BdPHB3OtufZ8edup89fIT5pDjt//kfzclLdj3+Ft8e/kQ7xsyPPp44Y4wsvflHuPGesNX+08/GnHT/pEv9Sp0122Cnf/c7OTrfc0mcRUx2/f5J9scqNtY1yfXvn2sra/HJlubI+Oztzc+7W3I256fLSSrWS/+wY40cf/vLf3eK/fBJxoUv8yf3tnz/Y/stZpdhty3v+9eLRq8+1qsUDm2jGv3Kp8+//g/3x9+3a7G/iS/n3QDZ/ql3fbdX/20c//81H72r/Ypf2H/b7v3J405uufvsHfzjiogDAANS3d1bnq9XKZt8rT9M0HVSs7OxoULFOXHn//yfVvcqd4yycjg36j03lxJVhH5kAAIBe2zvpH3YmAAAAAAAAAAAAAAAAAAAAcHYN4r8TOxhzdzhNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4p/8EAAD//2vU2W8=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, 0x0, 0x0)

01:54:16 executing program 1:
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x180c1, 0x0)

[  788.734393][T15409] loop2: detected capacity change from 0 to 512
[  788.735258][ T5132] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  788.767776][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  788.810148][T15409] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  788.833594][ T1954] pvrusb2: Invalid write control endpoint
[  788.837469][ T5132] usb 6-1: USB disconnect, device number 9
[  788.933266][T15409] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  788.976857][T15409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  789.004233][ T1954] pvrusb2: Invalid write control endpoint
[  789.006735][T15409] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/594/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  789.013422][ T1954] pvrusb2: Invalid write control endpoint
[  789.094619][ T1954] pvrusb2: Invalid write control endpoint
[  789.131330][T15409] overlayfs: upper fs needs to support d_type.
01:54:17 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "c66a1c59"}]}}, 0x0}, 0x0)

01:54:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x14}, 0x14}}, 0x0)

[  789.156080][ T1954] pvrusb2: Invalid write control endpoint
[  789.176260][ T1954] pvrusb2: Invalid write control endpoint
[  789.195027][ T1954] pvrusb2: Invalid write control endpoint
01:54:17 executing program 1:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000040), 0xc)

[  789.243448][ T1954] pvrusb2: Invalid write control endpoint
[  789.255582][ T7574] usb 5-1: USB disconnect, device number 16
01:54:17 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, 0x0, 0x0)

[  789.297663][ T1954] pvrusb2: Invalid write control endpoint
[  789.349507][ T1954] pvrusb2: Invalid write control endpoint
[  789.394785][ T1954] pvrusb2: Invalid write control endpoint
[  789.403385][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  789.425784][ T1954] pvrusb2: Invalid write control endpoint
[  789.453107][ T1954] pvrusb2: Invalid write control endpoint
[  789.525435][ T1954] pvrusb2: Invalid write control endpoint
[  789.547517][ T1954] pvrusb2: Invalid write control endpoint
[  789.567026][ T1954] pvrusb2: Invalid write control endpoint
[  789.632716][ T1954] pvrusb2: Invalid write control endpoint
[  789.668945][ T1954] pvrusb2: Invalid write control endpoint
01:54:17 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x2, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)={'syz0'}, 0x4)
write$binfmt_elf64(r1, 0x0, 0x0)

01:54:17 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c61"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:17 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
read$watch_queue(r0, 0x0, 0x0)

[  789.702494][T15430] loop2: detected capacity change from 0 to 512
[  789.753689][ T1954] pvrusb2: Invalid write control endpoint
[  789.775048][ T1954] pvrusb2: Invalid write control endpoint
[  789.787607][ T1954] pvrusb2: Invalid write control endpoint
[  789.796676][T15430] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  789.815182][ T1954] pvrusb2: Invalid write control endpoint
[  789.821083][ T1954] pvrusb2: Invalid write control endpoint
[  789.828760][T15430] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  789.828941][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  789.841661][ T1954] pvrusb2: Invalid write control endpoint
[  789.857923][ T1954] pvrusb2: Invalid write control endpoint
[  789.858310][T15430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  789.863819][ T1954] pvrusb2: Invalid write control endpoint
[  789.863874][ T1954] pvrusb2: Invalid write control endpoint
[  789.889196][ T1954] pvrusb2: Invalid write control endpoint
[  789.895986][ T1954] pvrusb2: Invalid write control endpoint
[  789.907011][ T1954] pvrusb2: Invalid write control endpoint
[  789.912889][ T1954] pvrusb2: Invalid write control endpoint
[  789.918710][ T1954] pvrusb2: Invalid write control endpoint
[  789.924614][ T1954] pvrusb2: Invalid write control endpoint
[  789.932101][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  789.981367][ T1954] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  789.992113][ T1954] pvrusb2: Invalid write control endpoint
[  789.998759][ T1954] pvrusb2: Invalid write control endpoint
[  790.005908][ T1954] pvrusb2: Invalid write control endpoint
[  790.011844][ T1954] pvrusb2: Invalid write control endpoint
[  790.020248][ T1954] pvrusb2: Invalid write control endpoint
[  790.026324][ T1954] pvrusb2: Invalid write control endpoint
[  790.032239][ T1954] pvrusb2: Invalid write control endpoint
[  790.038535][T15430] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/595/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  790.054965][ T1954] pvrusb2: Invalid write control endpoint
[  790.072110][ T1954] pvrusb2: Invalid write control endpoint
[  790.106743][ T1954] pvrusb2: Invalid write control endpoint
[  790.134532][ T1954] pvrusb2: Invalid write control endpoint
[  790.140950][T15430] overlayfs: upper fs needs to support d_type.
[  790.147549][ T1954] pvrusb2: Invalid write control endpoint
[  790.159321][ T1954] pvrusb2: Invalid write control endpoint
[  790.169767][ T1954] pvrusb2: Invalid write control endpoint
[  790.183118][ T1954] pvrusb2: Invalid write control endpoint
[  790.203294][ T1954] pvrusb2: Invalid write control endpoint
[  790.217476][ T1954] pvrusb2: Invalid write control endpoint
[  790.227753][ T1954] pvrusb2: Invalid write control endpoint
[  790.241698][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.250931][ T1954] pvrusb2: Invalid write control endpoint
[  790.257068][ T1954] pvrusb2: Invalid write control endpoint
[  790.274491][ T1954] pvrusb2: Invalid write control endpoint
[  790.316333][ T1954] pvrusb2: Attached sub-driver cs53l32a
[  790.404862][ T1954] pvrusb2: Invalid write control endpoint
[  790.410749][ T1954] pvrusb2: Invalid write control endpoint
[  790.421968][ T1954] pvrusb2: Invalid write control endpoint
[  790.432119][ T1954] pvrusb2: Invalid write control endpoint
[  790.441030][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  790.465364][ T1954] pvrusb2: Device being rendered inoperable
[  790.471419][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  790.488876][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
01:54:18 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xd5, 0xffffffffffffffff, 0x7ff}, 0x48)

01:54:18 executing program 1:
syz_emit_ethernet(0x36, &(0x7f0000000100)={@random="4b4c22ce262e", @local, @val, {@ipv4}}, 0x0)

01:54:18 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:18 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:18 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[], 0x1, 0x4f7, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b)
linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r2, 0x0, 0x0)

[  790.748712][T15446] loop2: detected capacity change from 0 to 512
[  790.794008][T15454] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  790.838608][T15446] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  790.857672][T15446] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  790.870866][T15446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  790.883320][ T5132] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  790.894825][T15446] ext4 filesystem being mounted at /root/syzkaller-testdir4272898191/syzkaller.YjRnYM/596/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  790.926539][T15446] overlayfs: upper fs needs to support d_type.
[  790.985570][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.122733][ T5132] usb 6-1: Using ep0 maxpacket: 16
[  791.242965][ T5132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  791.266175][ T5132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  791.292829][ T5132] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  791.314853][ T5132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.348960][ T5132] usb 6-1: config 0 descriptor??
[  791.856395][ T5132] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input0
[  792.038593][ T5132] usb 6-1: USB disconnect, device number 10
01:54:20 executing program 5:
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
connect$netlink(r0, &(0x7f0000000000)=@proc, 0xc)

01:54:20 executing program 4:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

01:54:20 executing program 1:
pipe2$watch_queue(&(0x7f0000000280), 0x80)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)

01:54:20 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8001, 0x3}, 0x48)

01:54:20 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:20 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:20 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @volatile]}}, &(0x7f00000000c0)=""/199, 0x32, 0xc7, 0x1}, 0x20)

01:54:20 executing program 4:
syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), 0xffffffffffffffff)

01:54:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
ftruncate(r4, 0x0)
pwritev2(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x4003fe)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000004c0)={0x0, r3, 0x0, 0x5, 0x0, 0x2})

01:54:20 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r0)

01:54:20 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x1, &(0x7f0000000dc0)=@raw=[@jmp], &(0x7f0000000e40)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  792.657409][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:20 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_tracing={0x1a, 0x1, &(0x7f0000001100)=@raw=[@call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:20 executing program 4:
syz_open_dev$vcsn(&(0x7f0000000380), 0x0, 0x230800)

01:54:20 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x2, &(0x7f0000001480)=@raw=[@initr0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:21 executing program 5:
syz_clone3(&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x0], 0x1}, 0x58)
pipe2$watch_queue(&(0x7f0000000bc0), 0x80)

01:54:21 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  793.119179][   T27] audit: type=1800 audit(1688954061.250:49): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1950 res=0 errno=0
01:54:21 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

[  793.989379][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:22 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:22 executing program 2:
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

01:54:22 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8001, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48)

01:54:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14}, 0x14}}, 0x0)

01:54:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe7c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe69, 0x5, "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"}]}]}, 0xec4}}, 0x40)

01:54:22 executing program 2:
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

01:54:22 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000009c0)={'syztnl1\x00', 0x0})

01:54:22 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0)

01:54:22 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8000, 0x0, 0x0, 0x88}, 0x48)

01:54:22 executing program 4:
syz_open_dev$vcsn(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)

01:54:22 executing program 5:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x224001, 0x0)

01:54:22 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:23 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:23 executing program 2:
add_key$user(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffb)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, 0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
clock_gettime(0x0, 0x0)
add_key$user(&(0x7f0000007800), &(0x7f0000007840)={'syz', 0x1}, &(0x7f0000007880), 0x0, 0x0)
add_key$keyring(&(0x7f0000004b00), 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000007900)=0x5)

01:54:23 executing program 4:
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x416e, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

01:54:23 executing program 5:
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}, 0x38)

01:54:23 executing program 1:
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000b00), 0xc, &(0x7f0000000b40)={&(0x7f0000000c00)={0x18, 0x0, 0x4, 0x70bd27, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f0000003540), 0xc, &(0x7f0000004ac0)={0x0}}, 0x4090)
getpgrp(0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000bc0), 0x80)
syz_clone3(&(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000640), {}, &(0x7f0000000680)=""/127, 0x7f, 0x0, 0x0}, 0x58)

01:54:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x34}}, 0x0)

01:54:23 executing program 1:
syz_clone3(&(0x7f00000007c0)={0x5107000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:54:23 executing program 2:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc)

01:54:23 executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r0, &(0x7f0000000580)="c3", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)

01:54:23 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:23 executing program 5:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000001300), 0x80000, 0x0)

01:54:23 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

01:54:24 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:24 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @volatile]}}, &(0x7f00000000c0)=""/199, 0x32, 0xc7, 0x1}, 0x20)

01:54:24 executing program 5:
getresgid(&(0x7f0000000100), 0x0, 0x0)
getresuid(&(0x7f0000000240), &(0x7f0000000040), &(0x7f00000000c0))

01:54:24 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0x0, 0x0, 0x204, 0x1}, 0x48)

01:54:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x0)

01:54:24 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0xd}]}}, 0x0, 0x26}, 0x20)

01:54:24 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000200)={0x0, 0x6})

01:54:24 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:24 executing program 5:
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

01:54:24 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff)

01:54:24 executing program 5:
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000011c0), 0x101000, 0x0)

01:54:24 executing program 4:
add_key$user(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffb)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, 0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002000)={0x0, 0x0, {}, {}, 0x0, 0xfffffffffffffffd})
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
clock_gettime(0x0, 0x0)
add_key$user(&(0x7f0000007800), 0x0, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000004b00), &(0x7f0000006200)={'syz', 0x1}, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xcb98e33a129f371e, 0x50032, 0xffffffffffffffff, 0x0)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)

01:54:25 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:25 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001900)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

01:54:25 executing program 2:
syz_open_dev$dmmidi(&(0x7f0000000000), 0xffffffffffffff01, 0x0)

01:54:25 executing program 1:
syz_clone3(&(0x7f00000007c0)={0x5107000, 0x0, 0x0, &(0x7f0000000640), {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:54:25 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:25 executing program 4:
syz_clone(0x41100, 0x0, 0x0, 0x0, 0x0, 0x0)

01:54:26 executing program 2:
syz_clone3(&(0x7f0000000d80)={0x21c000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:54:26 executing program 5:
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140))

01:54:26 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = getpgrp(0xffffffffffffffff)
pipe2$watch_queue(0x0, 0x80)
pipe2$watch_queue(0x0, 0x80)
syz_clone3(&(0x7f00000007c0)={0x5107000, 0x0, 0x0, &(0x7f0000000640), {}, &(0x7f0000000680)=""/127, 0x7f, &(0x7f0000000700)=""/82, &(0x7f0000000780)=[r0], 0x1}, 0x58)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)

01:54:26 executing program 2:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x208600, 0x0)
getsockname$l2tp(r0, 0x0, 0x0)

01:54:26 executing program 5:
syz_open_dev$dmmidi(&(0x7f0000000080), 0x360e, 0x0)

01:54:26 executing program 1:
pipe2$watch_queue(&(0x7f0000000bc0)={<r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0xc)

01:54:27 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000000180)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe7c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe69, 0x5, "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"}]}]}, 0xec4}}, 0x0)

01:54:27 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff}, [@output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, 0x91}, @processing_unit={0x7, 0x24, 0x7, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x23, &(0x7f0000000140)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b8d081ff1b71dc2167f4fefb35b2254a"}]}})

01:54:27 executing program 1:
pipe2$watch_queue(&(0x7f0000000900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000940)={0xffffffc9, 0x4, 0x8, @broadcast, 'bridge_slave_1\x00'})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
syz_clone(0x8000000, &(0x7f0000000000)="4fb5b2968619b683b50822f6d07f18c82448fa82e4cea11b610296def10c1c51fa1f3c1c5ad79bbc96db25c25b837631e105aedd90548682fbf665fb2469e7c4522adf7f0043266d62036e2f408d84f7cc9e2fc7c33b16f729202ef9425b026e756acd1af11408fc211928589dd0584bcca8b942df66ae7b24cef7b9c838a68facc38947", 0x84, &(0x7f00000000c0), 0x0, 0x0)

01:54:27 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:27 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:27 executing program 2:
mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
fstat(r3, &(0x7f0000000240))
mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x950002, &(0x7f00000004c0)='&:{*-&\x00')
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0xfff6)
unshare(0x6c060000)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0xffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

01:54:27 executing program 1:
syz_clone3(&(0x7f0000000300)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:54:27 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20)

01:54:27 executing program 4:
pipe2$watch_queue(&(0x7f0000000bc0)={<r0=>0xffffffffffffffff}, 0x80)
read$watch_queue(r0, 0x0, 0xeffdffffffffffff)

[  799.632779][ T7571] usb 6-1: new high-speed USB device number 11 using dummy_hcd
01:54:28 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:28 executing program 4:
syz_clone3(&(0x7f00000004c0)={0x10900000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  800.462848][ T7571] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  800.489946][ T7571] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  801.192793][ T7571] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  801.207691][ T7571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.227375][ T7571] usb 6-1: Product: syz
[  801.253991][ T7571] usb 6-1: Manufacturer: syz
[  801.330616][ T7571] usb 6-1: SerialNumber: syz
01:54:29 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)

01:54:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x3}]}}}]}, 0x3c}}, 0x0)

[  801.672859][ T7571] usb 6-1: 0:2 : does not exist
[  801.717434][ T7571] usb 6-1: USB disconnect, device number 11
[  801.778194][ T5089] udevd[5089]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
01:54:30 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:30 executing program 4:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7cb, &(0x7f0000000200))

01:54:30 executing program 2:
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa4500, 0x0)

01:54:30 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f00000000c0)=""/199, 0x26, 0xc7, 0x1}, 0x20)

01:54:30 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0x4}]}}}}})
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000001300))

01:54:30 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

[  802.196023][T15677] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:30 executing program 2:
mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
fstat(r2, &(0x7f0000000240))
mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c804764c7052ac72b4a3af0d2cf6c65d7d2f88be3c95027fe2318221280d364e7cfe67e699efa081bba3e0988fc06c86604b4cc356042e459673f0ee9d3b3d0d38d239029d9d35f47b0ec1face86330b02000000653f700d57f465d0cf53516aede185c2c7243799fc0e12003e3d934c248640dcbc9601311dba2907008e2339f108cbfd8f97a35e7dca56e10f728d833f137bfdb1f5e8afb35107c71c0cab9e28d353ff12ff4be65e4221ed1e292430c76b9788eab8fb56674de3e9e3f290868678f89296ab7db15fe94eb53dc957885d074fdf835adf84c6d9f57537b699ef05fa4b4500967e3590e7000000000016b5a6e1d9f9416477ba38a0c9f275d9e2744fe22e3b4f415cb59b113d71994ae0a90f7b98f65728d5108d68bf1d51fc05243ebeb1972af21aeb7f92fe5be5963125fa3068e1536b208a4aa286b286c7b4ec090578f4d6648d90c16ef05d8c6b0de6f227ef6601a2df497f97af18e8116d41a042080625f5119710b621b4687e0899fa5e63b214ce56ff5d080caf1af80eab7f13880119ba747aeffa50601880e9951dd00d563b95cc75a28f4e4e632b6e61c101fff9f1c240d9b78e27c8c07b87c515c69e33734dd85bef2dbaf7d4e0eba7d644ebca8cf2b3adbf067fd9189d"], &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x950002, &(0x7f00000004c0)='&:{*-&\x00')
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
unshare(0x6c060000)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0xffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

01:54:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})

01:54:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0)

01:54:30 executing program 4:
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "870647", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

01:54:32 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)

01:54:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000280), 0x80)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)

01:54:32 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:32 executing program 1:
openat$vcsu(0xffffffffffffff9c, 0x0, 0x480000, 0x0)

01:54:32 executing program 4:
syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x42)

01:54:32 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x70}]})

01:54:32 executing program 1:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680))

01:54:32 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x4c}, 0x4c}}, 0x0)

01:54:32 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
syz_clone(0xc0801040, &(0x7f0000000140), 0x0, &(0x7f0000000240), 0x0, 0x0)

[  804.446755][T15706] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:32 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0)

01:54:32 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x0)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0)

01:54:32 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter, 0x48)

01:54:34 executing program 1:
syz_clone3(&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2$watch_queue(&(0x7f0000000bc0), 0x80)

01:54:34 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'})

01:54:34 executing program 2:
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
syz_clone(0x42040000, 0x0, 0x0, 0x0, 0x0, 0x0)

01:54:34 executing program 4:
syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "870647", 0x1c, 0x6, 0x0, @local, @local, {[@hopopts], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

01:54:34 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)

01:54:34 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:34 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000001c0), 0xffb2)

01:54:34 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

[  806.082105][T15739] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:34 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}}, 0x20004815)

01:54:34 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48)

01:54:34 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

01:54:34 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48)

01:54:34 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

01:54:34 executing program 4:
syz_clone(0x4a108, 0x0, 0x0, 0x0, 0x0, 0x0)

01:54:34 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48)

01:54:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe7c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe69, 0x5, "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"}]}]}, 0xec4}}, 0x0)

01:54:35 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:35 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

01:54:35 executing program 4:
pipe2$watch_queue(&(0x7f0000000900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000940)={0xffffffc9, 0x4, 0x8, @broadcast, 'bridge_slave_1\x00'})
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0)
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80), 0x302, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x114, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_clone(0x8000000, &(0x7f0000000000)="4fb5b2968619b683b50822f6d07f18c82448fa82e4cea11b610296def10c1c51fa1f3c1c5ad79bbc96db25c25b837631e105aedd90548682fbf665fb2469e7c4522adf7f0043266d62036e2f408d84f7cc9e2fc7c33b16f729202ef9425b026e756acd1af11408fc211928589dd0584bcca8b942df66ae7b24cef7b9c838a68facc3894775037f2d3485b9dc3f4359ed94f41f69c0c8b4526851f6c81ab863", 0x9f, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="fba25e56df3e8bc730ae9b5d6dbb333a2c4dc59d4082ed23f085eb24c191d80f7d4da84803808ed22fc256e7477eef1411277ccfc0cc06aea591e99d8b581e3675")

01:54:35 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x123081, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="340200007d00000005"], 0x234)

01:54:35 executing program 1:
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
write$char_usb(r0, 0x0, 0x0)

01:54:35 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:35 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x50540000, 0x0)

01:54:35 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:35 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x8, 0x3}]}}}]}, 0x3c}}, 0x0)

[  807.737895][T15777] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:36 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:36 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x50540000, 0x0)

01:54:36 executing program 4:
add_key$user(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffb)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, 0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002000)={0x0, 0x0, {}, {}, 0x0, 0xfffffffffffffffd})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f000000c180)=ANY=[@ANYBLOB], 0x2f4}, {0x0}, {&(0x7f0000009b40)={0x50, 0x29, 0x2, 0x0, 0x0, "", [@generic, @generic="3804be1dc237065c00e3cded56092a829d32dafab566623535521ab593363f8a2a4ef270d070794610", @typed={0x4, 0x23}, @typed={0x8, 0x0, 0x0, 0x0, @str='])[\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic]}, 0x50}, {&(0x7f000000acc0)={0x10c, 0x27, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xfb, 0x0, 0x0, 0x1, [@typed={0x4, 0x54, 0x0, 0x0, @binary}, @typed={0xc, 0x77, 0x0, 0x0, @u64}, @generic="b59575049637a252f51f959771dc09b0c8f986144e9135155939cd7e9fa76997a2f39782a16279c5f40468c6622f9bad12fb318de9b60a73ca812c1178caaddb9b56299cdea7b1c3b0a79161e62c48ca51ea5db3f156e818af8920ed542020f77912c496f0cd11184cc72af05c22cadd55475a0eacb00100d95a6e4a03fe56e45232f866efbcad87d3ac23612a2b1730703aa81cf3d73b5cbba09ffdc8c1d74fb3fc4bf5fbfbabe650a7f8a1e164dc36b7bb3f6525237ed8cf9456a971cca5e69ccddd6e7473be9019c6c9fec652180a00df1ed40bf5dd1c25d241bcf71481e38f2c04a6ad44dc"]}]}, 0x10c}], 0x4, &(0x7f0000007080)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20}, 0x4)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
clock_gettime(0x0, 0x0)
add_key$user(&(0x7f0000007800), 0x0, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000004b00), &(0x7f0000006200)={'syz', 0x1}, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xcb98e33a129f371e, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)

[  808.654329][ T1232] ieee802154 phy0 wpan0: encryption failed: -22
[  808.660679][ T1232] ieee802154 phy1 wpan1: encryption failed: -22
01:54:37 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:37 executing program 2:
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

01:54:37 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:37 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x50540000, 0x0)

01:54:37 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:37 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x14}, 0x14}}, 0x0)

01:54:37 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:37 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

[  809.235893][T15805] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:37 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x50540000, 0x0)

01:54:37 executing program 4:
syz_emit_ethernet(0x5f, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "870647", 0x29, 0x6, 0x0, @local, @local, {[], {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}, {'a'}}}}}}}, 0x0)

01:54:37 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:37 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:38 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:38 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x50540000, 0x0)

01:54:38 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:38 executing program 4:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000001280)={{}, 0x0, 0x2})

01:54:38 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(r1, 0x9)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:38 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:38 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:38 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:38 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x50540000, 0x0)

[  810.584660][T15834] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:38 executing program 2:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)

01:54:38 executing program 4:
request_key(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffb)

01:54:38 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x50540000, 0x0)

01:54:38 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:54:39 executing program 2:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)

01:54:39 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:54:39 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x50540000, 0x0)

01:54:40 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:40 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:54:40 executing program 4:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/button', 0x0, 0x0)

01:54:40 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x50540000, 0x0)

01:54:40 executing program 2:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)

01:54:40 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:40 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:40 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x0, 0x0)

01:54:40 executing program 4:
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x42)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

[  812.259633][T15867] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:40 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

01:54:40 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:40 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x0, 0x0)

01:54:41 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:41 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:41 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8001, 0x0, 0x88}, 0x48)

01:54:41 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

01:54:41 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:41 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x0, 0x0)

01:54:41 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

01:54:41 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x0, 0x0)

01:54:41 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:41 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4}]}]}}, 0x0, 0x32}, 0x20)

[  813.435358][T15896] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:41 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:41 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

01:54:42 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:42 executing program 4:
socketpair(0x2a, 0x0, 0x0, &(0x7f0000000040))

01:54:42 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:42 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x0, 0x0)

01:54:42 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

01:54:42 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:42 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x0, 0x0)

01:54:42 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:42 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x50540000, 0x0)

01:54:42 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f00000000c0)={{0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'})

[  814.680616][T15923] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:42 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:42 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:43 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:43 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x50540000, 0x0)

01:54:43 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:43 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:43 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:43 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:43 executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x0, @empty}, 0x10)

01:54:43 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x50540000, 0x0)

01:54:43 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:43 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

[  815.771555][T15950] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:44 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:44 executing program 4:
syz_open_dev$media(&(0x7f0000000000), 0x0, 0x870400)

01:54:44 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:44 executing program 5:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x50540000, 0x0)

01:54:44 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:44 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:44 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:44 executing program 4:
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socketpair(0x6, 0x0, 0x0, &(0x7f0000000940))

01:54:44 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x50540000, 0x0)

01:54:44 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:44 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:44 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:45 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x50540000, 0x0)

01:54:45 executing program 4:
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
mprotect(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x4)
mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000)

01:54:45 executing program 2:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x0, 0x0)

01:54:45 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

[  816.890503][T15987] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:45 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x50540000, 0x0)

01:54:45 executing program 2:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x0, 0x0)

01:54:45 executing program 2:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl(r1, 0x0, 0x0)

01:54:45 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl(0xffffffffffffffff, 0x50540000, 0x0)

01:54:45 executing program 1:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:45 executing program 4:
pipe2$watch_queue(&(0x7f0000000bc0)={<r0=>0xffffffffffffffff}, 0x80)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0))

01:54:46 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:46 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x124, 0x124, 0x4, [@union={0x0, 0x3, 0x0, 0x5, 0x1, 0x1, [{0xb, 0x4, 0x81}, {0x4, 0x4, 0x2}, {0x7, 0xfffffffd, 0x2}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x5, 0x3}, {0x0, 0x5}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x31, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0xa, 0x4}]}, @union={0x5, 0x3, 0x0, 0x5, 0x1, 0x7, [{0x1, 0x2, 0x80000001}, {0xfffffffd, 0x2}, {0xc, 0x0, 0x2ee6}]}, @enum={0xc, 0x7, 0x0, 0x6, 0x4, [{0xb, 0x7}, {0xb, 0x8}, {0xe, 0xce77}, {0x0, 0x5}, {0xf, 0x5}, {0x2}, {0x10, 0x8}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0x0, 0x1}, {0xe}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000280), 0x140}, 0x20)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000c00)={0xc0, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6ac6b2e04847c6ee}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="aae8e3e6", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250e0000000c00018008000100", @ANYRES32, @ANYBLOB="3000018008000300000000001400020076657468315f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0400018004000180"], 0x58}, 0x1, 0x0, 0x0, 0x20010000}, 0x4010)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000004ac0)={&(0x7f0000003580)={0x1514, 0x12, 0xbfcdbb1b49dd3adf, 0x70bd2a, 0x25dfdbfd, {0x15, 0x3, 0x9, 0xdd, {0x4e23, 0x4e21, [0x8, 0x4, 0xc5b7, 0x3], [0x41, 0x8, 0x68], 0x0, [0x5, 0x6]}, 0x8, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "f6dcfbf39ea3ecf4c36e3ccece2a02de911a6889d7ee174dddb58418abc1bf93a05cf93fe21b346c27791fd235e4d8147339a216a66b5bc81fa9768607ff7951c8eeeabb4112ae7d30a639f036243ed89c32361b53687c6d1b6162c0f3b3ec59dd67df41f97d9a94c707042acdfd1ebf2409d0cee4439651ef42b6b6cd57cebf41474b331d750a4c1b5f94676acd98ac623a151436580b1c883800e10719e9f0d3033091d29ff1817442c2be"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "9ebf8639f1ac1488d4ad6efd514e064cc4e4592165988faf5912143ac285d592ab195b1d5fd8d772e7dc5b6b71fceec637cc29887ebe6317c78b9486f3b9d5ffa655bb66aff7dc8badffcf58fa6279f4dfdf34d6fd48a875f89cb6a0ee435951d9af58f7053317f7c2ee25fb90b652bb81970eb1730df9bc22c3bdf7a093d64333029ccd54bc7ac05eadbf3ea60ed0b5824dbb2ce75c112816ff4f8e45793969d7c34d999aa79bd5427ad7dc32ae85e7ae01a2fa3cb079b3b87936f6f30bfcc2cebebf29ebd405fc5a"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "03c4a57a52b4a909d5c679087646e9b2d12773497c8f3e8ae90822bf3a41d32a9ba3b4767838563b0976aeffb4fac92abe412b8c799aab0baa6d15994fba28e97ed2fe73c52cd6f261b021b334a5a237883f80038181b2b13193bade84c1c2202103e028672a27fbddc55f3a11a93e10fe07160ec9e3a5b0c95a728c7444edd35bbc98099affafd777bb2f9dd7d478d94f1c3ba47be836d1cb88eafafb1f1f9a8e7ca00f1010c1c6302028738afd73c590bf1aa4dab44d4c10cb624eedad33ddc9b2c21be122e7e5c1a955945e0a1f5b4d1f55a6bcbcba763df3ae28c33a3b55355c7667398e5d16d8a311a5d9bac4c8ee7085"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "900c7f4a857f3764c741d688c1895cdb8960d89af89f7e2eaf10d4acd38ececdbc272e70e3d597f8312cfb6a80ab5dbdfb0178b061"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "273fb01b78ab98c5b36258f15aa45f077017005f55f70a9a00c9bf6494fb145e0d53a97d186b02e2f65ec709f5b420f2e02121f4bf6ba6b811f605d9844c58851a675837c94a5bbfa0eaacb2728abfbcd6a9be8273ed2c3c826c1c5350ab57025488209de0835cdf89708e08fed13976e8cdd85ed2905d63041e37f8ddbcc5aa78e5bb21e67fa015b426d03fe896e3c5f80c468e3c"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "b387c749e1bf8627d32d2e7bdeef1c2807287bb0762ec25d5082079ad43176d2cf15dad630b85ad4a56d35a12209d0f5c57e2e33d675013a530aa9569d3f652a5aecb11451a1eb0f760a0f66298a5d1380a01695d17d0167ecd8ed18744ec6899154b3a869ef18a86e98f9"}]}, 0x1514}}, 0x4090)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x7fff, 0x9, 0x5, 0x8, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x4, 0x0, 0x3}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000022c0)={0xffffffffffffffff, 0x58, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = getpgrp(0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r2, 0x58, &(0x7f0000000940)}, 0x10)
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000034c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, [@generic={0x7f, 0x1, 0xa, 0xfb7a, 0x3}, @alu={0x7, 0x1, 0x3, 0xb, 0x9, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0xcd3, 0x1000, &(0x7f0000002440)=""/4096, 0x41000, 0x0, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000003440)={0x4, 0x2, 0xffffff7f, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003480)=[r5, r2, 0xffffffffffffffff]}, 0x80)
syz_clone3(&(0x7f00000007c0)={0x5107000, &(0x7f0000000240), &(0x7f0000000600), &(0x7f0000000640), {0x29}, &(0x7f0000000680)=""/127, 0x7f, &(0x7f0000000700)=""/82, &(0x7f0000000780)=[r4], 0x1, {r6}}, 0x58)

01:54:46 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:46 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl(0xffffffffffffffff, 0x50540000, 0x0)

01:54:46 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x0, 0x0)

01:54:46 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:46 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x0, 0x0)

01:54:46 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl(0xffffffffffffffff, 0x50540000, 0x0)

01:54:46 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

[  818.074486][T16020] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
01:54:46 executing program 4:
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff)

01:54:46 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:46 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:54:47 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:47 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:47 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl(r1, 0x0, 0x0)

01:54:47 executing program 4:
syz_emit_ethernet(0x4c, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "870647", 0x16, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"61a7"}}}}}}}, 0x0)

01:54:47 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:47 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0)

01:54:47 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:47 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl(0xffffffffffffffff, 0x0, 0x0)

01:54:47 executing program 4:
syz_clone(0xa8000100, 0x0, 0x0, 0x0, 0x0, 0x0)

01:54:47 executing program 5:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0x0, 0x0)

01:54:47 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000000)={{@any, 0x2}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000001280)={{}, 0x0, 0x2})

01:54:47 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:48 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:48 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl(0xffffffffffffffff, 0x0, 0x0)

01:54:48 executing program 4:
request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffa)

01:54:48 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xd5}, 0x48)

01:54:48 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:48 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0)

01:54:48 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000001300))

01:54:48 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:48 executing program 2:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl(0xffffffffffffffff, 0x0, 0x0)

01:54:48 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:48 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:48 executing program 2:
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x1, 0xee01, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff})

[  820.182407][T16079] Context (ID=0x4dc) not attached to queue pair (handle=0x0:0x0)
01:54:49 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:49 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:49 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:49 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
linkat(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002680)='./file0\x00', 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB='nonumtail=0,quiet,uni_xlate=1,uni_xlate=1,nonumtail=1,fmask=01777777777777777777777,utf8=1,rodir,utf8=1,uid=', @ANYRESHEX, @ANYBLOB=',uni_xlate=1,uni_xlate=1,quiet,discard,shortname=mixed,rodir,\x00'], 0x6, 0x2a2, &(0x7f00000026c0)="$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")
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unlinkat(r1, &(0x7f0000000340)='./file1\x00', 0x0)

01:54:49 executing program 4:
request_key(&(0x7f0000001080)='keyring\x00', &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000001100)='-^{(^[!\x92-*{#!\x00', 0xfffffffffffffffb)

01:54:49 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0)

01:54:49 executing program 4:
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

01:54:49 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

[  821.000159][T16094] Context (ID=0x4dc) not attached to queue pair (handle=0x0:0x0)
01:54:49 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

[  821.057434][T16093] loop2: detected capacity change from 0 to 256
01:54:49 executing program 4:
request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0)

01:54:49 executing program 2:
syz_clone3(&(0x7f0000000300)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}, 0x58)

[  821.131313][T16102] Context (ID=0x4dc) not attached to queue pair (handle=0x0:0x0)
01:54:49 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

[  821.390424][T16109] Context (ID=0x4dc) not attached to queue pair (handle=0x0:0x0)
01:54:50 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

01:54:50 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:50 executing program 4:
syz_clone(0x4a008, 0x0, 0x0, 0x0, 0x0, 0x0)

01:54:50 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:50 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:50 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101140, 0x0)

01:54:50 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:50 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:50 executing program 2:
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0x0, 0x0, [], 0x0})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

01:54:50 executing program 4:
syz_open_dev$MSR(&(0x7f0000000000), 0x3, 0x0)

01:54:50 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:50 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xe, 0x4)

01:54:50 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

01:54:50 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:50 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:50 executing program 4:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

01:54:50 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:50 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

01:54:51 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:51 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:51 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}}, &(0x7f00000000c0)=""/199, 0x26, 0xc7, 0x1}, 0x20)

01:54:51 executing program 3:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0)

01:54:51 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

[  822.920926][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
01:54:51 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

[  823.029110][T16150] vxlan0: entered allmulticast mode
01:54:51 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

01:54:51 executing program 4:
request_key(&(0x7f0000001080)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb)

01:54:51 executing program 2:
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
write$tun(r0, 0x0, 0x0)

01:54:51 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:51 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:51 executing program 5:
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:51 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:51 executing program 4:
shmctl$IPC_SET(0x0, 0x1, &(0x7f000000bec0)={{0x2}})

01:54:51 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:52 executing program 3:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0)

01:54:52 executing program 4:
syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x0)

01:54:52 executing program 5:
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:52 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:52 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:52 executing program 4:
socketpair(0x6, 0x0, 0x0, &(0x7f0000000940))

01:54:52 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:52 executing program 5:
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:52 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:52 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:52 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:52 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:52 executing program 3:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0)

01:54:52 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:53 executing program 4:
syz_clone(0x800845f, 0x0, 0x0, 0x0, 0x0, 0x0)

01:54:53 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:53 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:53 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:53 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:53 executing program 4:
pipe2$watch_queue(&(0x7f0000000280), 0x80)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)

01:54:53 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0)

01:54:54 executing program 4:
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$vcsn(0x0, 0x0, 0x0)

01:54:54 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:54 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:54 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:54 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:54 executing program 4:
syz_clone3(&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2$watch_queue(0x0, 0x80)

01:54:55 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:55 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:55 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:55 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:55 executing program 4:
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x42)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

01:54:55 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0)

01:54:55 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:55 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:54:55 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:55 executing program 4:
msgsnd(0x0, &(0x7f0000000040)={0x2}, 0x8, 0x0)

01:54:55 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:55 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:54:56 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:56 executing program 4:
request_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0)

01:54:56 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:56 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:54:56 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0)

01:54:56 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:56 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:56 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140))
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:56 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:54:56 executing program 4:
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x284a01, 0x0)

01:54:56 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:56 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0x0, &(0x7f0000000180))

01:54:56 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140))
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:56 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0)

01:54:56 executing program 2:
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:56 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140))
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:56 executing program 4:
syz_open_dev$sndmidi(0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)

01:54:57 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:57 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0x0, &(0x7f0000000180))

01:54:57 executing program 2:
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:57 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

01:54:57 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:57 executing program 2:
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:57 executing program 4:
io_setup(0x1, &(0x7f0000001500))
io_setup(0x1, &(0x7f00000013c0))
io_setup(0x1, &(0x7f0000001400)=<r0=>0x0)
io_setup(0x3, &(0x7f0000001440))
io_destroy(r0)

01:54:57 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0x0, &(0x7f0000000180))

01:54:57 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:57 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:57 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, 0x0)

01:54:57 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:58 executing program 4:
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
write$char_usb(r0, &(0x7f0000000080)='o', 0x1)

01:54:58 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:58 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, 0x0)

01:54:58 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:58 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:54:58 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

01:54:58 executing program 1:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl(r2, 0xfffff000, 0x0)

01:54:58 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:58 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:58 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0)

01:54:58 executing program 1:
socket$inet6_udp(0xa, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$vcsn(&(0x7f0000000380), 0xdbe, 0x230800)

01:54:58 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:58 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:58 executing program 4:
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4000000)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f0000000e80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf25", @ANYRES32, @ANYBLOB="3000018008000300000000001400020076657468315f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0400018004000180"], 0x58}, 0x1, 0x0, 0x0, 0x20010000}, 0x4010)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x7fff, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0x8}, 0x48)
r0 = getpgrp(0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000bc0), 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x14, 0x8, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x2}, @ldst={0x3, 0x0, 0x0, 0x2, 0x6, 0x8}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0x38, &(0x7f0000000900)=""/56, 0x1e00, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x7, 0x3, 0x5}, 0x10, 0xffffffffffffffff}, 0x80)
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
syz_clone3(&(0x7f00000007c0)={0x5107000, 0x0, &(0x7f0000000600), &(0x7f0000000640), {0x29}, &(0x7f0000000680)=""/127, 0x7f, 0x0, &(0x7f0000000780)=[r0], 0x1, {r1}}, 0x58)
pipe2$watch_queue(0x0, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x608000, 0x0)

01:54:58 executing program 1:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r0, &(0x7f0000000880)="f6", 0x1, 0x0, &(0x7f00000008c0)={0x2, 0x0, @empty}, 0x10)

01:54:58 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:58 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

01:54:58 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:58 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:58 executing program 1:
mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
fstat(r3, &(0x7f0000000240))
mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x950002, &(0x7f00000004c0)='&:{*-&\x00')
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0xfff6)
unshare(0x6c060000)
listen(r4, 0xffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

01:54:58 executing program 4:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0)

01:54:58 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800040002000000050007"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

01:54:59 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:54:59 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x8001, 0x0)
write$binfmt_elf64(r1, 0x0, 0x0)

01:54:59 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0xffff})

01:54:59 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0)

01:54:59 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:00 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0)

01:55:00 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

01:55:00 executing program 3:
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
read$msr(r0, 0x0, 0x0)

01:55:00 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:01 executing program 1:
signalfd4(0xffffffffffffffff, &(0x7f00000005c0), 0x8, 0x0)

01:55:01 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0)

01:55:01 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:01 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

01:55:01 executing program 3:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
read$watch_queue(r0, &(0x7f0000000780)=""/92, 0x5c)

01:55:01 executing program 4:
syz_clone3(&(0x7f0000000d80)={0x21c000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:55:01 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140))
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:01 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48)

01:55:01 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff})

01:55:01 executing program 4:
getresuid(&(0x7f0000000240), &(0x7f0000000040), &(0x7f00000000c0))

01:55:01 executing program 1:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000022c0)={@hyper})

01:55:01 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0)

01:55:01 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140))
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:01 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff})

01:55:01 executing program 1:
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0)

01:55:01 executing program 4:
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv6}}, 0x0)

01:55:01 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8001, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48)

01:55:01 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140))
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x29, &(0x7f00000000c0)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, 0x5000)

01:55:01 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
sched_setaffinity(0x0, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4)
openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x200002)
syz_open_dev$mouse(&(0x7f0000002140), 0x0, 0x4002)
write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="070062fff310030000"], 0xfffffd9d)

01:55:01 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff})

01:55:01 executing program 4:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0))

01:55:01 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0)

01:55:01 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:01 executing program 3:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x4d0302, 0x0)

01:55:01 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:01 executing program 4:
syz_open_dev$dmmidi(&(0x7f0000000380), 0x0, 0x1a1140)

01:55:02 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:02 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

01:55:02 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:02 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})

01:55:02 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:02 executing program 1:
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000f80), 0xd0803, 0x0)

01:55:03 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:03 executing program 3:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/button', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000007c80)='/sys/fs/ecryptfs', 0x688003, 0x0)

01:55:03 executing program 1:
syz_clone3(&(0x7f0000000300)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58)

01:55:03 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:03 executing program 4:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000001280)={{}, 0x1})

01:55:03 executing program 5:
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{0x0}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
fstat(r3, &(0x7f0000000240))
mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x950002, &(0x7f00000004c0)='&:{*-&\x00')
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0xfff6)
unshare(0x6c060000)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0xffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

01:55:04 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:04 executing program 3:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x6100, 0x0)

01:55:04 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:04 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8001, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)

01:55:04 executing program 1:
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40a82, 0x0)

01:55:04 executing program 3:
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0)
syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x42)

01:55:04 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:04 executing program 4:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x1)

01:55:04 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0x0, 0x0, 0x204, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48)

01:55:04 executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
fstat(r3, &(0x7f0000000240))
mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c804764c7052ac72b4a3af0d2cf6c65d7d2f88be3c95027fe2318221280d364e7cfe67e699efa081bba3e0988fc06c86604b4cc356042e459673f0ee9d3b3d0d38d239029d9d35f47b0ec1face86330b02000000653f700d57f465d0cf53516aede185c2c7243799fc0e12003e3d934c248640dcbc9601311dba2907008e2339f108cbfd8f97a35e7dca56e10f728d833f137bfdb1f5e8afb35107c71c0cab9e28d353ff12ff4be65e4221ed1e292430c76b9788eab8fb56674de3e9e3f290868678f89296ab7db15fe94eb53dc957885d074fdf835adf84c6d9f57537b699ef05fa4b4500967e3590e7000000000016b5a6e1d9f9416477ba38a0c9f275d9e2744fe22e3b4f415cb59b113d71994ae0a90f7b98f65728d5108d68bf1d51fc05243ebeb1972af21aeb7f92fe5be5963125fa3068e1536b208a4aa286b286c7b4ec090578f4d6648d90c16ef05d8c6b0de6f227ef6601a2df497f97af18e8116d41a042080625f5119710b621b4687e0899fa5e63b214ce56ff5d080caf1af80eab7f13880119ba747aeffa50601880e9951dd00d563b95cc75a28f4e4e632b6e61c101fff9f1c240d9b78e27c8c07b87c515c69e33734dd85bef2dbaf7d4e0eba7d644ebca8cf2b3adbf067fd9189d"], 0x0, &(0x7f0000000400)='romfs\x00', 0x950002, &(0x7f00000004c0)='&:{*-&\x00')
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
unshare(0x6c060000)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0xffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

01:55:04 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:06 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@union={0xd, 0x3, 0x0, 0x5, 0x1, 0x1, [{0xb, 0x4, 0x81}, {0x4, 0x4, 0x2}, {0x7, 0xfffffffd}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x3}, {0xd}]}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0xb}, {0x0, 0xce77}, {}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0x6, 0x2}]}]}, {0x0, [0x5f]}}, &(0x7f0000000280), 0xc7}, 0x20)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000c00)={0x60, 0x0, 0x4, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000cc0), 0xc, &(0x7f0000002300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="aae8e3", @ANYRES16=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20010000}, 0x0)
r0 = getpgrp(0xffffffffffffffff)
syz_clone3(&(0x7f00000007c0)={0x5107000, &(0x7f0000000240), &(0x7f0000000600), &(0x7f0000000640), {0x29}, &(0x7f0000000680)=""/127, 0x7f, &(0x7f0000000700)=""/82, &(0x7f0000000780)=[r0], 0x1}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x0, 0x0, 0xd5, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0x5}, 0x48)
pipe2$watch_queue(&(0x7f0000000bc0), 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x2f)

01:55:07 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:07 executing program 1:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x4)

01:55:07 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:07 executing program 3:
syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0)

01:55:07 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000034c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000001c0)='GPL\x00', 0xcd3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:07 executing program 5:
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x30395a3aeeb123fa)

01:55:07 executing program 5:
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
fcntl$getownex(r0, 0x10, 0x0)

01:55:07 executing program 4:
shmctl$IPC_SET(0x0, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

01:55:07 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:07 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)

01:55:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8"], 0x34}}, 0x0)

01:55:07 executing program 4:
pipe2$watch_queue(&(0x7f0000000bc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000200))

01:55:08 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:08 executing program 3:
getresuid(&(0x7f0000000240), &(0x7f0000000040), 0x0)

01:55:08 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967})

01:55:08 executing program 5:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)

01:55:08 executing program 4:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x210440, 0x0)

01:55:08 executing program 1:
syz_clone3(&(0x7f0000000240)={0x100800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:55:08 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
write$6lowpan_enable(r0, 0x0, 0x0)

01:55:08 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0)

01:55:08 executing program 3:
syz_emit_ethernet(0x5f, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "870647", 0x29, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}, {'a'}}}}}}}, 0x0)

01:55:08 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:08 executing program 1:
syz_emit_ethernet(0x5f, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "870647", 0x29, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}, {'a'}}}}}}}, 0x0)

01:55:08 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0)

01:55:09 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:09 executing program 3:
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="f17c3d3409b6aaaaaaaaaaaa86dd606915120000000000000000000000365e0000000000000100000000000000000000000000000001"], 0x0)

01:55:09 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:09 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

01:55:09 executing program 1:
syz_clone(0x8000960, 0x0, 0x0, 0x0, 0x0, 0x0)

01:55:09 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0)

01:55:09 executing program 3:
pipe2$watch_queue(0x0, 0x80)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone(0x8000000, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)

01:55:09 executing program 5:
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000001300))

01:55:09 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:09 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}})

01:55:09 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
sched_setaffinity(0x0, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="070062fff31003"], 0xfffffd9d)

01:55:10 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:11 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:11 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}})

01:55:11 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x400000, 0x0)

01:55:11 executing program 3:
syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x200)

01:55:11 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:11 executing program 1:
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001640), 0x440, 0x0)

01:55:11 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:11 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)

01:55:11 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@hyper}})

01:55:11 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14}, 0x14}}, 0x0)

01:55:11 executing program 5:
syz_clone(0x8000500, 0x0, 0x0, 0x0, 0x0, 0x0)

01:55:11 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:12 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

01:55:12 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr, @volatile={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000000c0)=""/199, 0x35, 0xc7, 0x1}, 0x20)

01:55:12 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E']})

01:55:12 executing program 5:
r0 = socket(0x18, 0x0, 0x0)
getsockname$qrtr(r0, 0x0, &(0x7f0000000100))

01:55:12 executing program 4:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:55:12 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @empty}}, 0x24)

01:55:12 executing program 4:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:55:12 executing program 1:
r0 = socket(0x2, 0x2, 0x1)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

01:55:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xc7)

01:55:12 executing program 2:
r0 = socket(0x2, 0x2, 0x1)
recvmsg$qrtr(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x38, 0x0)

01:55:12 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f7, &(0x7f0000000600)={'sit0\x00', 0x0})

01:55:12 executing program 4:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:55:13 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

01:55:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

01:55:13 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000500)=ANY=[]})

01:55:13 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}})

01:55:13 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:55:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$rxrpc(r0, 0x0, 0xfffffffffffffe39, 0x4015, 0x0, 0x0)

01:55:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

01:55:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x60)

01:55:13 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x0, 0xfffffffd}, 0x48)

01:55:13 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:55:13 executing program 3:
socketpair(0x2, 0x2, 0x73, &(0x7f0000000040))

01:55:13 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

[  845.802750][ T7572] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  846.312746][ T7572] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  846.327955][ T7572] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.339808][ T7572] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  846.350223][ T7572] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  846.360723][ T7572] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  846.371069][ T7572] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  846.542775][ T7572] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  846.553194][ T7572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.562462][ T7572] usb 2-1: Product: syz
[  846.566808][ T7572] usb 2-1: Manufacturer: syz
[  846.571552][ T7572] usb 2-1: SerialNumber: syz
01:55:14 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

01:55:14 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f9, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E']})

01:55:14 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @private}}, 0x24)

[  846.862808][ T7572] cdc_ncm 2-1:1.0: bind() failure
[  846.873642][ T7572] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  846.889940][ T7572] cdc_ncm 2-1:1.1: bind() failure
[  846.922994][ T7572] usb 2-1: USB disconnect, device number 13
01:55:15 executing program 5:
setpriority(0x6, 0xffffffffffffffff, 0x0)

01:55:15 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:55:15 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00'})

01:55:15 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)

01:55:15 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip_vti0\x00'})

01:55:15 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:55:15 executing program 5:
rseq(&(0x7f0000000000), 0x20, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)

01:55:15 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1d, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

01:55:15 executing program 2:
r0 = socket(0x2, 0x2, 0x73)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0)

01:55:15 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

01:55:15 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)

01:55:15 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89fa, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[]})

01:55:15 executing program 3:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x11, &(0x7f0000000a80)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}})

01:55:15 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:55:15 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[]})

01:55:16 executing program 5:
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)

01:55:16 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:16 executing program 2:
r0 = socket(0x2, 0x2, 0x1)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24)

01:55:16 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @private}}, 0x24)

01:55:16 executing program 5:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x1c, &(0x7f0000000a80)={0x5, 0xf, 0x1c, 0x2, [@wireless={0xb}, @ssp_cap={0xc}]}})

01:55:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xbe)

[  848.122805][ T5132] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  848.292717][ T7572] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  848.572784][ T5132] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  848.586301][ T5132] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  848.605788][ T5132] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  848.621188][ T5132] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  848.642804][ T5132] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  848.659545][ T5132] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  848.802892][ T7572] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  848.829302][ T7572] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  848.833343][ T5132] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  848.845665][ T7572] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  848.866439][ T7572] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  848.875290][ T5132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.880367][ T7572] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  848.900306][ T7572] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  848.907983][ T5132] usb 4-1: Product: syz
[  848.919105][ T5132] usb 4-1: Manufacturer: syz
[  848.930621][ T5132] usb 4-1: SerialNumber: syz
[  849.062852][ T7572] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  849.080243][ T7572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.108405][ T7572] usb 6-1: Product: syz
01:55:17 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

01:55:17 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:17 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f5, &(0x7f0000000600)={'sit0\x00', 0x0})

[  849.113376][ T7572] usb 6-1: Manufacturer: syz
[  849.119240][ T7572] usb 6-1: SerialNumber: syz
[  849.222856][ T5132] cdc_ncm 4-1:1.0: bind() failure
[  849.236073][ T5132] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  849.244295][ T5132] cdc_ncm 4-1:1.1: bind() failure
[  849.253425][ T5132] usb 4-1: USB disconnect, device number 9
[  849.402887][ T7572] cdc_ncm 6-1:1.0: bind() failure
[  849.417171][ T7572] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  849.431561][ T7572] cdc_ncm 6-1:1.1: bind() failure
[  849.448300][ T7572] usb 6-1: USB disconnect, device number 12
01:55:17 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}})

01:55:17 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0)

01:55:17 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:17 executing program 2:
socket(0x28, 0x802, 0x0)

01:55:17 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:17 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x20000000)

01:55:17 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="7375ca41916c3000000000000000000027"]})

01:55:18 executing program 5:
socketpair(0xa, 0x3, 0x84, &(0x7f0000000040))

01:55:18 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)

01:55:18 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)

01:55:18 executing program 1:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)

01:55:18 executing program 3:
socketpair(0x22, 0x0, 0x11, &(0x7f0000000100))

01:55:18 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:18 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24)

01:55:18 executing program 5:
socketpair(0x22, 0x0, 0x23, &(0x7f0000000100))

01:55:18 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E']})

01:55:18 executing program 2:
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)

01:55:18 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:18 executing program 3:
r0 = socket(0x2, 0x2, 0x1)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

01:55:18 executing program 1:
pipe2$watch_queue(&(0x7f0000000bc0)={<r0=>0xffffffffffffffff}, 0x80)
read$watch_queue(r0, &(0x7f0000000300)=""/161, 0xa1)

01:55:18 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)

01:55:19 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

01:55:19 executing program 4:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:55:19 executing program 2:
r0 = socket(0x2, 0x2, 0x73)
bind$qrtr(r0, 0x0, 0x0)

01:55:19 executing program 3:
r0 = socket(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)

01:55:19 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f9, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[]})

01:55:19 executing program 1:
r0 = socket(0x28, 0x1, 0x0)
bind$qrtr(r0, 0x0, 0x0)

01:55:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$rxrpc(r0, &(0x7f0000000280)="98", 0x1, 0x0, &(0x7f0000000200)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)

01:55:19 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[]})

01:55:19 executing program 5:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x5}, {0x6, 0x24, 0x1a, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, &(0x7f0000001000)={0x0, 0x0, 0xc, &(0x7f0000000a80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}, 0x4, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4}}, {0x4, &(0x7f0000000b00)=@string={0x4, 0x3, "44ee"}}, {0x0, 0x0}, {0x0, 0x0}]})

01:55:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x4d)

01:55:19 executing program 4:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:55:19 executing program 4:
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

[  851.842733][ T7572] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  852.232845][ T7572] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  852.249141][ T7572] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  852.261530][ T7572] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  852.275744][ T7572] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
01:55:20 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

01:55:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x1e)

01:55:20 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local={0xac, 0x5e}}}}})

01:55:20 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[]})

01:55:20 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:55:20 executing program 1:
r0 = socket(0x2b, 0x1, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

01:55:20 executing program 3:
socketpair(0x22, 0x0, 0x3, &(0x7f0000000100))

01:55:20 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

[  852.862844][ T7572] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  852.874275][ T7572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.892274][ T7572] usb 6-1: Manufacturer: 
[  853.186801][ T7572] cdc_ncm 6-1:1.0: bind() failure
[  853.196441][ T7572] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  853.207836][ T7572] cdc_ncm 6-1:1.1: bind() failure
[  853.227772][ T7572] usb 6-1: USB disconnect, device number 13
01:55:21 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0)

01:55:21 executing program 2:
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$KVM_CREATE_VM(r0, 0x5452, 0x20000000)

01:55:21 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
getsockname$qrtr(r0, 0x0, &(0x7f0000000100))

01:55:21 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r1, 0xfffff000, &(0x7f0000000180))

01:55:21 executing program 1:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="2000077100000000000000006648ac1d99a1b55678acd85e8c9b2c6b237e9a0bd8", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000ac1414aa"]})

01:55:21 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

01:55:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x20000003)

01:55:21 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:21 executing program 3:
r0 = socket(0x2, 0x2, 0x0)
bind$rxrpc(r0, 0x0, 0x0)

01:55:21 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
connect$nfc_raw(r0, 0x0, 0x0)

01:55:21 executing program 5:
socketpair(0xa, 0x2, 0x88, &(0x7f0000000040))

01:55:22 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)

01:55:22 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:22 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
recvmsg$qrtr(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38, 0x0)

01:55:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
read$watch_queue(r0, &(0x7f0000000000)=""/114, 0x72)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)

01:55:22 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
connect$nfc_raw(r0, 0x0, 0x0)

01:55:22 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)

01:55:22 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:22 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
ioctl(r2, 0xfffff000, &(0x7f0000000180))

01:55:22 executing program 2:
socketpair(0x2, 0x3, 0x100, &(0x7f0000000000))

01:55:22 executing program 5:
socketpair(0x22, 0x0, 0x21, &(0x7f0000000100))

01:55:22 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16}, 0x48)

01:55:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

01:55:22 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:55:22 executing program 3:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd10', 0x4240, 0x0)

01:55:23 executing program 1:
r0 = socket(0x28, 0x1, 0x0)
connect$nfc_raw(r0, &(0x7f00000001c0), 0x10)

01:55:23 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
recvmsg$qrtr(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x38, 0x0)

01:55:23 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f4, &(0x7f0000000600)={'sit0\x00', 0x0})

01:55:23 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
getsockname$qrtr(r0, 0x0, &(0x7f0000000100))

01:55:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x17)

01:55:23 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:55:23 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x1, 0xfffffffd}, 0x48)

01:55:23 executing program 2:
r0 = socket(0x2, 0x2, 0x1)
bind$rxrpc(r0, 0x0, 0x0)

01:55:23 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:23 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @private}}, 0x24)

01:55:24 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(0xffffffffffffffff, 0xfffff000, &(0x7f0000000180))

01:55:24 executing program 3:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4}}, {0x94, &(0x7f0000000b00)=@string={0x94, 0x3, "44eea78ab9edcc048e74131347c3126c60eb6bf404140f6c960609d0f2f3f5b25e31e3ada6c749c431cad29acf4fea98ea0e3de3f3346bfad824f5b783a59cca3ce2094f023f987f3d79612c3f586d4c6134c7e77f746b9c29a3e063699fc076a1503af2e29413e51f1f058973f8baa7bdd54f16344ba05364beb88a7a553021b7c363f834c8066bd34900a9ccc5ca1c8dde"}}]})

01:55:24 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x7ffffffff000)

01:55:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xb6)

01:55:24 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

01:55:24 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0x0, &(0x7f0000000180))

01:55:24 executing program 1:
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x80108907, 0x0)

01:55:24 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001000)={0x0, 0x0, 0xc, &(0x7f0000000a80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}})

[  856.212675][ T7572] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  856.472788][ T5132] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  856.612882][ T7572] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.631805][ T7572] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  856.651372][ T7572] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  856.671580][ T7572] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  856.682053][ T7572] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  856.700361][ T7572] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  856.903647][ T7572] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  856.922916][ T7572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.924115][ T5132] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.940166][ T7572] usb 4-1: Product: syz
[  856.961237][ T7572] usb 4-1: Manufacturer: 誧ӌ璎ጓ썇氒ᐄ氏ږ퀉답ㅞ귣잦쑉쨱髒俏飪໪㓳恵ⓘ럵ꖃ쪜伉㼂羘礽ⱡ堿䱭㑡瑿鱫ꌩ揠齩盀傡铢἟褅Ꞻ햽ᙏ䬴厠빤誸啺ℰ쎷젴欆䧓꤀엌᳊
[  856.966903][ T5132] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  857.045410][ T7572] usb 4-1: SerialNumber: syz
[  857.071890][ T5132] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  857.097845][ T5132] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  857.141120][ T5132] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  857.158115][ T5132] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  857.323105][ T5132] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  857.345984][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.364257][ T7572] cdc_ncm 4-1:1.0: bind() failure
[  857.379382][ T5132] usb 3-1: Product: syz
[  857.382373][ T7572] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  857.383689][ T5132] usb 3-1: Manufacturer: syz
[  857.393079][ T7572] cdc_ncm 4-1:1.1: bind() failure
[  857.409364][ T5132] usb 3-1: SerialNumber: syz
[  857.451785][ T7572] usb 4-1: USB disconnect, device number 10
[  857.713725][ T5132] cdc_ncm 3-1:1.0: bind() failure
[  857.728229][ T5132] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  857.739256][ T5132] cdc_ncm 3-1:1.1: bind() failure
[  857.773269][ T5132] usb 3-1: USB disconnect, device number 8
01:55:28 executing program 5:
r0 = syz_usb_connect$cdc_ncm(0x6, 0x84, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0xff, 0xa0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "70daa4ef7a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0xc000, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0x31}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x2, 0x40, 0x9, 0xf98, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x2, 0x25}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xf9, 0x1}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x9a, 0x7, 0x4, 0x40, 0x81}, 0x27, &(0x7f0000000240)={0x5, 0xf, 0x27, 0x1, [@generic={0x22, 0x10, 0xb, "3e6e08a59b3703625ee99fea144be68a14ac7fd2899623025106a28b990e80"}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3452}}, {0xe8, &(0x7f0000000340)=@string={0xe8, 0x3, "1f5ee98125fcf941a4ac1380f2b64444e6829e4965bfd6c4e3f64c75c2e283639cec65cd4a5bb547e177ce9f2e7c719409231c820121a1a455cb62b801d8aca65c8621f1d0ee6290f8b259cd9772dfa49031dda3a4f1bae876eaf2583204c64d8e6d7942439e5b074cab12640e2f641fdbef69c044822ad3eb4127ccae87d76d34790788312442458deff4ce7d5831683f21fb853c46b923f24afa36d820a32021e44aafd551da7a322d7aa7aa97a8e2cbbc65ef450bc13b499b663af1f08cab3f93030c48e9b09bc5e7cefeed54bd7bf6af416a2f1dc47702c2d53949c99ea6f56869277c28"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x436}}]})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0xc0, 0x21, 0xbf, {0xbf, 0x23, "395a4ce004214d597cd8213eb752b1fd6a79edd65c24db1a9b1ea4049a50110b3b97618d656c2b4c540bf31b0a6e9518555b127d92acaeb898e874fcefdf20062a309ddea863610d37d0dab370cd60c5e14a773bee9becae9524c91da3964f5ddf7270035fa520c3f2385df187f915d105bed5bd22f381d24828a53b6f3d9079f061e36c2b0a8c872e91b750379f8858b3ab78fc1cbadcbeb4720739d836ffd5b2c40739f4ff7c81b708740a662f6c3ea490eaefbf92c5a537d93e8d75"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x0, 0x7, 0xc1, "475d6d27436270072b3647aa6e7500c51521dff76fd63a174ae36eb19c16ba5f5f36d9e04d8d8ce82ec61a13916463aa5d3a6133cd130b03c903a896919a35df27c8b90a8a44e1fa2aa17006cd603211947c265a5799a17d503445c3c52ee7042f1947cfe494d2bb63df6b0eb6e5638c4b9798ef149bda3fb4ebe9fb34845fb9e17cbbd07099a90fd434cc3afad41937fa12594e86c2db8c1be8021cde65da68afa041e0b41cb63753f9ac1be2a5769cf9ddecc6602dba06b634f192af4fb9bdae"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x4, 0x0, 0x400, 0x81, 0xda, 0x1, 0x3, 0x80000001, 0xf3b9, 0x0, 0x6b57, 0x3f}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2}, &(0x7f0000000900)={0x20, 0x89, 0x2}})
socketpair(0xb, 0x0, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000030}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r2 = syz_usb_connect$cdc_ncm(0x3, 0x75, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x8, 0x180, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x5, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x2, 0xb7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x40, 0x7, 0x3}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x300, 0x7c, 0x81, 0xff, 0x8, 0xbf}, 0x2f, &(0x7f0000000a80)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x5, 0x1, 0x101, 0xf5}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0xae66, 0xf, 0x8, [0xf, 0xff00, 0xc030]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0x5, 0x1355}]}, 0x8, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x40e}}, {0x9e, &(0x7f0000000b00)=@string={0x9e, 0x3, "44eea78ab9edcc048e74131347c3126c60eb6bf404140f6c960609d0f2f3f5b25e31e3ada6c749c431cad29acf4fea98ea0e3de3f3346bfad824f5b783a59cca3ce2094f023f987f3d79612c3f586d4c6134c7e77f746b9c29a3e063699fc076a1503af2e29413e51f1f058973f8baa7bdd54f16344ba05364beb88a7a553021b7c363f834c8066bd34900a9ccc5ca1c8dde7bd8e358da67d109c00e"}}, {0xd0, &(0x7f0000000bc0)=@string={0xd0, 0x3, "edd99841d80644f1d0494ab5f697637ba68906990d964575e4c5f53c2eeaff5d40b8a1c8c0885f0d1108508c547e22496bff7527774df1409b287e48453b91e8471e86968179cccc4c7b9a2819c38ed8f31b6a91818ecf7c699b486fd5a4128f902bea8472b65de0d114a2b195353a9bfd1b83179e4f216c05bf32f462789e4c9a8a65f4ec05bf6167a57538413f7e5f6b9d58346f29a3968ef4b8b0cc45b9db43a6db31dcae5ca0eef0c4ea3f594df0d7cc3ebc8d5fecd574de1c66ed80aabd9339a1e24532dbb792407f9be80e"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x140c}}, {0xda, &(0x7f0000000d00)=@string={0xda, 0x3, "4f064280a1b651b8ac4061cb0aaac6ccb7ef2672ee0cc6c546d8a3a1092c17f6360f5684777646d706fbabc32063404546531d79a3061ab3354c8229fb907b75b3372c77b919d6a717e5c425ea9fa43fc0839a479b9865eb79fc1a6dab60edcfc7ff93119935bd0444e65eeee6cd0f38bfd3425a0e96ba39a6d9f42f9daeae759d4605983d336a0d392492d7cd75880c8ba51dd97f5afdee9da9e8a04a375a0baf5ca97d5cc4b31b3ec19ea9ec7e09d4a3cf5da9f1856492b84ae56cdc87c1086a65afd031e5f62acaee1d4c6c1ec253e7565dd461ce3853"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x816}}, {0x101, &(0x7f0000000e40)=@string={0x101, 0x3, "5474f2281736dd92de7f56f7aa59637b4988f2642affec0ba9ff2da6f6549e72bd9b10718eddc038df93b2b6e7168efa1ad9dc4ff1a0e9a3bb7d45be3e15c0a5dce5ddf594a9910229e2f2a348c49734af7182c4cfe493393bc2924395cfdc6fe93380e243c690558686740b8fa46095d23cb5eab2d37d65ed34da5a3540f8a37f3b25c2f0c987a33c6012a1736658a211ff3dde5fffda91226136d23fa7760ac89351512b8e2b2780713607a3f2a046e791bb8ed497e6b4c22b2ce563bafef1509a5908695a5b2f554ab160d297681cb7ad36d1dbe6fd873d36c621396f4970cb4ea6ef2d174cdad7d07bee55538e54e5ffd8eaf573ce1ee658afcdfbed3f"}}, {0x70, &(0x7f0000000f80)=@string={0x70, 0x3, "aa06e0c7e3b2991d00f6466ce827f726885d52d1dbad6197f447ccc5683a7c7c55ddc84c86950ef419abb6b5061733d451b10c3d2cd537c721e08aac1cefd28aa994aa7c2d4a97af216d9bb6ae95a1cf1c4fe29969ce679e8002349a0b13ccd76f447aa22672dca4d87571876faf"}}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001100)={0x14, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001400)={0x44, &(0x7f0000001140)={0x20, 0x16, 0xec, "9576b3253606d53ce6829a1285edca274137586cdfc377a9a96dc78319a6d7725e4bd4647cafcb79e715cc8aa27a828b9735f16d55d35849c3f5114da15e67afc8466b8fdf2be3e62c1d9330712f1cb3255d3da967be25ce066e2a9ccbf1d55a7d3c0c5503acf3b1bd2624560879e4da5c1d26a7f57e70cc52e4545a01f5c991a453ea3b79909379574d15fe1c6f95c6e46d02b97080966b02eb7bdbb3201bb5e865b947dbd72b4921a3e5e434710379c33459e1e8312bc6d8d798ad83af0a2288c9e7532c7478e8255e49da65afe3930531016f31854b26a0829b2d13e3440bbfda5d46b15553d40b4d8d57"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000012c0)={0x20, 0x80, 0x1c, {0x5, 0x2932, 0x4, 0x101, 0xffff, 0xea0, 0x2, 0x425ba839, 0x7, 0x58, 0x2, 0x49b3}}, &(0x7f0000001300)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000001340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001380)={0x20, 0x87, 0x2, 0x101}, &(0x7f00000013c0)={0x20, 0x89, 0x2}})

01:55:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x4a)

01:55:28 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0x0, &(0x7f0000000180))

01:55:28 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:28 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
getsockname$qrtr(r0, 0x0, &(0x7f0000000100)=0xfffffffffffffe42)

01:55:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x99)

01:55:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x29)

01:55:28 executing program 1:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}})

01:55:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x20000004)

01:55:28 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0x0, &(0x7f0000000180))

01:55:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x20000002)

01:55:28 executing program 1:
socketpair(0x22, 0x0, 0x26, &(0x7f0000000100))

[  861.002656][ T7572] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  861.502810][ T7572] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8
[  861.513845][ T7572] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  861.692901][ T7572] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  861.702000][ T7572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.710079][ T7572] usb 6-1: Product: 䆘ۘ䧐땊韶筣覦餆阍畅엤㳵巿례좡裀ൟࠑ豐織䤢ｫ❵䵷䃱⢛䡾㭅ṇ隆禁쳌筌⢚쌙᯳酪躁糏魩潈ꓕ輒⮐蓪뙲ᓑ놢㖕鬺᯽ឃ侞氡뼅硢䲞誚׬憿ꕧ㡵㽁彾鵫㑘⥯隣낸䗌ꙃ㇛껜ꁜ夿쳗밾徍헬昜胭붪㦓㉅럛䂒魿໨
[  861.739699][ T7572] usb 6-1: Manufacturer: 誧ӌ璎ጓ썇氒ᐄ氏ږ퀉답ㅞ귣잦쑉쨱髒俏飪໪㓳恵ⓘ럵ꖃ쪜伉㼂羘礽ⱡ堿䱭㑡瑿鱫ꌩ揠齩盀傡铢἟褅Ꞻ햽ᙏ䬴厠빤誸啺ℰ쎷젴欆䧓꤀엌᳊壣柚৑ເ
[  861.768452][ T7572] usb 6-1: SerialNumber: ᐌ
[  862.262965][ T7572] cdc_ncm 6-1:1.0: bind() failure
[  862.271080][ T7572] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  862.279356][ T7572] cdc_ncm 6-1:1.1: bind() failure
[  862.290990][ T7572] usb 6-1: USB disconnect, device number 14
01:55:30 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000600)={'tunl0\x00', 0x0})

01:55:30 executing program 2:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2001, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)

01:55:30 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, 0x0)

01:55:30 executing program 1:
r0 = socket(0x2, 0x2, 0x1)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0)

01:55:30 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

01:55:30 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xd5)

01:55:30 executing program 3:
socketpair(0x22, 0x0, 0x25, &(0x7f0000000100))

01:55:30 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, 0x0)

01:55:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x401c5820, 0x20000003)

01:55:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0))

01:55:31 executing program 1:
socketpair(0x22, 0x0, 0x24, &(0x7f0000000100))

01:55:31 executing program 4:
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@host})
ioctl(r2, 0xfffff000, 0x0)

01:55:31 executing program 2:
r0 = socket(0x2, 0x3, 0x1)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0)

01:55:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xcb)

01:55:31 executing program 1:
r0 = socket(0x28, 0x1, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x300}, 0x0)

01:55:31 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20048001)

01:55:32 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:32 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[]})

01:55:32 executing program 1:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRESHEX]})

01:55:32 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x5452, 0x20000000)

01:55:32 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}}]}}, 0x0)

01:55:32 executing program 5:
r0 = socket(0x1d, 0x3, 0x1)
getsockname$qrtr(r0, 0x0, &(0x7f0000000100))

01:55:32 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, 0x0)

01:55:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xc4)

01:55:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0)

01:55:32 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040))

01:55:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x5f)

01:55:32 executing program 4:
r0 = socket(0x2, 0x2, 0x1)
connect$nfc_raw(r0, &(0x7f0000000100), 0x10)

[  864.160168][ T5132] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  864.412662][ T5132] usb 3-1: Using ep0 maxpacket: 8
[  864.532872][ T5132] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  864.551190][ T5132] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  864.582862][ T5132] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  864.629400][ T5132] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  864.648630][ T5132] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  864.833183][ T5132] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  864.853796][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.877168][ T5132] usb 3-1: Product: syz
[  864.890014][ T5132] usb 3-1: Manufacturer: syz
[  864.896646][ T5132] usb 3-1: SerialNumber: syz
[  865.192878][ T5132] cdc_ncm 3-1:1.0: bind() failure
[  865.207708][ T5132] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  865.214737][ T5132] cdc_ncm 3-1:1.1: bind() failure
[  865.256331][ T5132] usb 3-1: USB disconnect, device number 9
01:55:33 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0)

01:55:33 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @mcast1}}, 0x24)

01:55:33 executing program 4:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x24)

01:55:33 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:33 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x23, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24)

01:55:33 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x4, 0x2010, r0, 0x0)

01:55:33 executing program 4:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0xb7}}}}}}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000b00)=@string={0x4, 0x3, "44ee"}}, {0x0, 0x0}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4}}]})

01:55:33 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89fb, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[]})

01:55:33 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x8941, 0x0)

01:55:33 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="73797a746e6c30000000000000000e00", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ac"]})

01:55:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0)

01:55:33 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0)
socket(0x28, 0x1, 0x0)

01:55:34 executing program 2:
r0 = socket(0x2, 0x3, 0x1)
getsockname$qrtr(0xffffffffffffffff, 0x0, &(0x7f0000000040))
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080))

01:55:34 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f8, &(0x7f0000000600)={'sit0\x00', 0x0})

01:55:34 executing program 3:
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x541b, 0x0)

[  866.014756][ T7571] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  866.412975][ T7571] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  866.433270][ T7571] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  866.448277][ T7571] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  866.458175][ T7571] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  866.471775][ T7571] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  866.485381][ T7571] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
01:55:34 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x18)

01:55:34 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e25, 0x0, @loopback}}, 0x24)

[  866.882943][ T7571] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  866.901637][ T7571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.936622][ T7571] usb 5-1: Manufacturer: 
[  867.252810][ T7571] cdc_ncm 5-1:1.0: bind() failure
[  867.263216][ T7571] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  867.270481][ T7571] cdc_ncm 5-1:1.1: bind() failure
[  867.291572][ T7571] usb 5-1: USB disconnect, device number 17
01:55:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x5452, 0x20001100)

01:55:35 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)

01:55:35 executing program 3:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)

01:55:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xce)

01:55:35 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x24)

01:55:35 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', 0x0})

01:55:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa2)

01:55:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$rxrpc(r0, &(0x7f0000000280)="98", 0x1, 0x0, 0x0, 0x0)

01:55:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xcc)

01:55:36 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0)

01:55:36 executing program 1:
r0 = socket(0x2, 0x2, 0x0)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0)

01:55:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x64)

01:55:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xcc)

[  868.022936][ T7571] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  868.302873][ T7571] usb 4-1: Using ep0 maxpacket: 8
[  868.422827][ T7571] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  868.434710][ T7571] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  868.444943][ T7571] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  868.455089][ T7571] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  868.465234][ T7571] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  868.475310][ T7571] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  868.663346][ T7571] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  868.672436][ T7571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.689911][ T7571] usb 4-1: Product: syz
[  868.694475][ T7571] usb 4-1: Manufacturer: syz
[  868.699210][ T7571] usb 4-1: SerialNumber: syz
[  868.956335][T17093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  868.965087][T17093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  869.012904][ T7571] cdc_ncm 4-1:1.0: bind() failure
[  869.020822][ T7571] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  869.027946][ T7571] cdc_ncm 4-1:1.1: bind() failure
[  869.039253][ T7571] usb 4-1: USB disconnect, device number 11
01:55:37 executing program 3:
socketpair(0xa, 0x5, 0x84, &(0x7f0000000040))

01:55:37 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[]})

01:55:37 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x2, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)

01:55:37 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x81, 0x0, 0xfffffffd}, 0x48)

01:55:37 executing program 4:
openat$kvm(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0)

01:55:37 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:37 executing program 1:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f9, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E']})

01:55:37 executing program 4:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x10, &(0x7f0000000a80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}})

01:55:37 executing program 2:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYRESDEC]})

01:55:37 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f6, &(0x7f0000000600)={'sit0\x00', 0x0})

01:55:37 executing program 3:
r0 = socket(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}})

01:55:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

01:55:37 executing program 2:
socketpair(0x22, 0x0, 0x22, &(0x7f0000000100))

01:55:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xc0)

01:55:37 executing program 3:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000000cd80), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f000000cd40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0x801, 0x5}}, 0x50)

01:55:38 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x8924, &(0x7f0000000000)="615ab02f3a")

01:55:38 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0xc2, 0xf5}}, {{0x9, 0x4, 0x7a, 0x0, 0x0, 0x4e, 0x4c, 0x64}}]}}]}}, 0x0)
socket(0x0, 0x5, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001a40)={{}, "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"})
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

[  869.982977][ T5135] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  870.095994][ T1232] ieee802154 phy0 wpan0: encryption failed: -22
[  870.102361][ T1232] ieee802154 phy1 wpan1: encryption failed: -22
[  870.113914][ T7354] kworker/dying (7354) used greatest stack depth: 21496 bytes left
[  870.352816][ T5133] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  870.422747][ T5135] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  870.442640][ T5135] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  870.452515][ T5135] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  870.478777][ T5135] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  870.502652][ T5135] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  870.512317][ T5135] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
01:55:38 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:38 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x8994, &(0x7f0000000000)="615ab02f3a")

[  870.693004][ T5135] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  870.702092][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.724443][ T5135] usb 5-1: Product: syz
[  870.733082][ T5135] usb 5-1: Manufacturer: syz
[  870.739392][ T5135] usb 5-1: SerialNumber: syz
[  870.760124][ T5133] usb 3-1: config 0 has an invalid interface number: 122 but max is 1
[  870.781707][ T5133] usb 3-1: config 0 has no interface number 1
[  870.992721][ T5133] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  871.002012][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.017186][ T5133] usb 3-1: Product: syz
[  871.021645][ T5133] usb 3-1: Manufacturer: syz
[  871.030064][ T5133] usb 3-1: SerialNumber: syz
[  871.041887][ T5133] usb 3-1: config 0 descriptor??
[  871.044996][ T5135] cdc_ncm 5-1:1.0: bind() failure
[  871.078646][ T5135] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  871.087002][ T5135] cdc_ncm 5-1:1.1: bind() failure
[  871.095238][ T5133] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  871.120062][ T5135] usb 5-1: USB disconnect, device number 18
[  871.392871][ T1954] pvrusb2: Invalid write control endpoint
[  871.395244][ T5133] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  871.426786][ T5133] usb 3-1: USB disconnect, device number 10
01:55:39 executing program 4:
ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000000))
socketpair(0x0, 0x8000b, 0x0, &(0x7f00000009c0))

01:55:39 executing program 5:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
io_setup(0x1, &(0x7f0000001500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x0, r0, 0x0}])
io_getevents(r1, 0x0, 0x2, &(0x7f0000000080)=[{}, {}], 0x0)

01:55:39 executing program 1:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)

01:55:39 executing program 3:
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1863, &(0x7f0000000580)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640))

[  871.508412][ T1954] pvrusb2: Invalid write control endpoint
[  871.515357][ T1954] pvrusb2: Invalid write control endpoint
[  871.529405][ T1954] pvrusb2: Invalid write control endpoint
01:55:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x0, {{0x2, 0x0, @multicast2}}, 0x0, 0x11}, 0x90)

[  871.565414][ T1954] pvrusb2: Invalid write control endpoint
01:55:39 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x18, 0x2}}]}}]}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)

[  871.612755][ T1954] pvrusb2: Invalid write control endpoint
[  871.630994][ T1954] pvrusb2: Invalid write control endpoint
[  871.640507][ T1954] pvrusb2: Invalid write control endpoint
01:55:39 executing program 5:
syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x0, 0x641)

01:55:39 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x89a2, &(0x7f0000000000)="615ab02f3a")

[  871.661744][ T1954] pvrusb2: Invalid write control endpoint
[  871.672337][ T1954] pvrusb2: Invalid write control endpoint
[  871.680834][ T1954] pvrusb2: Invalid write control endpoint
[  871.692498][ T1954] pvrusb2: Invalid write control endpoint
[  871.708984][ T1954] pvrusb2: Invalid write control endpoint
01:55:39 executing program 5:
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480), 0x8)

[  871.756927][ T1954] pvrusb2: Invalid write control endpoint
[  871.767418][ T1954] pvrusb2: Invalid write control endpoint
[  871.774229][ T1954] pvrusb2: Invalid write control endpoint
[  871.780065][ T1954] pvrusb2: Invalid write control endpoint
[  871.786476][ T1954] pvrusb2: Invalid write control endpoint
[  871.806357][ T1954] pvrusb2: Invalid write control endpoint
[  871.828582][ T1954] pvrusb2: Invalid write control endpoint
[  871.846090][ T1954] pvrusb2: Invalid write control endpoint
[  871.860922][ T1954] pvrusb2: Invalid write control endpoint
01:55:40 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0xc2, 0xf5}}, {{0x9, 0x4, 0x7a, 0x0, 0x0, 0x4e, 0x4c, 0x64}}]}}]}}, 0x0)
socket(0x0, 0x5, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001a40)={{}, "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"})
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

[  871.872720][ T5135] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  871.881732][ T1954] pvrusb2: Invalid write control endpoint
[  871.925294][ T1954] pvrusb2: Invalid write control endpoint
[  871.937764][ T1954] pvrusb2: Invalid write control endpoint
[  871.971761][ T1954] pvrusb2: Invalid write control endpoint
[  871.986389][ T1954] pvrusb2: Invalid write control endpoint
[  872.014450][ T1954] pvrusb2: Invalid write control endpoint
[  872.033303][ T5132] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  872.052102][ T1954] pvrusb2: Invalid write control endpoint
01:55:40 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:40 executing program 5:
syz_emit_ethernet(0x7d, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffbffffff4e09661ce0a68100400086dd6000000000432b00fe8000000000000000000000000000bbfe8000000000000000000000000000aac72ca5"], 0x0)

01:55:40 executing program 3:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000040)={0x48, 0x15, 0x1, 0x0, 0x0, {0xa, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "f5b48894e13e37e4d3a751f5ced2b6dfd1473f81face364c4bc01daebe026488bb7e8f84680c396812d767cdf1"}]}, 0x48}}, 0x0)

[  872.060912][ T1954] pvrusb2: Invalid write control endpoint
[  872.070597][ T1954] pvrusb2: Invalid write control endpoint
[  872.102714][ T1954] pvrusb2: Invalid write control endpoint
01:55:40 executing program 3:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

[  872.114024][ T1954] pvrusb2: Invalid write control endpoint
[  872.122742][ T5135] usb 2-1: Using ep0 maxpacket: 32
[  872.144331][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  872.220042][ T1954] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  872.227832][ T1954] pvrusb2: Invalid write control endpoint
[  872.252033][ T1954] pvrusb2: Invalid write control endpoint
[  872.258320][ T5135] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  872.278217][ T1954] pvrusb2: Invalid write control endpoint
[  872.290944][ T1954] pvrusb2: Invalid write control endpoint
[  872.310283][ T1954] pvrusb2: Invalid write control endpoint
[  872.325721][ T1954] pvrusb2: Invalid write control endpoint
[  872.337467][ T1954] pvrusb2: Invalid write control endpoint
[  872.350690][ T1954] pvrusb2: Invalid write control endpoint
[  872.365010][ T1954] pvrusb2: Invalid write control endpoint
[  872.377565][ T1954] pvrusb2: Invalid write control endpoint
[  872.389196][ T1954] pvrusb2: Invalid write control endpoint
[  872.408863][ T1954] pvrusb2: Invalid write control endpoint
[  872.430654][ T1954] pvrusb2: Invalid write control endpoint
[  872.443134][ T5135] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  872.462168][ T1954] pvrusb2: Invalid write control endpoint
[  872.469859][ T5135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.478367][ T1954] pvrusb2: Invalid write control endpoint
[  872.484876][ T5135] usb 2-1: Product: syz
[  872.490401][ T1954] pvrusb2: Invalid write control endpoint
[  872.497880][ T5135] usb 2-1: Manufacturer: syz
[  872.508989][ T5135] usb 2-1: SerialNumber: syz
[  872.514946][ T1954] pvrusb2: Invalid write control endpoint
[  872.538840][ T1954] pvrusb2: Invalid write control endpoint
[  872.551646][ T1954] pvrusb2: Invalid write control endpoint
[  872.559743][ T1954] pvrusb2: Invalid write control endpoint
[  872.571281][ T5132] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  872.583300][ T1954] pvrusb2: Invalid write control endpoint
[  872.602183][ T5132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.606478][ T1954] pvrusb2: Attached sub-driver cs53l32a
[  872.623187][ T5132] usb 5-1: Product: syz
[  872.627491][ T5132] usb 5-1: Manufacturer: syz
[  872.632199][ T5132] usb 5-1: SerialNumber: syz
[  872.647416][ T5132] usb 5-1: config 0 descriptor??
[  872.692154][ T1954] pvrusb2: Invalid write control endpoint
[  872.695003][ T5132] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  872.698679][ T1954] pvrusb2: Invalid write control endpoint
[  872.728843][ T1954] pvrusb2: Invalid write control endpoint
[  872.736510][ T1954] pvrusb2: Invalid write control endpoint
[  872.742361][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  872.767304][ T1954] pvrusb2: Device being rendered inoperable
[  872.776307][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  872.794005][ T5135] usb 2-1: USB disconnect, device number 14
[  872.819760][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  872.846697][ T1954] pvrusb2: Invalid write control endpoint
[  872.920041][ T5132] usb 5-1: USB disconnect, device number 19
[  872.938060][ T5132] pvrusb2: Device being rendered inoperable
[  872.974151][ T1954] pvrusb2: Invalid write control endpoint
[  872.985107][ T1954] pvrusb2: Invalid write control endpoint
[  872.992371][ T1954] pvrusb2: Invalid write control endpoint
[  872.999014][ T1954] pvrusb2: Invalid write control endpoint
[  873.007758][ T1954] pvrusb2: Invalid write control endpoint
[  873.014967][ T1954] pvrusb2: Invalid write control endpoint
[  873.020940][ T1954] pvrusb2: Invalid write control endpoint
[  873.041429][ T1954] pvrusb2: Invalid write control endpoint
[  873.047719][ T1954] pvrusb2: Invalid write control endpoint
[  873.064825][ T1954] pvrusb2: Invalid write control endpoint
[  873.082598][ T1954] pvrusb2: Invalid write control endpoint
[  873.088386][ T1954] pvrusb2: Invalid write control endpoint
[  873.102654][ T1954] pvrusb2: Invalid write control endpoint
[  873.108436][ T1954] pvrusb2: Invalid write control endpoint
[  873.114633][ T1954] pvrusb2: Invalid write control endpoint
[  873.120390][ T1954] pvrusb2: Invalid write control endpoint
[  873.126560][ T1954] pvrusb2: Invalid write control endpoint
[  873.134539][ T1954] pvrusb2: Invalid write control endpoint
[  873.140295][ T1954] pvrusb2: Invalid write control endpoint
[  873.146651][ T1954] pvrusb2: Invalid write control endpoint
[  873.152412][ T1954] pvrusb2: Invalid write control endpoint
[  873.158803][ T1954] pvrusb2: Invalid write control endpoint
[  873.167346][ T1954] pvrusb2: Invalid write control endpoint
[  873.181276][ T1954] pvrusb2: Invalid write control endpoint
[  873.189726][ T1954] pvrusb2: Invalid write control endpoint
[  873.200505][ T1954] pvrusb2: Invalid write control endpoint
[  873.208963][ T1954] pvrusb2: Invalid write control endpoint
[  873.226835][ T1954] pvrusb2: Invalid write control endpoint
[  873.238129][ T1954] pvrusb2: Invalid write control endpoint
[  873.247822][ T1954] pvrusb2: Invalid write control endpoint
[  873.257552][ T1954] pvrusb2: Invalid write control endpoint
[  873.267386][ T1954] pvrusb2: Invalid write control endpoint
01:55:41 executing program 5:
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r0, &(0x7f00000003c0)='ns/mnt\x00')

01:55:41 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x15}]})

01:55:41 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xcb98e33a129f371e, 0x50032, 0xffffffffffffffff, 0x0)

[  873.278079][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
01:55:41 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x18, 0x2}}]}}]}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)

01:55:41 executing program 5:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)

01:55:41 executing program 3:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f00000027c0)={&(0x7f00000026c0)={0x2}, 0x18, &(0x7f0000002780)={0x0}}, 0x0)

[  873.427991][ T1954] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b)
[  873.441300][ T1954] pvrusb2: Invalid write control endpoint
[  873.452279][ T1954] pvrusb2: Invalid write control endpoint
[  873.461752][ T1954] pvrusb2: Invalid write control endpoint
[  873.471498][ T1954] pvrusb2: Invalid write control endpoint
[  873.506434][ T1954] pvrusb2: Invalid write control endpoint
[  873.547989][ T1954] pvrusb2: Invalid write control endpoint
[  873.568496][ T1954] pvrusb2: Invalid write control endpoint
01:55:41 executing program 3:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x10}, 0x10}}, 0x0)

[  873.593241][ T1954] pvrusb2: Invalid write control endpoint
[  873.613522][ T1954] pvrusb2: Invalid write control endpoint
[  873.645851][ T1954] pvrusb2: Invalid write control endpoint
[  873.659968][ T1954] pvrusb2: Invalid write control endpoint
[  873.685138][ T1954] pvrusb2: Invalid write control endpoint
[  873.694226][ T1954] pvrusb2: Invalid write control endpoint
[  873.700993][ T1954] pvrusb2: Invalid write control endpoint
[  873.707022][ T1954] pvrusb2: Invalid write control endpoint
[  873.713271][ T1954] pvrusb2: Invalid write control endpoint
[  873.719281][ T1954] pvrusb2: Invalid write control endpoint
[  873.732329][ T1954] pvrusb2: Invalid write control endpoint
[  873.752283][ T1954] pvrusb2: Invalid write control endpoint
[  873.758405][ T1954] pvrusb2: Invalid write control endpoint
[  873.766825][ T1954] pvrusb2: Invalid write control endpoint
[  873.775316][ T1954] pvrusb2: Attached sub-driver cs53l32a
[  873.806116][ T1954] pvrusb2: Invalid write control endpoint
[  873.811868][ T1954] pvrusb2: Invalid write control endpoint
[  873.812720][ T5132] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  873.817815][ T1954] pvrusb2: Invalid write control endpoint
[  873.832399][ T1954] pvrusb2: Invalid write control endpoint
[  873.838629][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  873.858693][ T1954] pvrusb2: Device being rendered inoperable
[  873.865831][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  873.879743][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  874.252802][ T5133] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  874.342921][ T5132] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  874.352009][ T5132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.361296][ T5132] usb 5-1: Product: syz
[  874.365598][ T5132] usb 5-1: Manufacturer: syz
[  874.370204][ T5132] usb 5-1: SerialNumber: syz
[  874.380171][ T5132] usb 5-1: config 0 descriptor??
[  874.424336][ T5132] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  874.642745][ T1954] pvrusb2: Invalid write control endpoint
[  874.647722][ T5132] usb 5-1: USB disconnect, device number 20
[  874.662898][ T5133] usb 3-1: config 0 has an invalid interface number: 122 but max is 1
[  874.675014][ T5133] usb 3-1: config 0 has no interface number 1
[  874.704748][ T1954] pvrusb2: Invalid write control endpoint
[  874.710541][ T1954] pvrusb2: Invalid write control endpoint
[  874.720905][ T1954] pvrusb2: Invalid write control endpoint
[  874.726949][ T1954] pvrusb2: Invalid write control endpoint
[  874.739617][ T1954] pvrusb2: Invalid write control endpoint
[  874.745930][ T1954] pvrusb2: Invalid write control endpoint
[  874.751665][ T1954] pvrusb2: Invalid write control endpoint
[  874.757664][ T1954] pvrusb2: Invalid write control endpoint
[  874.763520][ T1954] pvrusb2: Invalid write control endpoint
[  874.769260][ T1954] pvrusb2: Invalid write control endpoint
[  874.776084][ T1954] pvrusb2: Invalid write control endpoint
[  874.781809][ T1954] pvrusb2: Invalid write control endpoint
[  874.787637][ T1954] pvrusb2: Invalid write control endpoint
[  874.793472][ T1954] pvrusb2: Invalid write control endpoint
[  874.799217][ T1954] pvrusb2: Invalid write control endpoint
[  874.805016][ T1954] pvrusb2: Invalid write control endpoint
[  874.810744][ T1954] pvrusb2: Invalid write control endpoint
[  874.816553][ T1954] pvrusb2: Invalid write control endpoint
[  874.822301][ T1954] pvrusb2: Invalid write control endpoint
[  874.829035][ T1954] pvrusb2: Invalid write control endpoint
[  874.834952][ T1954] pvrusb2: Invalid write control endpoint
[  874.840690][ T1954] pvrusb2: Invalid write control endpoint
[  874.846496][ T1954] pvrusb2: Invalid write control endpoint
[  874.852234][ T1954] pvrusb2: Invalid write control endpoint
[  874.858058][ T1954] pvrusb2: Invalid write control endpoint
[  874.862904][ T5133] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  874.863901][ T1954] pvrusb2: Invalid write control endpoint
[  874.880027][ T1954] pvrusb2: Invalid write control endpoint
[  874.882660][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.885872][ T1954] pvrusb2: Invalid write control endpoint
[  874.899734][ T1954] pvrusb2: Invalid write control endpoint
[  874.902917][ T5133] usb 3-1: Product: syz
[  874.905543][ T1954] pvrusb2: Invalid write control endpoint
[  874.910639][ T5133] usb 3-1: Manufacturer: syz
[  874.915850][ T1954] pvrusb2: Invalid write control endpoint
[  874.926377][ T1954] pvrusb2: Invalid write control endpoint
[  874.928244][ T5133] usb 3-1: SerialNumber: syz
[  874.935709][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  874.942130][ T5133] usb 3-1: config 0 descriptor??
01:55:43 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0xc2, 0xf5}}, {{0x9, 0x4, 0x7a, 0x0, 0x0, 0x4e, 0x4c, 0x64}}]}}]}}, 0x0)
socket(0x0, 0x5, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001a40)={{}, "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"})
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

01:55:43 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:43 executing program 1:
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r2}, 0x8)

01:55:43 executing program 5:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

01:55:43 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0x0, @fixed}}}, 0x6a)

[  875.002973][ T5133] usb 3-1: can't set config #0, error -71
[  875.033296][ T1954] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  875.039725][ T1954] pvrusb2: Invalid write control endpoint
[  875.046082][ T5133] usb 3-1: USB disconnect, device number 11
01:55:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000940))

01:55:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x1)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e)
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x14)

01:55:43 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)

[  875.084306][ T1954] pvrusb2: Invalid write control endpoint
[  875.098518][ T1954] pvrusb2: Invalid write control endpoint
[  875.128543][ T1954] pvrusb2: Invalid write control endpoint
[  875.152073][ T1954] pvrusb2: Invalid write control endpoint
01:55:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x1, 0x1012)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2a]}, 0x8)
accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000100)=0x6e, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES8]})
r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x0, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x0)

[  875.180379][ T1954] pvrusb2: Invalid write control endpoint
01:55:43 executing program 5:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffff06, 0x2}, 0xfffffffffffffe1e)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet(0x2, 0x5, 0x0)
r2 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r3 = dup2(r2, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000040)={0x1, [<r4=>0x0]}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000080)={r4}, &(0x7f0000000000)=0x8)

01:55:43 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000680), 0x0, 0x410002)

[  875.242622][ T1954] pvrusb2: Invalid write control endpoint
[  875.248517][ T1954] pvrusb2: Invalid write control endpoint
[  875.287782][ T1954] pvrusb2: Invalid write control endpoint
[  875.326035][ T1954] pvrusb2: Invalid write control endpoint
[  875.524104][ T5133] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  875.748698][ T1954] pvrusb2: Invalid write control endpoint
[  875.988942][ T1954] pvrusb2: Invalid write control endpoint
[  876.013423][ T5133] usb 3-1: config 0 has an invalid interface number: 122 but max is 1
[  876.095587][ T5133] usb 3-1: config 0 has no interface number 1
01:55:44 executing program 4:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0x10}}, 0x0)

[  876.184194][ T1954] pvrusb2: Invalid write control endpoint
[  876.253005][ T1954] pvrusb2: Invalid write control endpoint
[  876.261690][ T1954] pvrusb2: Invalid write control endpoint
[  876.302701][ T1954] pvrusb2: Invalid write control endpoint
[  876.309233][ T1954] pvrusb2: Invalid write control endpoint
[  876.345283][ T1954] pvrusb2: Invalid write control endpoint
[  876.369125][ T1954] pvrusb2: Invalid write control endpoint
[  876.387480][ T1954] pvrusb2: Invalid write control endpoint
[  876.409685][ T5133] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  876.424099][ T1954] pvrusb2: Invalid write control endpoint
[  876.436904][ T1954] pvrusb2: Attached sub-driver cs53l32a
[  876.437252][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.471209][ T5133] usb 3-1: Product: syz
[  876.488597][ T5133] usb 3-1: Manufacturer: syz
[  876.502649][ T5133] usb 3-1: SerialNumber: syz
[  876.525816][ T5133] usb 3-1: config 0 descriptor??
[  876.533445][ T1954] pvrusb2: Invalid write control endpoint
[  876.539330][ T1954] pvrusb2: Invalid write control endpoint
[  876.552359][ T1954] pvrusb2: Invalid write control endpoint
[  876.565316][ T1954] pvrusb2: Invalid write control endpoint
[  876.571664][ T5133] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  876.577842][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  876.616620][ T1954] pvrusb2: Device being rendered inoperable
[  876.629447][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  876.672605][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  876.879122][ T5133] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  876.886731][ T1954] pvrusb2: Invalid write control endpoint
[  876.935560][ T5133] usb 3-1: USB disconnect, device number 12
[  877.048177][ T1954] pvrusb2: Invalid write control endpoint
[  877.067713][ T1954] pvrusb2: Invalid write control endpoint
[  877.082875][ T1954] pvrusb2: Invalid write control endpoint
[  877.095610][ T1954] pvrusb2: Invalid write control endpoint
[  877.108282][ T1954] pvrusb2: Invalid write control endpoint
[  877.119919][ T1954] pvrusb2: Invalid write control endpoint
[  877.134275][ T1954] pvrusb2: Invalid write control endpoint
[  877.158314][ T1954] pvrusb2: Invalid write control endpoint
[  877.166707][ T1954] pvrusb2: Invalid write control endpoint
[  877.177781][ T1954] pvrusb2: Invalid write control endpoint
[  877.186608][ T1954] pvrusb2: Invalid write control endpoint
[  877.192394][ T1954] pvrusb2: Invalid write control endpoint
[  877.200858][ T1954] pvrusb2: Invalid write control endpoint
[  877.207035][ T1954] pvrusb2: Invalid write control endpoint
[  877.213578][ T1954] pvrusb2: Invalid write control endpoint
[  877.219451][ T1954] pvrusb2: Invalid write control endpoint
[  877.225591][ T1954] pvrusb2: Invalid write control endpoint
[  877.232160][ T1954] pvrusb2: Invalid write control endpoint
[  877.238295][ T1954] pvrusb2: Invalid write control endpoint
[  877.249373][ T1954] pvrusb2: Invalid write control endpoint
[  877.255839][ T1954] pvrusb2: Invalid write control endpoint
[  877.261636][ T1954] pvrusb2: Invalid write control endpoint
[  877.268197][ T1954] pvrusb2: Invalid write control endpoint
[  877.274091][ T1954] pvrusb2: Invalid write control endpoint
[  877.279876][ T1954] pvrusb2: Invalid write control endpoint
[  877.285883][ T1954] pvrusb2: Invalid write control endpoint
[  877.291617][ T1954] pvrusb2: Invalid write control endpoint
[  877.297871][ T1954] pvrusb2: Invalid write control endpoint
[  877.303904][ T1954] pvrusb2: Invalid write control endpoint
[  877.309635][ T1954] pvrusb2: Invalid write control endpoint
[  877.315700][ T1954] pvrusb2: Invalid write control endpoint
[  877.321420][ T1954] pvrusb2: Invalid write control endpoint
[  877.328030][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
01:55:45 executing program 2:
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f00000008c0), 0x8a203, 0x0)

01:55:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x1)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e)
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x14)

01:55:45 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x1)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e)
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x14)

01:55:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x1)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e)
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x14)

01:55:45 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

01:55:45 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

[  877.375586][ T1954] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b)
[  877.382079][ T1954] pvrusb2: Invalid write control endpoint
[  877.388250][ T1954] pvrusb2: Invalid write control endpoint
[  877.421555][ T1954] pvrusb2: Invalid write control endpoint
[  877.456386][ T1954] pvrusb2: Invalid write control endpoint
01:55:45 executing program 4:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000180))

01:55:45 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x3c0, 0x320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

[  877.474572][ T1954] pvrusb2: Invalid write control endpoint
[  877.482420][ T1954] pvrusb2: Invalid write control endpoint
[  877.496732][ T1954] pvrusb2: Invalid write control endpoint
[  877.505809][ T1954] pvrusb2: Invalid write control endpoint
[  877.511686][ T1954] pvrusb2: Invalid write control endpoint
[  877.526212][ T1954] pvrusb2: Invalid write control endpoint
[  877.532124][ T1954] pvrusb2: Invalid write control endpoint
[  877.552157][ T1954] pvrusb2: Invalid write control endpoint
01:55:45 executing program 4:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)

01:55:45 executing program 1:
syz_emit_ethernet(0x7d, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffbffffff4e09661ce0a68100400086dd6000000000432b00fe8000000000000000000000000000bbfe"], 0x0)

01:55:45 executing program 3:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'})

[  877.615593][ T1954] pvrusb2: Invalid write control endpoint
[  877.621430][ T1954] pvrusb2: Invalid write control endpoint
01:55:45 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x149101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)

01:55:45 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x2, "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"}, 0xfd1, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000041c0)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
msgctl$IPC_RMID(r0, 0x0)

[  877.686468][ T1954] pvrusb2: Invalid write control endpoint
01:55:45 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000000040)={0x3})

[  877.686491][ T1954] pvrusb2: Invalid write control endpoint
[  877.686508][ T1954] pvrusb2: Invalid write control endpoint
01:55:46 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000240))

01:55:46 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)

[  877.686525][ T1954] pvrusb2: Invalid write control endpoint
[  877.686542][ T1954] pvrusb2: Invalid write control endpoint
01:55:46 executing program 4:
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)

[  877.686559][ T1954] pvrusb2: Invalid write control endpoint
[  877.686576][ T1954] pvrusb2: Invalid write control endpoint
[  877.686843][ T1954] pvrusb2: Attached sub-driver cs53l32a
[  877.923941][ T1954] pvrusb2: Invalid write control endpoint
[  877.923971][ T1954] pvrusb2: Invalid write control endpoint
[  877.924020][ T1954] pvrusb2: Invalid write control endpoint
[  877.924041][ T1954] pvrusb2: Invalid write control endpoint
[  877.924052][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  877.924076][ T1954] pvrusb2: Device being rendered inoperable
[  877.924100][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  877.924112][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  877.924155][ T1954] pvrusb2: Invalid write control endpoint
[  878.139173][ T1954] pvrusb2: Invalid write control endpoint
[  878.139232][ T1954] pvrusb2: Invalid write control endpoint
[  878.139251][ T1954] pvrusb2: Invalid write control endpoint
[  878.139269][ T1954] pvrusb2: Invalid write control endpoint
[  878.139286][ T1954] pvrusb2: Invalid write control endpoint
[  878.139302][ T1954] pvrusb2: Invalid write control endpoint
[  878.139319][ T1954] pvrusb2: Invalid write control endpoint
[  878.139336][ T1954] pvrusb2: Invalid write control endpoint
[  878.139354][ T1954] pvrusb2: Invalid write control endpoint
[  878.139371][ T1954] pvrusb2: Invalid write control endpoint
[  878.139388][ T1954] pvrusb2: Invalid write control endpoint
[  878.139405][ T1954] pvrusb2: Invalid write control endpoint
[  878.139422][ T1954] pvrusb2: Invalid write control endpoint
[  878.139439][ T1954] pvrusb2: Invalid write control endpoint
[  878.139455][ T1954] pvrusb2: Invalid write control endpoint
[  878.139472][ T1954] pvrusb2: Invalid write control endpoint
[  878.139488][ T1954] pvrusb2: Invalid write control endpoint
[  878.139505][ T1954] pvrusb2: Invalid write control endpoint
[  878.139522][ T1954] pvrusb2: Invalid write control endpoint
[  878.139539][ T1954] pvrusb2: Invalid write control endpoint
[  878.139556][ T1954] pvrusb2: Invalid write control endpoint
[  878.139573][ T1954] pvrusb2: Invalid write control endpoint
[  878.139589][ T1954] pvrusb2: Invalid write control endpoint
[  878.139607][ T1954] pvrusb2: Invalid write control endpoint
[  878.139623][ T1954] pvrusb2: Invalid write control endpoint
[  878.139640][ T1954] pvrusb2: Invalid write control endpoint
[  878.139656][ T1954] pvrusb2: Invalid write control endpoint
[  878.139674][ T1954] pvrusb2: Invalid write control endpoint
[  878.139691][ T1954] pvrusb2: Invalid write control endpoint
[  878.139708][ T1954] pvrusb2: Invalid write control endpoint
[  878.139724][ T1954] pvrusb2: Invalid write control endpoint
[  878.139741][ T1954] pvrusb2: Invalid write control endpoint
[  878.140698][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  878.296025][ T1954] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a)
[  878.296117][ T1954] pvrusb2: Invalid write control endpoint
[  878.296135][ T1954] pvrusb2: Invalid write control endpoint
[  878.296151][ T1954] pvrusb2: Invalid write control endpoint
[  878.296165][ T1954] pvrusb2: Invalid write control endpoint
[  878.296180][ T1954] pvrusb2: Invalid write control endpoint
[  878.296195][ T1954] pvrusb2: Invalid write control endpoint
[  878.296209][ T1954] pvrusb2: Invalid write control endpoint
[  878.296325][ T1954] pvrusb2: Invalid write control endpoint
[  878.296342][ T1954] pvrusb2: Invalid write control endpoint
[  878.296357][ T1954] pvrusb2: Invalid write control endpoint
[  878.296372][ T1954] pvrusb2: Invalid write control endpoint
[  878.296387][ T1954] pvrusb2: Invalid write control endpoint
[  878.296403][ T1954] pvrusb2: Invalid write control endpoint
[  878.296419][ T1954] pvrusb2: Invalid write control endpoint
[  878.296435][ T1954] pvrusb2: Invalid write control endpoint
[  878.296452][ T1954] pvrusb2: Invalid write control endpoint
[  878.296467][ T1954] pvrusb2: Invalid write control endpoint
[  878.296485][ T1954] pvrusb2: Invalid write control endpoint
[  878.296500][ T1954] pvrusb2: Invalid write control endpoint
[  878.296517][ T1954] pvrusb2: Invalid write control endpoint
[  878.296535][ T1954] pvrusb2: Invalid write control endpoint
[  878.296791][ T1954] pvrusb2: Attached sub-driver cs53l32a
[  878.350820][ T1954] pvrusb2: Invalid write control endpoint
[  878.350890][ T1954] pvrusb2: Invalid write control endpoint
[  878.350912][ T1954] pvrusb2: Invalid write control endpoint
[  878.350933][ T1954] pvrusb2: Invalid write control endpoint
[  878.350945][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  878.350968][ T1954] pvrusb2: Device being rendered inoperable
[  878.350999][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  878.351011][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
01:55:47 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:47 executing program 1:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x10}, 0x10}}, 0x0)

01:55:47 executing program 4:
syz_clone(0x40100200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x10001000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)

01:55:47 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffd, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040))

01:55:47 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f0000000300), 0x10)

01:55:47 executing program 5:
syz_clone(0x26824180, 0x0, 0x0, 0x0, 0x0, 0x0)

01:55:47 executing program 2:
socketpair(0x0, 0x0, 0x0, &(0x7f00000009c0))

01:55:47 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0)

01:55:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_bond\x00'})

01:55:47 executing program 1:
r0 = msgget(0x3, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{}, 0x0, 0x0, 0xffffffffffffffff})

01:55:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x7)

01:55:47 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x73, 0x101301)
ioctl$USBDEVFS_BULK(r0, 0x80045519, 0x0)

01:55:48 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:48 executing program 2:
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0)
renameat(r0, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00')

01:55:48 executing program 1:
r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
write$damon_monitor_on(r0, 0x0, 0x0)

01:55:48 executing program 3:
add_key$user(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$describe(0x6, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002000))
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000077c0), 0x0, 0x2040)
recvmmsg(0xffffffffffffffff, &(0x7f0000007500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000007780))
add_key$keyring(0x0, &(0x7f0000006200)={'syz', 0x1}, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xcb98e33a129f371e, 0x50032, 0xffffffffffffffff, 0x0)

01:55:48 executing program 4:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0)

01:55:48 executing program 5:
syz_clone(0x70802180, 0x0, 0x4, 0x0, 0x0, 0x0)

01:55:48 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000000cd80), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f000000cd40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})

01:55:48 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x808, &(0x7f0000000600)=ANY=[@ANYBLOB="00db16829f6f223801fbf346fbcb361a39ddaf9d9f3c0af9a8ab94c7941e0e3c9475e63359aed78788f36d3a46db8aec833c27bd3e04b336aad4e94458ea4c54b693744f778aee571c4196000005000000a2a5d06be49880db3e328d0ed6fe222fcfd1fc4111df0263d4e1e05f9b2b7969943681ca1edbb19a3ab3d79e2c96a3f281528a5f87018ff44d3446025929889bf379606d3cf3e50000000000000000000000007f3dd0c8e01c91244d054cddd790eea2f6714eba57910555eea84c0516a8e0b01d76f1fbc57484429c9f884d0200c95f3f0c2da8d7568bd94f391939728fd37ad1a183a83309a14772bc28a04eaaeb297596b0768da1bb86d329f3a19ba1d6cc665df9d78165158170eef9b268c259fe12c43c970496535266b997c20a4e75df43f06b2fa7f27c1ac5aefcc161b6000000000000000cc29d041d2511fc5c9ef862ce97493abf6adfcd06c4800d6a1a287c96a228e129e77cec5e998224d095a150eb8d1b376b4664844b8b544b5a90dcfc79b3d31cf6ba07cf00bfbfaf033cba704a157300008675894b7452356fa8f600eb1b31b21f4323ff6421d65777fa3cab7c0930f09ccb714d081efd3067d135f258fc02ed63ebcc485f16f88c3801030c70565a197e6e14c9c98dcd9ed70309ad000000c9121f9c16df753adadf0100000000000000000000000000c3da828f339f8ce96e57518d0d56edf2e6da7bbcd8e1c799f485db64d813e5e45cd106b5b7e64713c49ce3c0e487b3a05ad77d66d1bc0d4178fe5b3bbe072ecd077a3d8409d3e6f1e2fccb08bd60e0661a8b5f7f632f975a34ebf978ddae5d6580ab252aa5ef19e1ffd1cc4084bd6f22a2dd98719a3b1ff7ab049a58554c157e715b17f368250ee5e93a140517cafbbe09a9c3e72e306bbb01d78339c8bbb0d69a14c8437ba1c736ea7c3fd50932e9ba6e64f24b3d6e50634a7cf58b40810f269896ac5b65133907"], 0x1, 0xa07, &(0x7f0000001540)="$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")
pipe(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$phonet(0x23, 0x2, 0x1)
shutdown(r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = dup(r4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0)
pwritev2(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0)

01:55:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e)
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x14)

01:55:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2}, 0x1c)
listen(r0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x808, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0xa07, &(0x7f0000001540)="$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")
pipe(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$phonet(0x23, 0x2, 0x1)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@dellinkprop={0x2c, 0x6d, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0x24660}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4008080)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001f80)=""/4096, 0x1000}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

01:55:48 executing program 2:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001b80)='ns/pid\x00')

[  880.453714][T17355] loop4: detected capacity change from 0 to 2048
[  880.574134][T17368] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
01:55:48 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  881.734888][T17369] loop1: detected capacity change from 0 to 2048
[  881.813610][T17375] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
01:55:50 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:50 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @empty}})

01:55:50 executing program 3:
r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="f8", 0x1, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000840)="3b8a1df70f2a9f617a8027abbc7906d0e3dcfbcf6dbce028667725db815584dcf3285c06814a663bddaa7dc7c7375adae6e053bf338a1553aa836e49dba9203ebfb03ed4d28758f2386aeac6c8003acfcc6a434047888331a9fa3e8cd900ebea697549a6c7a1d172f5027ed962df277259bf8532478fb32df411aa3860a044ea55b35fe3f782a25104bf11692c5e80a08ce4656028a3c41dd7d673faafb32787c85bd6036c90901f873271e850edeee8308a5e2d8ae5862f19ac3b66809d3ceb4b5bff4f21fc9928be864a1e35c00ae17ad6e9895a65569f83513d75c506fc9f0cef3b801e8d82160e16f6f7a15215081b7d29de0acc42cde123d9bd973293e6da7248e7ae97470a7583dadca95418728ed46636761fcef854c8c048b15f740494a76d22dcb3e7a5222e08fee842f0ce16f28fdd0f3c9b01f6a054423260da57bef3a9acf502781e7fa05706843b05486cf283593c72dc7370b7ac8e4946770bee3d782178fd9b1572b5c62a0e31cf85672e4e1b05f6ee3a8cc7fafb592c45ccbf60713d018eb559ab4bd1588f90cdead55dc8021955d0d004b64d70acf7dc315f312a972e42de7762", 0x1a9, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000380)="0f20acb58286e65c9a3f4394dc292d4a70f06a9b6e31775973b89bc23f21c269548a7fb2e63e97f57a7bd5ba7cacccca988c14d93aecd910da083c0717c2bf5a299d90c12b01344f5df406606ef8c1575f4eb346e63edcafc8dab5539e8074fae8ae54243dc9f7fa283b559c0f8091431acfd596c21ec81386dda9f4900828b624a737694849e7fcf631b6000000000000000000005e135bbe6a2daed562c4573f95541f9c83648d5865abd2793bd6d35475621bea6aa855d47114262b08be6ea44d31", 0xc3, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000001600)={r0, r1, r2}, &(0x7f0000001640)=""/4096, 0x1000, 0x0)

01:55:50 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x4}}, &(0x7f00000002c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:50 executing program 1:
r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

01:55:50 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000000c0)=ANY=[], 0x14)

01:55:50 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8911, &(0x7f0000000140)={'ip6_vti0\x00', 0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{<r2=>0x0, 0x6cd6, 0xfffffffffffffffb, 0x0, 0x401, 0x9, 0x1, 0xfffffffb, 0x7ff, 0x8, 0x3, 0x9, 0x5, 0x7, 0x5}})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001180)={{r2, 0x32b9, 0xffffffff, 0x7, 0x100000000, 0x9, 0x3c2d527c, 0xc5, 0x7, 0x7fffffff, 0x5, 0xa71, 0x3, 0x1ff}})
r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000002180)={'syztnl0\x00', <r4=>0x0, 0x29, 0xcf, 0x3f, 0x0, 0x1, @mcast2, @mcast1, 0x8, 0x7800, 0x2, 0x200}})
r5 = syz_open_dev$vcsn(&(0x7f0000002340), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f00000022c0)={0x80, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}]}})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r7=>r4, 0x4, 0x67, 0x0, 0x80000001, 0x8, @rand_addr=' \x01\x00', @empty, 0x1, 0x7a5, 0x7, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f2, &(0x7f0000002280)={'ip6tnl0\x00', &(0x7f0000002200)={'syztnl1\x00', r7, 0x29, 0xb6, 0x4, 0x1, 0x42, @mcast2, @empty, 0x80, 0x80, 0x8001, 0x8}})

01:55:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0)

[  882.750409][T17384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
01:55:51 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x5460, &(0x7f0000000280)={0x0})

01:55:51 executing program 5:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)

01:55:51 executing program 4:
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
syz_clone(0xc0801040, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

01:55:51 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[<r1=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000180)=[r1], 0x3})

[  883.052829][ T5133] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  883.332805][ T5133] usb 2-1: Using ep0 maxpacket: 16
[  883.346507][ T5135] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  883.402531][    C0] hrtimer: interrupt took 936104 ns
[  883.482812][ T5133] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  883.491554][ T5133] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  883.503037][ T5133] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  883.672808][ T5133] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  883.689081][ T5133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.716118][ T5133] usb 2-1: Product: syz
[  883.720332][ T5133] usb 2-1: Manufacturer: syz
[  883.726245][ T5133] usb 2-1: SerialNumber: syz
[  883.872904][ T5135] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  883.888088][ T5135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.908711][ T5135] usb 6-1: Product: syz
[  883.920977][ T5135] usb 6-1: Manufacturer: syz
[  883.935469][ T5135] usb 6-1: SerialNumber: syz
[  883.993436][ T5135] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  884.062952][ T5133] usb 2-1: 0:2 : does not exist
[  884.169207][ T5133] usb 2-1: USB disconnect, device number 15
[  884.212295][ T5089] udevd[5089]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
01:55:52 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7e, 0xc2, 0xf5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfa}}]}}]}}]}}, 0x0)

01:55:52 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', &(0x7f0000002200)={'syztnl1\x00', 0x0, 0x29, 0xb6, 0x0, 0x0, 0x0, @mcast2, @empty}})

01:55:52 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:52 executing program 4:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000180)=[r2], 0x1})

[  884.371185][T17413] ip6tnl0: mtu greater than device maximum
01:55:52 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000500)={0x1f, 0x2}, 0x4)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ip_gre', 0x0, 0x0)
write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x6)

01:55:52 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:52 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x7, &(0x7f0000000040)={0x0}, 0x10)

[  884.552991][ T5132] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
01:55:52 executing program 3:
syz_usb_connect(0x6, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x54, 0xd, 0x50, 0x0, 0xac8, 0x321, 0xb07c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x34, 0xf0}}]}}]}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

01:55:52 executing program 4:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x14, &(0x7f0000000040)={0x0}, 0x10)

[  884.632931][ T5134] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  884.958818][ T5135] usb 6-1: USB disconnect, device number 15
[  884.992916][ T5134] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  885.162850][ T5134] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  885.176405][ T5134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.198050][ T5134] usb 3-1: Product: syz
[  885.211706][ T5134] usb 3-1: Manufacturer: syz
[  885.227103][ T5134] usb 3-1: SerialNumber: syz
[  885.242853][ T5134] usb 3-1: config 0 descriptor??
[  885.295518][ T5134] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
01:55:53 executing program 5:
select(0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40}, &(0x7f00000005c0)={0x77359400})
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
select(0x0, 0x0, &(0x7f0000000040)={0x3, 0x4, 0x4000000000000000, 0x0, 0x200, 0x6, 0x0, 0x4}, &(0x7f0000000080)={0x6, 0x73d, 0x0, 0x8, 0x9, 0x7fffffffffffffff, 0x7fff}, &(0x7f0000000100)={r0, r1/1000+10000})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000600)={[{0x50, 0x4e00, "38b76aad2fdf001c3836ecd1d460e5476b9d70f0045a469478703de79dfc04f4bf6f5446eb46cb1c1868b0b9d419d63ee97f5d0d9806a8ab4e7a8fe1780922d58e4c34c161254cb737670bb0b6a30266"}, {0x2f, 0x4e00, "29a7d53b41c07087e30483cadbfe4a84cf81fbb2daa089638d7ad843ced5d274b579720335ed3e20e9a38389916a1c"}]})

01:55:53 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)

01:55:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[<r1=>0x0]})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "488fc32ee04c207a0adba3f51066a6e52378b4628445715723a026971c524d83"}})

[  885.504271][ T1954] pvrusb2: Invalid write control endpoint
[  885.514813][ T5134] usb 3-1: USB disconnect, device number 13
[  885.681016][ T1954] pvrusb2: Invalid write control endpoint
[  885.690978][ T1954] pvrusb2: Invalid write control endpoint
[  885.698197][ T5132] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  885.712762][ T5132] ath9k_htc: Failed to initialize the device
[  885.729868][ T1954] pvrusb2: Invalid write control endpoint
[  885.739896][ T5135] usb 6-1: ath9k_htc: USB layer deinitialized
[  885.772268][ T1954] pvrusb2: Invalid write control endpoint
[  885.786289][ T1954] pvrusb2: Invalid write control endpoint
[  885.799709][ T1954] pvrusb2: Invalid write control endpoint
[  885.820631][ T1954] pvrusb2: Invalid write control endpoint
[  885.846101][ T1954] pvrusb2: Invalid write control endpoint
[  885.875459][ T1954] pvrusb2: Invalid write control endpoint
[  885.881242][ T1954] pvrusb2: Invalid write control endpoint
[  885.912715][ T1954] pvrusb2: Invalid write control endpoint
[  885.918632][ T1954] pvrusb2: Invalid write control endpoint
[  885.930647][ T1954] pvrusb2: Invalid write control endpoint
[  885.959201][ T1954] pvrusb2: Invalid write control endpoint
[  885.982923][ T1954] pvrusb2: Invalid write control endpoint
[  885.988737][ T1954] pvrusb2: Invalid write control endpoint
[  885.995802][ T1954] pvrusb2: Invalid write control endpoint
01:55:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000500)={0x1f, 0x2}, 0x4)
write$bt_hci(r0, &(0x7f0000000140)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7)

01:55:54 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, &(0x7f0000000040)={0x0, r0}, 0x10)

[  886.008488][ T1954] pvrusb2: Invalid write control endpoint
[  886.040904][ T1954] pvrusb2: Invalid write control endpoint
[  886.072759][ T1954] pvrusb2: Invalid write control endpoint
[  886.078544][ T1954] pvrusb2: Invalid write control endpoint
[  886.122730][ T5135] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  886.157194][ T1954] pvrusb2: Invalid write control endpoint
[  886.164458][ T1954] pvrusb2: Invalid write control endpoint
[  886.172822][ T1954] pvrusb2: Invalid write control endpoint
[  886.178736][ T1954] pvrusb2: Invalid write control endpoint
[  886.186050][ T1954] pvrusb2: Invalid write control endpoint
[  886.192675][ T1954] pvrusb2: Invalid write control endpoint
[  886.204869][ T1954] pvrusb2: Invalid write control endpoint
[  886.210743][ T1954] pvrusb2: Invalid write control endpoint
[  886.216644][ T1954] pvrusb2: Invalid write control endpoint
[  886.222506][ T1954] pvrusb2: Invalid write control endpoint
[  886.236283][ T1954] pvrusb2: Invalid write control endpoint
[  886.245917][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  886.308281][ T1954] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  886.319722][ T1954] pvrusb2: Invalid write control endpoint
[  886.337019][ T1954] pvrusb2: Invalid write control endpoint
[  886.348526][ T1954] pvrusb2: Invalid write control endpoint
[  886.357902][ T1954] pvrusb2: Invalid write control endpoint
[  886.370451][ T1954] pvrusb2: Invalid write control endpoint
[  886.382460][ T1954] pvrusb2: Invalid write control endpoint
[  886.393350][ T1954] pvrusb2: Invalid write control endpoint
[  886.408046][ T1954] pvrusb2: Invalid write control endpoint
[  886.416436][ T1954] pvrusb2: Invalid write control endpoint
[  886.426740][ T1954] pvrusb2: Invalid write control endpoint
[  886.432796][ T1954] pvrusb2: Invalid write control endpoint
[  886.438654][ T1954] pvrusb2: Invalid write control endpoint
[  886.452253][ T1954] pvrusb2: Invalid write control endpoint
[  886.462703][ T1954] pvrusb2: Invalid write control endpoint
[  886.468566][ T1954] pvrusb2: Invalid write control endpoint
[  886.474600][ T1954] pvrusb2: Invalid write control endpoint
[  886.480459][ T1954] pvrusb2: Invalid write control endpoint
[  886.492332][ T1954] pvrusb2: Invalid write control endpoint
[  886.498294][ T1954] pvrusb2: Invalid write control endpoint
[  886.504216][ T1954] pvrusb2: Invalid write control endpoint
[  886.510072][ T1954] pvrusb2: Invalid write control endpoint
[  886.517584][ T1954] pvrusb2: Attached sub-driver cs53l32a
01:55:54 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:54 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_le_host_supported={{0xc6d, 0x2}}}, 0x6)

01:55:54 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000003dc0)='./binderfs2/binder1\x00', 0x0, 0x0)

01:55:54 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x7})

01:55:54 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000001a80)={&(0x7f0000001980), 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x14}, 0xfcd1}}, 0x0)

01:55:54 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0xc2, 0xf5}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x407}}]})

01:55:54 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f0000002280)={'ip6tnl0\x00', &(0x7f0000002200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}})

[  886.673779][ T5135] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  886.699482][ T1954] pvrusb2: Invalid write control endpoint
[  886.703107][ T5135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.710621][ T1954] pvrusb2: Invalid write control endpoint
[  886.724403][ T1954] pvrusb2: Invalid write control endpoint
[  886.748171][ T1954] pvrusb2: Invalid write control endpoint
[  886.762163][ T5135] usb 6-1: Product: syz
[  886.764880][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  886.780037][ T5135] usb 6-1: Manufacturer: syz
[  886.788317][ T1954] pvrusb2: Device being rendered inoperable
[  886.804130][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  886.817337][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  886.837962][ T5135] usb 6-1: SerialNumber: syz
[  886.903510][ T5135] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  887.022772][ T5133] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  887.463024][    T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  887.602922][ T5133] usb 4-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  887.616230][ T5133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.640522][ T5133] usb 4-1: Product: Ї
[  887.656318][ T5133] usb 4-1: Manufacturer: ခ
[  887.669176][ T5133] usb 4-1: SerialNumber: syz
[  887.687936][ T5133] usb 4-1: config 0 descriptor??
[  887.765184][ T5133] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  887.985146][ T1954] pvrusb2: Invalid write control endpoint
[  887.994208][ T5133] usb 4-1: USB disconnect, device number 12
[  888.183121][ T5085] Bluetooth: hci2: command 0x0c2d tx timeout
[  888.195242][ T1954] pvrusb2: Invalid write control endpoint
[  888.201021][ T1954] pvrusb2: Invalid write control endpoint
[  888.208434][ T1954] pvrusb2: Invalid write control endpoint
[  888.215934][ T1954] pvrusb2: Invalid write control endpoint
[  888.223842][ T1954] pvrusb2: Invalid write control endpoint
[  888.229786][ T1954] pvrusb2: Invalid write control endpoint
[  888.235771][ T1954] pvrusb2: Invalid write control endpoint
[  888.241660][ T1954] pvrusb2: Invalid write control endpoint
[  888.247718][ T1954] pvrusb2: Invalid write control endpoint
[  888.253886][ T1954] pvrusb2: Invalid write control endpoint
[  888.259896][ T1954] pvrusb2: Invalid write control endpoint
[  888.266305][ T1954] pvrusb2: Invalid write control endpoint
[  888.272234][ T1954] pvrusb2: Invalid write control endpoint
[  888.278190][ T1954] pvrusb2: Invalid write control endpoint
[  888.284152][ T1954] pvrusb2: Invalid write control endpoint
[  888.292086][ T1954] pvrusb2: Invalid write control endpoint
[  888.298108][ T1954] pvrusb2: Invalid write control endpoint
[  888.305903][ T1954] pvrusb2: Invalid write control endpoint
[  888.311845][ T1954] pvrusb2: Invalid write control endpoint
[  888.319039][ T1954] pvrusb2: Invalid write control endpoint
[  888.325141][ T1954] pvrusb2: Invalid write control endpoint
[  888.331047][ T1954] pvrusb2: Invalid write control endpoint
[  888.339075][ T1954] pvrusb2: Invalid write control endpoint
[  888.345520][ T1954] pvrusb2: Invalid write control endpoint
[  888.351429][ T1954] pvrusb2: Invalid write control endpoint
[  888.358089][ T1954] pvrusb2: Invalid write control endpoint
[  888.364079][ T1954] pvrusb2: Invalid write control endpoint
[  888.369973][ T1954] pvrusb2: Invalid write control endpoint
[  888.384341][ T1954] pvrusb2: Invalid write control endpoint
[  888.399518][ T1954] pvrusb2: Invalid write control endpoint
[  888.414148][ T1954] pvrusb2: Invalid write control endpoint
[  888.435056][ T1954] pvrusb2: Invalid write control endpoint
[  888.445569][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  888.560018][ T1954] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  888.567064][ T1954] pvrusb2: Invalid write control endpoint
[  888.573055][    T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  888.573731][ T1954] pvrusb2: Invalid write control endpoint
[  888.581733][    T7] ath9k_htc: Failed to initialize the device
[  888.587370][ T1954] pvrusb2: Invalid write control endpoint
[  888.600331][ T1954] pvrusb2: Invalid write control endpoint
[  888.606642][ T1954] pvrusb2: Invalid write control endpoint
[  888.612428][ T1954] pvrusb2: Invalid write control endpoint
[  888.618351][ T1954] pvrusb2: Invalid write control endpoint
[  888.624411][ T1954] pvrusb2: Invalid write control endpoint
[  888.630255][ T1954] pvrusb2: Invalid write control endpoint
[  888.636161][ T1954] pvrusb2: Invalid write control endpoint
[  888.641971][ T1954] pvrusb2: Invalid write control endpoint
[  888.648110][ T1954] pvrusb2: Invalid write control endpoint
[  888.654569][ T1954] pvrusb2: Invalid write control endpoint
01:55:56 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x801c581f, &(0x7f0000000280)={0x0})

01:55:56 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', 0x0})

01:55:56 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:56 executing program 4:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064ce, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

01:55:56 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0xc2, 0xf5}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x407}}]})

01:55:56 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000340), 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x40086602, &(0x7f0000000280)={0x0})

[  888.660381][ T1954] pvrusb2: Invalid write control endpoint
[  888.667229][ T1954] pvrusb2: Invalid write control endpoint
[  888.679067][ T1954] pvrusb2: Invalid write control endpoint
[  888.686624][ T1954] pvrusb2: Invalid write control endpoint
[  888.687732][ T7571] usb 6-1: USB disconnect, device number 16
[  888.700904][ T1954] pvrusb2: Invalid write control endpoint
[  888.741760][ T7571] usb 6-1: ath9k_htc: USB layer deinitialized
[  888.765113][ T1954] pvrusb2: Invalid write control endpoint
[  888.782112][T17472] ip6tnl0: mtu less than device minimum
01:55:56 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000001500)='/sys/module/scsi_transport_fc', 0x200800, 0x0)

[  888.788698][ T1954] pvrusb2: Invalid write control endpoint
01:55:56 executing program 2:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x401c5820, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
write$FUSE_LK(r1, 0x0, 0x0)

01:55:56 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000500))

01:55:57 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, &(0x7f00000002c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  888.820706][ T1954] pvrusb2: Invalid write control endpoint
[  888.865827][ T1954] pvrusb2: Attached sub-driver cs53l32a
01:55:57 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}})

01:55:57 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000500)={0x1f, 0xffffffffffffffff}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_le_host_supported={{0xc6d, 0x2}}}, 0x6)

[  888.987278][ T1954] pvrusb2: Invalid write control endpoint
[  888.993815][ T1954] pvrusb2: Invalid write control endpoint
01:55:57 executing program 4:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/fs/erofs', 0x20140, 0x0)

01:55:57 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x4041, 0x0, 0x0)

[  889.076276][ T1954] pvrusb2: Invalid write control endpoint
[  889.150963][ T1954] pvrusb2: Invalid write control endpoint
[  889.198213][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  889.259964][ T1954] pvrusb2: Device being rendered inoperable
[  889.266898][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  889.281249][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  889.662781][ T5133] usb 4-1: new high-speed USB device number 13 using dummy_hcd
01:55:58 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000002380))

01:55:58 executing program 1:
syz_clone(0x83cc200, 0x0, 0x0, 0x0, 0x0, 0x0)

01:55:58 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x80000000}, 0x4)

[  890.222733][ T5133] usb 4-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  890.232789][ T5133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.240965][ T5133] usb 4-1: Product: Ї
[  890.249429][ T5133] usb 4-1: Manufacturer: ခ
[  890.254513][ T5133] usb 4-1: SerialNumber: syz
[  890.268193][ T5133] usb 4-1: config 0 descriptor??
[  890.316964][ T5133] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  890.533827][ T1954] pvrusb2: Invalid write control endpoint
[  890.541005][ T5133] usb 4-1: USB disconnect, device number 13
[  890.593434][ T1954] pvrusb2: Invalid write control endpoint
[  890.599207][ T1954] pvrusb2: Invalid write control endpoint
[  890.608943][ T1954] pvrusb2: Invalid write control endpoint
[  890.615658][ T1954] pvrusb2: Invalid write control endpoint
[  890.621401][ T1954] pvrusb2: Invalid write control endpoint
[  890.627256][ T1954] pvrusb2: Invalid write control endpoint
[  890.633072][ T1954] pvrusb2: Invalid write control endpoint
[  890.638821][ T1954] pvrusb2: Invalid write control endpoint
[  890.646545][ T1954] pvrusb2: Invalid write control endpoint
[  890.652302][ T1954] pvrusb2: Invalid write control endpoint
[  890.658112][ T1954] pvrusb2: Invalid write control endpoint
[  890.664421][ T1954] pvrusb2: Invalid write control endpoint
[  890.670188][ T1954] pvrusb2: Invalid write control endpoint
[  890.675985][ T1954] pvrusb2: Invalid write control endpoint
[  890.681708][ T1954] pvrusb2: Invalid write control endpoint
[  890.687543][ T1954] pvrusb2: Invalid write control endpoint
[  890.696155][ T1954] pvrusb2: Invalid write control endpoint
[  890.701901][ T1954] pvrusb2: Invalid write control endpoint
[  890.707684][ T1954] pvrusb2: Invalid write control endpoint
[  890.713517][ T1954] pvrusb2: Invalid write control endpoint
[  890.719248][ T1954] pvrusb2: Invalid write control endpoint
[  890.725057][ T1954] pvrusb2: Invalid write control endpoint
[  890.730783][ T1954] pvrusb2: Invalid write control endpoint
[  890.736592][ T1954] pvrusb2: Invalid write control endpoint
[  890.742348][ T1954] pvrusb2: Invalid write control endpoint
[  890.749547][ T1954] pvrusb2: Invalid write control endpoint
[  890.755363][ T1954] pvrusb2: Invalid write control endpoint
[  890.761092][ T1954] pvrusb2: Invalid write control endpoint
[  890.766893][ T1954] pvrusb2: Invalid write control endpoint
[  890.772684][ T1954] pvrusb2: Invalid write control endpoint
[  890.778417][ T1954] pvrusb2: Invalid write control endpoint
[  890.784224][ T1954] pvrusb2: Invalid write control endpoint
[  890.790318][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  890.838475][ T1954] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  890.845116][ T1954] pvrusb2: Invalid write control endpoint
[  890.851975][ T1954] pvrusb2: Invalid write control endpoint
[  890.857921][ T1954] pvrusb2: Invalid write control endpoint
[  890.863807][ T1954] pvrusb2: Invalid write control endpoint
[  890.869554][ T1954] pvrusb2: Invalid write control endpoint
[  890.875420][ T1954] pvrusb2: Invalid write control endpoint
[  890.881159][ T1954] pvrusb2: Invalid write control endpoint
[  890.887093][ T1954] pvrusb2: Invalid write control endpoint
[  890.893122][ T1954] pvrusb2: Invalid write control endpoint
[  890.898852][ T1954] pvrusb2: Invalid write control endpoint
[  890.904665][ T1954] pvrusb2: Invalid write control endpoint
[  890.910392][ T1954] pvrusb2: Invalid write control endpoint
[  890.919318][ T1954] pvrusb2: Invalid write control endpoint
[  890.925112][ T1954] pvrusb2: Invalid write control endpoint
[  890.930842][ T1954] pvrusb2: Invalid write control endpoint
[  890.936679][ T1954] pvrusb2: Invalid write control endpoint
[  890.942420][ T1954] pvrusb2: Invalid write control endpoint
[  890.948185][ T1954] pvrusb2: Invalid write control endpoint
[  890.955951][ T1954] pvrusb2: Invalid write control endpoint
[  890.961711][ T1954] pvrusb2: Invalid write control endpoint
[  890.967503][ T1954] pvrusb2: Invalid write control endpoint
[  890.973566][ T1954] pvrusb2: Attached sub-driver cs53l32a
[  891.003903][ T1954] pvrusb2: Invalid write control endpoint
[  891.009675][ T1954] pvrusb2: Invalid write control endpoint
[  891.015999][ T1954] pvrusb2: Invalid write control endpoint
[  891.021744][ T1954] pvrusb2: Invalid write control endpoint
[  891.029980][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  891.047728][ T1954] pvrusb2: Device being rendered inoperable
01:55:59 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e7, 0x0)
bind$bt_hci(r0, &(0x7f0000000500)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

01:55:59 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty}})

01:55:59 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:55:59 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000000)=[0x0], 0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x1, 0x0, r1})

01:55:59 executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8911, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{<r0=>0x0, 0x6cd6, 0xfffffffffffffffb, 0x0, 0x401, 0x9, 0x1, 0xfffffffb}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001180)={{r0, 0x32b9, 0xffffffff, 0x7, 0x100000000, 0x9, 0x3c2d527c, 0xc5, 0x7}})
syz_open_dev$vcsn(0x0, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', &(0x7f0000002200)={'syztnl1\x00', 0x0, 0x0, 0xb6, 0x4, 0x1, 0x42, @mcast2, @empty, 0x80, 0x80, 0x8001, 0x8}})

01:55:59 executing program 1:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x0, 0xff})

[  891.056613][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  891.070279][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
01:55:59 executing program 4:
select(0x40, &(0x7f0000000440), 0x0, 0x0, &(0x7f00000005c0)={0x77359400})
clock_gettime(0x0, &(0x7f00000000c0))
select(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x28, &(0x7f0000000600)={[{}, {0x1d, 0x4e00, "29a7d53b41c07087e30483cadbfe4a84cf81fbb2daa089638d7ad843ce"}]})
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x5, 0x33f2, 0x703c11c6, 0x0, 0x0, 0xffff, 0xbcd4}, 0x0, &(0x7f0000000340)={0x0, 0x100000001, 0x9, 0x0, 0x0, 0xfffffffffffffffb, 0x5}, &(0x7f0000000380), 0x0)

01:55:59 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x63, 0x33, 0x40, 0x11ba, 0x1001, 0xb552, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0xc2, 0xf5}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[  891.114861][T17507] ip6tnl0: mtu greater than device maximum
01:55:59 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000500)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6)

01:55:59 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000040)={0x0}, 0x10)

01:55:59 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)

01:55:59 executing program 1:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r1, r1, 0x0, 0x0], 0x4})

01:55:59 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

01:55:59 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x8e}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  891.522703][ T7572] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  891.632674][ T5135] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  891.805511][    T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  892.152763][ T5135] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  892.161842][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.172886][ T7572] usb 6-1: string descriptor 0 read error: -22
[  892.182120][ T7572] usb 6-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=b5.52
[  892.206903][ T5135] usb 5-1: Product: syz
[  892.206985][ T7572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.211108][ T5135] usb 5-1: Manufacturer: syz
[  892.211131][ T5135] usb 5-1: SerialNumber: syz
[  892.248500][ T7572] usb 6-1: config 0 descriptor??
[  892.287064][ T5135] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
01:56:00 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

01:56:00 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000500)={0x1f, 0x0, 0x1}, 0x6)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ip_gre', 0x0, 0x0)
write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x6)

01:56:00 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000400)={0x0, 0x7ff, 0x92, 0x0, 0x2})

[  892.333140][    T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  892.341575][ T7572] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  892.343493][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.367452][    T7] usb 3-1: Product: syz
[  892.371886][    T7] usb 3-1: Manufacturer: syz
[  892.377065][    T7] usb 3-1: SerialNumber: syz
01:56:00 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[  892.424264][    T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  892.544257][ T1954] pvrusb2: Invalid write control endpoint
[  892.554318][ T7572] usb 6-1: USB disconnect, device number 17
[  892.618265][ T1954] pvrusb2: Invalid write control endpoint
[  892.624375][ T1954] pvrusb2: Invalid write control endpoint
[  892.630189][ T1954] pvrusb2: Invalid write control endpoint
[  892.657287][ T1954] pvrusb2: Invalid write control endpoint
[  892.672168][ T1954] pvrusb2: Invalid write control endpoint
[  892.678051][ T1954] pvrusb2: Invalid write control endpoint
[  892.699557][ T1954] pvrusb2: Invalid write control endpoint
[  892.711557][ T1954] pvrusb2: Invalid write control endpoint
[  892.722236][ T1954] pvrusb2: Invalid write control endpoint
[  892.738306][ T1954] pvrusb2: Invalid write control endpoint
[  892.750411][ T1954] pvrusb2: Invalid write control endpoint
[  892.760665][ T1954] pvrusb2: Invalid write control endpoint
[  892.771319][ T1954] pvrusb2: Invalid write control endpoint
[  892.782929][ T1954] pvrusb2: Invalid write control endpoint
[  892.799045][ T1954] pvrusb2: Invalid write control endpoint
[  892.810135][ T1954] pvrusb2: Invalid write control endpoint
[  892.826336][ T1954] pvrusb2: Invalid write control endpoint
[  892.841260][ T1954] pvrusb2: Invalid write control endpoint
[  892.851760][ T1954] pvrusb2: Invalid write control endpoint
[  892.863599][ T5134] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  892.877735][ T1954] pvrusb2: Invalid write control endpoint
[  892.888036][ T1954] pvrusb2: Invalid write control endpoint
[  892.905009][ T1954] pvrusb2: Invalid write control endpoint
[  892.920909][ T1954] pvrusb2: Invalid write control endpoint
[  892.932667][ T1954] pvrusb2: Invalid write control endpoint
[  892.943831][ T1954] pvrusb2: Invalid write control endpoint
[  892.959454][ T1954] pvrusb2: Invalid write control endpoint
[  892.970568][ T1954] pvrusb2: Invalid write control endpoint
[  892.982714][ T1954] pvrusb2: Invalid write control endpoint
[  892.993144][ T5135] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  893.006777][ T1954] pvrusb2: Invalid write control endpoint
[  893.020023][ T1954] pvrusb2: Invalid write control endpoint
[  893.035710][ T1954] pvrusb2: Invalid write control endpoint
[  893.060132][ T1954] pvrusb2: Invalid write control endpoint
[  893.081376][ T1954] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  893.178865][ T1954] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  893.194868][ T1954] pvrusb2: Invalid write control endpoint
[  893.212376][    T7] usb 3-1: USB disconnect, device number 14
[  893.235141][ T1954] pvrusb2: Invalid write control endpoint
[  893.253729][ T1954] pvrusb2: Invalid write control endpoint
[  893.268900][ T1954] pvrusb2: Invalid write control endpoint
[  893.281685][ T1954] pvrusb2: Invalid write control endpoint
[  893.300338][ T1954] pvrusb2: Invalid write control endpoint
[  893.312785][ T1954] pvrusb2: Invalid write control endpoint
[  893.320593][ T1954] pvrusb2: Invalid write control endpoint
[  893.326993][ T1954] pvrusb2: Invalid write control endpoint
[  893.337200][ T1954] pvrusb2: Invalid write control endpoint
[  893.350942][ T1954] pvrusb2: Invalid write control endpoint
[  893.360770][ T1954] pvrusb2: Invalid write control endpoint
[  893.370407][ T1954] pvrusb2: Invalid write control endpoint
[  893.379056][ T1954] pvrusb2: Invalid write control endpoint
[  893.385256][ T1954] pvrusb2: Invalid write control endpoint
[  893.391116][ T1954] pvrusb2: Invalid write control endpoint
[  893.397200][ T1954] pvrusb2: Invalid write control endpoint
[  893.403333][ T1954] pvrusb2: Invalid write control endpoint
[  893.411848][ T1954] pvrusb2: Invalid write control endpoint
[  893.422717][ T1954] pvrusb2: Invalid write control endpoint
[  893.428604][ T1954] pvrusb2: Invalid write control endpoint
[  893.438506][ T1954] pvrusb2: Attached sub-driver cs53l32a
[  893.478851][ T1954] pvrusb2: Invalid write control endpoint
[  893.486896][ T1954] pvrusb2: Invalid write control endpoint
[  893.494578][ T1954] pvrusb2: Invalid write control endpoint
[  893.501145][ T1954] pvrusb2: Invalid write control endpoint
[  893.507269][ T1954] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  893.526109][ T1954] pvrusb2: Device being rendered inoperable
[  893.532138][ T1954] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  893.545522][ T1954] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  893.933052][ T5134] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  893.940128][ T5134] ath9k_htc: Failed to initialize the device
[  894.092916][ T5135] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  894.099979][ T5135] ath9k_htc: Failed to initialize the device
[  894.106398][    T7] usb 3-1: ath9k_htc: USB layer deinitialized
01:56:02 executing program 4:
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
ftruncate(r1, 0x12081ff)
pwritev2(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x4003fe)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000004c0)={0x0, r0})

01:56:02 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}, {0x40}})

01:56:02 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x2400}}, &(0x7f00000002c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:02 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

01:56:02 executing program 5:
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x800, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

01:56:02 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000280)=""/51, 0x33}], 0x4, &(0x7f0000000440)=[{&(0x7f00000007c0)=""/254, 0xfe}], 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x83}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

[  894.282866][   T26] usb 5-1: USB disconnect, device number 21
[  894.316727][   T26] usb 5-1: ath9k_htc: USB layer deinitialized
01:56:02 executing program 1:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4})

01:56:02 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = socket(0x1e, 0x5, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@id, 0x10)
recvmmsg(r2, &(0x7f000000fc80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000006000)=""/141, 0x8d}], 0x1, &(0x7f0000007380)=""/173, 0xad}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

01:56:02 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48)

[  894.465225][   T27] audit: type=1800 audit(1688954162.610:50): pid=17565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1951 res=0 errno=0
[  894.486098][    C0] vkms_vblank_simulate: vblank timer overrun
01:56:02 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x401c5820, &(0x7f0000000640)={0x0, 0x0, 0x800})

[  894.558091][T17567] ==================================================================
[  894.566379][T17567] BUG: KASAN: slab-out-of-bounds in shrink_folio_list+0x2dbf/0x3e60
[  894.574480][T17567] Read of size 8 at addr ffff88802c347851 by task syz-executor.3/17567
[  894.582938][T17567] 
[  894.585271][T17567] CPU: 0 PID: 17567 Comm: syz-executor.3 Not tainted 6.4.0-next-20230707-syzkaller #0
[  894.594844][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[  894.604923][T17567] Call Trace:
[  894.608216][T17567]  <TASK>
[  894.611161][T17567]  dump_stack_lvl+0xd9/0x150
[  894.615676][ T7572] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  894.615819][T17567]  print_address_description.constprop.0+0x2c/0x3c0
[  894.629954][T17567]  kasan_report+0x11d/0x130
[  894.634455][T17567]  ? shrink_folio_list+0x2dbf/0x3e60
[  894.639738][T17567]  kasan_check_range+0xf0/0x190
[  894.644586][T17567]  shrink_folio_list+0x2dbf/0x3e60
[  894.649694][T17567]  ? isolate_folios+0x3820/0x3820
[  894.654712][T17567]  ? print_circular_bug+0x740/0x740
[  894.659949][T17567]  ? lockdep_unlock+0x11b/0x290
[  894.664792][T17567]  ? __lock_acquire+0x2950/0x5e20
[  894.669832][T17567]  reclaim_folio_list+0xd0/0x390
[  894.674780][T17567]  ? lru_gen_seq_write+0x1570/0x1570
[  894.680175][T17567]  ? find_held_lock+0x2d/0x110
[  894.685024][T17567]  ? folio_isolate_lru+0x568/0x8a0
[  894.690129][T17567]  ? find_held_lock+0x2d/0x110
[  894.694883][T17567]  reclaim_pages+0x442/0x670
[  894.699471][T17567]  ? folio_isolate_lru+0x8a0/0x8a0
[  894.704591][T17567]  ? folio_isolate_lru+0xa5/0x8a0
[  894.709614][T17567]  madvise_cold_or_pageout_pte_range+0x100e/0x1ee0
[  894.716133][T17567]  ? madvise_free_pte_range+0xfa0/0xfa0
[  894.721671][T17567]  ? find_held_lock+0x2d/0x110
[  894.726425][T17567]  ? madvise_free_pte_range+0xfa0/0xfa0
[  894.731960][T17567]  walk_pgd_range+0x9e7/0x1470
[  894.736735][T17567]  ? mt_validate_nulls+0xd10/0xd10
[  894.741906][T17567]  ? walk_page_test+0x180/0x180
[  894.746780][T17567]  __walk_page_range+0x651/0x780
[  894.751728][T17567]  ? find_vma+0x10d/0x1b0
[  894.756068][T17567]  ? vma_link+0x290/0x290
[  894.760398][T17567]  ? walk_page_test+0x78/0x180
[  894.765166][T17567]  walk_page_range+0x311/0x4a0
[  894.769941][T17567]  ? __walk_page_range+0x780/0x780
[  894.775071][T17567]  ? __schedule+0xca2/0x5880
[  894.779758][T17567]  madvise_pageout+0x2fe/0x560
[  894.784517][T17567]  ? madvise_dontneed_free_valid_vma.part.0+0x250/0x250
[  894.791445][T17567]  ? __lock_acquire+0x1984/0x5e20
[  894.796469][T17567]  ? mt_slot+0x4f/0x190
[  894.800633][T17567]  ? mas_prev_slot+0x367/0x1ac0
[  894.805506][T17567]  madvise_vma_behavior+0x61a/0x21a0
[  894.810795][T17567]  ? madvise_vma_anon_name+0xf0/0xf0
[  894.816091][T17567]  ? mas_prev+0xc6/0x460
[  894.820333][T17567]  ? find_vma_prev+0xe8/0x160
[  894.825012][T17567]  ? vm_unmapped_area+0xb10/0xb10
[  894.830056][T17567]  ? lock_sync+0x190/0x190
[  894.834470][T17567]  madvise_walk_vmas+0x1c7/0x2b0
[  894.839410][T17567]  ? madvise_vma_anon_name+0xf0/0xf0
[  894.844713][T17567]  ? __remove_memory+0x40/0x40
[  894.849471][T17567]  ? do_futex+0x132/0x360
[  894.853820][T17567]  do_madvise.part.0+0x276/0x490
[  894.858754][T17567]  ? swapin_walk_pmd_entry+0x5f0/0x5f0
[  894.864222][T17567]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[  894.870140][T17567]  ? do_futex+0x360/0x360
[  894.874483][T17567]  __x64_sys_madvise+0x117/0x150
[  894.879435][T17567]  do_syscall_64+0x39/0xb0
[  894.883866][T17567]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  894.889798][T17567] RIP: 0033:0x7f858448c389
[  894.894202][T17567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  894.913972][T17567] RSP: 002b:00007f8585103168 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  894.922390][T17567] RAX: ffffffffffffffda RBX: 00007f85845ac050 RCX: 00007f858448c389
[  894.930438][T17567] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000000020000000
[  894.938400][T17567] RBP: 00007f85844d7493 R08: 0000000000000000 R09: 0000000000000000
[  894.946364][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  894.954326][T17567] R13: 00007ffc70fcdd0f R14: 00007f8585103300 R15: 0000000000022000
[  894.962328][T17567]  </TASK>
[  894.965426][T17567] 
[  894.967731][T17567] Allocated by task 4481:
[  894.972048][T17567]  kasan_save_stack+0x22/0x40
[  894.976725][T17567]  kasan_set_track+0x25/0x30
[  894.981326][T17567]  __kasan_slab_alloc+0x7f/0x90
[  894.986170][T17567]  kmem_cache_alloc+0x173/0x390
[  894.991012][T17567]  anon_vma_fork+0xe2/0x630
[  894.995500][T17567]  dup_mmap+0xc0f/0x14b0
[  894.999771][T17567]  copy_process+0x6663/0x75c0
[  895.004443][T17567]  kernel_clone+0xeb/0x890
[  895.008861][T17567]  __do_sys_clone+0xba/0x100
[  895.013455][T17567]  do_syscall_64+0x39/0xb0
[  895.017916][T17567]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  895.023835][T17567] 
[  895.026144][T17567] The buggy address belongs to the object at ffff88802c347770
[  895.026144][T17567]  which belongs to the cache anon_vma of size 208
[  895.039929][T17567] The buggy address is located 17 bytes to the right of
[  895.039929][T17567]  allocated 208-byte region [ffff88802c347770, ffff88802c347840)
[  895.054507][T17567] 
[  895.056827][T17567] The buggy address belongs to the physical page:
[  895.063226][T17567] page:ffffea0000b0d1c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c347
[  895.073378][T17567] memcg:ffff88807e81f601
[  895.077613][T17567] anon flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  895.085584][T17567] page_type: 0xffffffff()
[  895.089915][T17567] raw: 00fff00000000200 ffff888014674140 0000000000000000 dead000000000001
[  895.098485][T17567] raw: 0000000000000000 00000000000f000f 00000001ffffffff ffff88807e81f601
[  895.107050][T17567] page dumped because: kasan: bad access detected
[  895.113467][T17567] page_owner tracks the page as allocated
[  895.119161][T17567] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5086, tgid 5086 (syz-executor.3), ts 420627326953, free_ts 419901484793
[  895.137726][T17567]  post_alloc_hook+0x2db/0x350
[  895.142500][T17567]  get_page_from_freelist+0xfd9/0x2c40
[  895.147968][T17567]  __alloc_pages+0x1cb/0x4a0
[  895.152557][T17567]  alloc_pages+0x1aa/0x270
[  895.156972][T17567]  allocate_slab+0x25f/0x390
[  895.161640][T17567]  ___slab_alloc+0xbc3/0x15d0
[  895.166306][T17567]  __slab_alloc.constprop.0+0x56/0xa0
[  895.171668][T17567]  kmem_cache_alloc+0x371/0x390
[  895.176506][T17567]  anon_vma_fork+0xe2/0x630
[  895.180995][T17567]  dup_mmap+0xc0f/0x14b0
[  895.185235][T17567]  copy_process+0x6663/0x75c0
[  895.189908][T17567]  kernel_clone+0xeb/0x890
[  895.194338][T17567]  __do_sys_clone+0xba/0x100
[  895.198988][T17567]  do_syscall_64+0x39/0xb0
[  895.203392][T17567]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  895.209281][T17567] page last free stack trace:
[  895.214130][T17567]  free_unref_page_prepare+0x62e/0xcb0
[  895.219582][T17567]  free_unref_page_list+0xe3/0xa70
[  895.224685][T17567]  release_pages+0xcd8/0x1380
[  895.229372][T17567]  tlb_batch_pages_flush+0xa8/0x1a0
[  895.234569][T17567]  tlb_finish_mmu+0x14b/0x7e0
[  895.239235][T17567]  exit_mmap+0x2cd/0x820
[  895.243462][T17567]  __mmput+0x128/0x4c0
[  895.247515][T17567]  mmput+0x60/0x70
[  895.251221][T17567]  do_exit+0x9a7/0x29a0
[  895.255411][T17567]  do_group_exit+0xd4/0x2a0
[  895.259905][T17567]  get_signal+0x249b/0x25f0
[  895.264399][T17567]  arch_do_signal_or_restart+0x79/0x5c0
[  895.269962][T17567]  exit_to_user_mode_prepare+0x11f/0x240
[  895.275584][T17567]  syscall_exit_to_user_mode+0x1d/0x50
[  895.281054][T17567]  do_syscall_64+0x46/0xb0
[  895.285470][T17567]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  895.291366][T17567] 
[  895.293684][T17567] Memory state around the buggy address:
[  895.299300][T17567]  ffff88802c347700: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00
[  895.307349][T17567]  ffff88802c347780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  895.315396][T17567] >ffff88802c347800: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  895.323436][T17567]                                                  ^
[  895.330089][T17567]  ffff88802c347880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  895.338133][T17567]  ffff88802c347900: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  895.346171][T17567] ==================================================================
[  895.354291][    C0] vkms_vblank_simulate: vblank timer overrun
01:56:03 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:03 executing program 1:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280), 0x0})

[  895.725820][T17567] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  895.733057][T17567] CPU: 1 PID: 17567 Comm: syz-executor.3 Not tainted 6.4.0-next-20230707-syzkaller #0
[  895.742623][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[  895.752689][T17567] Call Trace:
[  895.756006][T17567]  <TASK>
[  895.758950][T17567]  dump_stack_lvl+0xd9/0x150
[  895.763565][T17567]  panic+0x686/0x730
[  895.767488][T17567]  ? panic_smp_self_stop+0xa0/0xa0
[  895.772623][T17567]  ? preempt_schedule_thunk+0x1a/0x30
[  895.778053][T17567]  ? preempt_schedule_common+0x45/0xb0
[  895.783545][T17567]  check_panic_on_warn+0xb1/0xc0
[  895.788514][T17567]  end_report+0x108/0x150
[  895.792875][T17567]  kasan_report+0xfa/0x130
[  895.797317][T17567]  ? shrink_folio_list+0x2dbf/0x3e60
[  895.802643][T17567]  kasan_check_range+0xf0/0x190
[  895.807527][T17567]  shrink_folio_list+0x2dbf/0x3e60
[  895.812764][T17567]  ? isolate_folios+0x3820/0x3820
[  895.817817][T17567]  ? print_circular_bug+0x740/0x740
[  895.823051][T17567]  ? lockdep_unlock+0x11b/0x290
[  895.827926][T17567]  ? __lock_acquire+0x2950/0x5e20
[  895.832981][T17567]  reclaim_folio_list+0xd0/0x390
[  895.837958][T17567]  ? lru_gen_seq_write+0x1570/0x1570
[  895.843281][T17567]  ? find_held_lock+0x2d/0x110
[  895.848073][T17567]  ? folio_isolate_lru+0x568/0x8a0
[  895.853207][T17567]  ? find_held_lock+0x2d/0x110
[  895.857993][T17567]  reclaim_pages+0x442/0x670
[  895.862602][T17567]  ? folio_isolate_lru+0x8a0/0x8a0
[  895.867732][T17567]  ? folio_isolate_lru+0xa5/0x8a0
[  895.872782][T17567]  madvise_cold_or_pageout_pte_range+0x100e/0x1ee0
[  895.879312][T17567]  ? madvise_free_pte_range+0xfa0/0xfa0
[  895.884882][T17567]  ? find_held_lock+0x2d/0x110
[  895.889673][T17567]  ? madvise_free_pte_range+0xfa0/0xfa0
[  895.895247][T17567]  walk_pgd_range+0x9e7/0x1470
[  895.900047][T17567]  ? mt_validate_nulls+0xd10/0xd10
[  895.905190][T17567]  ? walk_page_test+0x180/0x180
[  895.910076][T17567]  __walk_page_range+0x651/0x780
[  895.915047][T17567]  ? find_vma+0x10d/0x1b0
[  895.919398][T17567]  ? vma_link+0x290/0x290
[  895.923749][T17567]  ? walk_page_test+0x78/0x180
[  895.928541][T17567]  walk_page_range+0x311/0x4a0
[  895.933341][T17567]  ? __walk_page_range+0x780/0x780
[  895.938475][T17567]  ? __schedule+0xca2/0x5880
[  895.943095][T17567]  madvise_pageout+0x2fe/0x560
[  895.947879][T17567]  ? madvise_dontneed_free_valid_vma.part.0+0x250/0x250
[  895.954844][T17567]  ? __lock_acquire+0x1984/0x5e20
[  895.959899][T17567]  ? mt_slot+0x4f/0x190
[  895.964083][T17567]  ? mas_prev_slot+0x367/0x1ac0
[  895.968969][T17567]  madvise_vma_behavior+0x61a/0x21a0
[  895.974459][T17567]  ? madvise_vma_anon_name+0xf0/0xf0
[  895.979765][T17567]  ? mas_prev+0xc6/0x460
[  895.984041][T17567]  ? find_vma_prev+0xe8/0x160
[  895.988745][T17567]  ? vm_unmapped_area+0xb10/0xb10
[  895.993794][T17567]  ? lock_sync+0x190/0x190
[  895.998260][T17567]  madvise_walk_vmas+0x1c7/0x2b0
[  896.003222][T17567]  ? madvise_vma_anon_name+0xf0/0xf0
[  896.008530][T17567]  ? __remove_memory+0x40/0x40
[  896.013317][T17567]  ? do_futex+0x132/0x360
[  896.017854][T17567]  do_madvise.part.0+0x276/0x490
[  896.022811][T17567]  ? swapin_walk_pmd_entry+0x5f0/0x5f0
[  896.028379][T17567]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[  896.034307][T17567]  ? do_futex+0x360/0x360
[  896.038665][T17567]  __x64_sys_madvise+0x117/0x150
[  896.043625][T17567]  do_syscall_64+0x39/0xb0
[  896.048062][T17567]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  896.053990][T17567] RIP: 0033:0x7f858448c389
[  896.058416][T17567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  896.078130][T17567] RSP: 002b:00007f8585103168 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  896.086562][T17567] RAX: ffffffffffffffda RBX: 00007f85845ac050 RCX: 00007f858448c389
[  896.094555][T17567] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000000020000000
[  896.102541][T17567] RBP: 00007f85844d7493 R08: 0000000000000000 R09: 0000000000000000
[  896.110522][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  896.118508][T17567] R13: 00007ffc70fcdd0f R14: 00007f8585103300 R15: 0000000000022000
[  896.126501][T17567]  </TASK>
[  896.129724][TSeaBIOS (version 1.8.2-google)
Total RAM Size = 0x0000000200000000 = 8192 MiB
CPUs found: 2     Max CPUs supported: 2
SeaBIOS (version 1.8.2-google)
Machine UUID 923da4bf-d899-951d-d29f-0e347d20a7e6
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0
virtio-scsi blksize=512 sectors=4194304 = 2048 MiB
drive 0x000f2820: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304
Sending Seabios boot VM event.
Booting from Hard Disk 0...
[    0.000000][    T0] Linux version 6.4.0-next-20230707-syzkaller (syzkaller@syzkaller) (gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2) #0 SMP PREEMPT_DYNAMIC now
[    0.000000][    T0] Command line: BOOT_IMAGE=/boot/bzImage root=/dev/sda1 console=ttyS0
[    0.000000][    T0] KERNEL supported cpus:
[    0.000000][    T0]   Intel GenuineIntel
[    0.000000][    T0]   AMD AuthenticAMD
[    0.000000][    T0] BIOS-provided physical RAM map:
[    0.000000][    T0] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable
[    0.000000][    T0] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved
[    0.000000][    T0] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved
[    0.000000][    T0] BIOS-e820: [mem 0x0000000000100000-0x00000000bfffcfff] usable
[    0.000000][    T0] BIOS-e820: [mem 0x00000000bfffd000-0x00000000bfffffff] reserved
[    0.000000][    T0] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved
[    0.000000][    T0] BIOS-e820: [mem 0x0000000100000000-0x000000023fffffff] usable
[    0.000000][    T0] printk: bootconsole [earlyser0] enabled
[    0.000000][    T0] ERROR: earlyprintk= earlyser already used
[    0.000000][    T0] ERROR: earlyprintk= earlyser already used
[    0.000000][    T0] **********************************************************
[    0.000000][    T0] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[    0.000000][    T0] **                                                      **
[    0.000000][    T0] ** This system shows unhashed kernel memory addresses   **
[    0.000000][    T0] ** via the console, logs, and other interfaces. This    **
[    0.000000][    T0] ** might reduce the security of your system.            **
[    0.000000][    T0] **                                                      **
[    0.000000][    T0] ** If you see this message and you are not debugging    **
[    0.000000][    T0] ** the kernel, report this immediately to your system   **
[    0.000000][    T0] ** administrator!                                       **
[    0.000000][    T0] **                                                      **
[    0.000000][    T0] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[    0.000000][    T0] **********************************************************
[    0.000000][    T0] Malformed early option 'vsyscall'
[    0.000000][    T0] nopcid: PCID feature disabled
[    0.000000][    T0] NX (Execute Disable) protection: active
[    0.000000][    T0] SMBIOS 2.4 present.
[    0.000000][    T0] DMI: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[    0.000000][    T0] Hypervisor detected: KVM
[    0.000000][    T0] kvm-clock: Using msrs 4b564d01 and 4b564d00
[    0.000005][    T0] kvm-clock: using sched offset of 3789928170 cycles
[    0.000805][    T0] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns
[    0.003223][    T0] tsc: Detected 2200.166 MHz processor
[    0.008256][    T0] last_pfn = 0x240000 max_arch_pfn = 0x400000000
[    0.009253][    T0] MTRR map: 4 entries (3 fixed + 1 variable; max 19), built from 8 variable MTRRs
[    0.010788][    T0] x86/PAT: Configuration [0-7]: WB  WC  UC- UC  WB  WP  UC- WT  
[    0.011924][    T0] last_pfn = 0xbfffd max_arch_pfn = 0x400000000
[    0.018934][    T0] found SMP MP-table at [mem 0x000f2ae0-0x000f2aef]
[    0.019862][    T0] Using GB pages for direct mapping
[    0.022260][    T0] ACPI: Early table checksum verification disabled
[    0.023163][    T0] ACPI: RSDP 0x00000000000F2860 000014 (v00 Google)
[    0.024173][    T0] ACPI: RSDT 0x00000000BFFFFFA0 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001)
[    0.025539][    T0] ACPI: FACP 0x00000000BFFFF330 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001)
[    0.026949][    T0] ACPI: DSDT 0x00000000BFFFD8C0 001A64 (v01 Google GOOGDSDT 00000001 GOOG 00000001)
[    0.028236][    T0] ACPI: FACS 0x00000000BFFFD880 000040
[    0.029006][    T0] ACPI: FACS 0x00000000BFFFD880 000040
[    0.029745][    T0] ACPI: SRAT 0x00000000BFFFFE60 0000C8 (v03 Google GOOGSRAT 00000001 GOOG 00000001)
[    0.031090][    T0] ACPI: APIC 0x00000000BFFFFDB0 000076 (v05 Google GOOGAPIC 00000001 GOOG 00000001)
[    0.032447][    T0] ACPI: SSDT 0x00000000BFFFF430 000980 (v01 Google GOOGSSDT 00000001 GOOG 00000001)
[    0.033683][    T0] ACPI: WAET 0x00000000BFFFFE30 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001)
[    0.034922][    T0] ACPI: Reserving FACP table memory at [mem 0xbffff330-0xbffff423]
[    0.035983][    T0] ACPI: Reserving DSDT table memory at [mem 0xbfffd8c0-0xbffff323]
[    0.036996][    T0] ACPI: Reserving FACS table memory at [mem 0xbfffd880-0xbfffd8bf]
[    0.038044][    T0] ACPI: Reserving FACS table memory at [mem 0xbfffd880-0xbfffd8bf]
[    0.039058][    T0] ACPI: Reserving SRAT table memory at [mem 0xbffffe60-0xbfffff27]
[    0.040175][    T0] ACPI: Reserving APIC table memory at [mem 0xbffffdb0-0xbffffe25]
[    0.041244][    T0] ACPI: Reserving SSDT table memory at [mem 0xbffff430-0xbffffdaf]
[    0.042268][    T0] ACPI: Reserving WAET table memory at [mem 0xbffffe30-0xbffffe57]
[    0.043856][    T0] SRAT: PXM 0 -> APIC 0x00 -> Node 0
[    0.044570][    T0] SRAT: PXM 0 -> APIC 0x01 -> Node 0
[    0.045280][    T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff]
[    0.046211][    T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0xbfffffff]
[    0.047094][    T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x23fffffff]
[    0.048013][    T0] NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0xbfffffff] -> [mem 0x00000000-0xbfffffff]
[    0.049446][    T0] NUMA: Node 0 [mem 0x00000000-0xbfffffff] + [mem 0x100000000-0x23fffffff] -> [mem 0x00000000-0x23fffffff]
[    0.050940][    T0] Faking node 0 at [mem 0x0000000000000000-0x000000013fffffff] (5120MB)
[    0.052029][    T0] Faking node 1 at [mem 0x0000000140000000-0x000000023fffffff] (4096MB)
[    0.053705][    T0] NODE_DATA(0) allocated [mem 0x13fffa000-0x13fffffff]
[    0.055036][    T0] NODE_DATA(1) allocated [mem 0x23fff7000-0x23fffcfff]
[    0.093131][    T0] Zone ranges:
[    0.093654][    T0]   DMA      [mem 0x0000000000001000-0x0000000000ffffff]
[    0.094580][    T0]   DMA32    [mem 0x0000000001000000-0x00000000ffffffff]
[    0.095586][    T0]   Normal   [mem 0x0000000100000000-0x000000023fffffff]
[    0.096601][    T0]   Device   empty
[    0.097079][    T0] Movable zone start for each node
[    0.097799][    T0] Early memory node ranges
[    0.098389][    T0]   node   0: [mem 0x0000000000001000-0x000000000009efff]
[    0.099458][    T0]   node   0: [mem 0x0000000000100000-0x00000000bfffcfff]
[    0.100462][    T0]   node   0: [mem 0x0000000100000000-0x000000013fffffff]
[    0.101462][    T0]   node   1: [mem 0x0000000140000000-0x000000023fffffff]
[    0.102394][    T0] Initmem setup node 0 [mem 0x0000000000001000-0x000000013fffffff]
[    0.103502][    T0] Initmem setup node 1 [mem 0x0000000140000000-0x000000023fffffff]
[    0.104714][    T0] On node 0, zone DMA: 1 pages in unavailable ranges
[    0.104970][    T0] On node 0, zone DMA: 97 pages in unavailable ranges
[    0.168024][    T0] On node 0, zone Normal: 3 pages in unavailable ranges
[    0.535108][    T0] kasan: KernelAddressSanitizer initialized
[    0.537405][    T0] ACPI: PM-Timer IO Port: 0xb008
[    0.538119][    T0] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1])
[    0.539223][    T0] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23
[    0.540270][    T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level)
[    0.541309][    T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
[    0.542372][    T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level)
[    0.543403][    T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level)
[    0.544413][    T0] ACPI: Using ACPI (MADT) for SMP configuration information
[    0.545398][    T0] smpboot: Allowing 2 CPUs, 0 hotplug CPUs
[    0.546376][    T0] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff]
[    0.547626][    T0] PM: hibernation: Registered nosave memory: [mem 0x0009f000-0x0009ffff]
[    0.548727][    T0] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000effff]
[    0.549839][    T0] PM: hibernation: Registered nosave memory: [mem 0x000f0000-0x000fffff]
[    0.551124][    T0] PM: hibernation: Registered nosave memory: [mem 0xbfffd000-0xbfffffff]
[    0.552326][    T0] PM: hibernation: Registered nosave memory: [mem 0xc0000000-0xfffbbfff]
[    0.553407][    T0] PM: hibernation: Registered nosave memory: [mem 0xfffbc000-0xffffffff]
[    0.554505][    T0] [mem 0xc0000000-0xfffbbfff] available for PCI devices
[    0.555414][    T0] Booting paravirtualized kernel on KVM
[    0.556183][    T0] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.625002][    T0] setup_percpu: NR_CPUS:8 nr_cpumask_bits:2 nr_cpu_ids:2 nr_node_ids:2
[    0.626943][    T0] percpu: Embedded 72 pages/cpu s254344 r8192 d32376 u1048576
[    0.628103][    T0] kvm-guest: PV spinlocks enabled
[    0.628755][    T0] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.629817][    T0] Kernel command line: earlyprintk=serial net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 ima_policy=tcb nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 binder.debug_mask=0 rcupdate.rcu_expedited=1 rcupdate.rcu_cpu_stall_cputime=1 no_hash_pointers page_owner=on sysctl.vm.nr_hugepages=4 sysctl.vm.nr_overcommit_hugepages=4 secretmem.enable=1 sysctl.max_rcu_stall_to_panic=1 msr.allow_writes=off coredump_filter=0xffff root=/dev/sda console=ttyS0 vsyscall=native numa=fake=2 kvm-intel.nested=1 spec_store_bypass_disable=prctl nopcid vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=16 rose.rose_ndevs=16 smp.csd_lock_timeout=100000 watchdog_thresh=55 workqueue.watchdog_thresh=140 sysctl.net.core.netdev_unregister_timeout_secs=140 dummy_hcd.num=8 panic_on_warn=1 BOOT_IMAGE=/boot/bzImage root=/dev/sda1 console=ttyS0
[    0.646395][    T0] Unknown kernel command line parameters "spec_store_bypass_disable=prctl BOOT_IMAGE=/boot/bzImage", will be passed to user space.
[    0.648260][    T0] random: crng init done
[    0.649044][    T0] Fallback order for Node 0: 0 1 
[    0.649059][    T0] Fallback order for Node 1: 1 0 
[    0.649072][    T0] Built 2 zonelists, mobility grouping on.  Total pages: 2064125
[    0.651347][    T0] Policy zone: Normal
[    0.652465][    T0] mem auto-init: stack:off, heap alloc:on, heap free:off
[    0.653409][    T0] stackdepot: allocating hash table via alloc_large_system_hash
[    0.656670][    T0] stackdepot hash table entries: 1048576 (order: 11, 8388608 bytes, linear)
[    0.657897][    T0] software IO TLB: area num 2.
[    1.580562][    T0] Memory: 6809972K/8388204K available (153600K kernel code, 37680K rwdata, 31780K rodata, 3376K init, 35104K bss, 1577976K reserved, 0K cma-reserved)
[    1.584105][    T0] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=2
[    1.706471][    T0] allocated 150994944 bytes of page_ext
[    1.707361][    T0] Node 0, zone      DMA: page owner found early allocated 0 pages
[    1.723321][    T0] Node 0, zone    DMA32: page owner found early allocated 18528 pages
[    1.736763][    T0] Node 0, zone   Normal: page owner found early allocated 0 pages
[    1.748340][    T0] Node 1, zone   Normal: page owner found early allocated 18435 pages
[    1.750358][    T0] Dynamic Preempt: full
[    1.751752][    T0] Running RCU self tests
[    1.752318][    T0] Running RCU synchronous self tests
[    1.753079][    T0] rcu: Preemptible hierarchical RCU implementation.
[    1.753921][    T0] rcu: 	RCU lockdep checking is enabled.
[    1.754690][    T0] rcu: 	RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=2.
[    1.755660][    T0] rcu: 	RCU callback double-/use-after-free debug is enabled.
[    1.756729][    T0] rcu: 	RCU debug extended QS entry/exit.
[    1.757511][    T0] 	All grace periods are expedited (rcu_expedited).
[    1.758414][    T0] 	Trampoline variant of Tasks RCU enabled.
[    1.759168][    T0] 	Tracing variant of Tasks RCU enabled.
[    1.760063][    T0] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    1.761189][    T0] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    1.762245][    T0] Running RCU synchronous self tests
[    1.819458][    T0] NR_IRQS: 4352, nr_irqs: 440, preallocated irqs: 16
[    1.821124][    T0] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    1.822530][    T0] kfence: initialized - using 2097152 bytes for 255 objects at 0xffff88823bc00000-0xffff88823be00000
[    1.825175][    T0] Console: colour VGA+ 80x25
[    1.825879][    T0] printk: console [ttyS0] enabled
[    1.825879][    T0] printk: console [ttyS0] enabled
[    1.827232][    T0] printk: bootconsole [earlyser0] disabled
[    1.827232][    T0] printk: bootconsole [earlyser0] disabled
[    1.828860][    T0] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar
[    1.830111][    T0] ... MAX_LOCKDEP_SUBCLASSES:  8
[    1.830777][    T0] ... MAX_LOCK_DEPTH:          48
[    1.831497][    T0] ... MAX_LOCKDEP_KEYS:        8192
[    1.832197][    T0] ... CLASSHASH_SIZE:          4096
[    1.832896][    T0] ... MAX_LOCKDEP_ENTRIES:     131072
[    1.833798][    T0] ... MAX_LOCKDEP_CHAINS:      262144
[    1.834610][    T0] ... CHAINHASH_SIZE:          131072
[    1.835486][    T0]  memory used by lock dependency info: 20785 kB
[    1.836391][    T0]  memory used for stack traces: 8320 kB
[    1.837265][    T0]  per task-struct memory footprint: 1920 bytes
[    1.838496][    T0] mempolicy: Enabling automatic NUMA balancing. Configure with numa_balancing= or the kernel.numa_balancing sysctl
[    1.840237][    T0] ACPI: Core revision 20230331
[    1.841588][    T0] APIC: Switch to symmetric I/O mode setup
[    1.842895][    T0] x2apic enabled
[    1.846128][    T0] Switched APIC routing to physical x2apic.
[    1.851985][    T0] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1
[    1.853250][    T0] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x1fb6cfa72cd, max_idle_ns: 440795262980 ns
[    1.854817][    T0] Calibrating delay loop (skipped) preset value.. 4400.33 BogoMIPS (lpj=22001660)
[    1.856734][    T0] Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8
[    1.857616][    T0] Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4
[    1.858591][    T0] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization
[    1.860074][    T0] Spectre V2 : Mitigation: IBRS
[    1.860778][    T0] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch
[    1.864839][    T0] Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT
[    1.865891][    T0] RETBleed: Mitigation: IBRS
[    1.866556][    T0] Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier
[    1.867831][    T0] Spectre V2 : User space: Mitigation: STIBP via prctl
[    1.868937][    T0] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl
[    1.870345][    T0] MDS: Mitigation: Clear CPU buffers
[    1.871071][    T0] TAA: Mitigation: Clear CPU buffers
[    1.871799][    T0] MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode
[    1.872983][    T0] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'
[    1.874857][    T0] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers'
[    1.875847][    T0] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers'
[    1.876832][    T0] x86/fpu: xstate_offset[2]:  576, xstate_sizes[2]:  256
[    1.877817][    T0] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format.
[    1.892467][    T0] Freeing SMP alternatives memory: 120K
[    1.893491][    T0] pid_max: default: 32768 minimum: 301
[    1.894590][    T0] LSM: initializing lsm=lockdown,capability,landlock,yama,safesetid,tomoyo,apparmor,bpf,integrity
[    1.894887][    T0] landlock: Up and running.
[    1.895565][    T0] Yama: becoming mindful.
[    1.896307][    T0] TOMOYO Linux initialized
[    1.897150][    T0] AppArmor: AppArmor initialized
[    1.897861][    T0] LSM support for eBPF active
[    1.905037][    T0] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, vmalloc hugepage)
[    1.909034][    T0] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, vmalloc hugepage)
[    1.910798][    T0] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, vmalloc)
[    1.912345][    T0] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, vmalloc)
[    1.916761][    T0] Running RCU synchronous self tests
[    1.917565][    T0] Running RCU synchronous self tests
[    2.039140][    T1] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.20GHz (family: 0x6, model: 0x4f, stepping: 0x0)
[    2.043343][    T1] RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1.
[    2.044802][    T1] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1.
[    2.044802][    T1] Running RCU-tasks wait API self tests
[    2.175082][    T1] Performance Events: unsupported p6 CPU model 79 no PMU driver, software events only.
[    2.177085][    T1] signal: max sigframe size: 1776
[    2.178324][    T1] rcu: Hierarchical SRCU implementation.
[    2.179162][    T1] rcu: 	Max phase no-delay instances is 1000.
[    2.184137][    T1] NMI watchdog: Perf NMI watchdog permanently disabled
[    2.185606][    T1] smp: Bringing up secondary CPUs ...
[    2.188195][    T1] smpboot: x86: Booting SMP configuration:
[    2.189056][    T1] .... node  #0, CPUs:      #1
[    2.189386][    T1] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details.
[    2.189386][    T1] TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details.
[    2.194935][    T1] MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details.
[    2.197428][    T1] smp: Brought up 2 nodes, 2 CPUs
[    2.198336][    T1] smpboot: Max logical packages: 1
[    2.199050][    T1] smpboot: Total of 2 processors activated (8800.66 BogoMIPS)
[    2.204869][    T1] devtmpfs: initialized
[    2.206376][    T1] x86/mm: Memory block size: 128MB
[    2.214939][   T14] Callback from call_rcu_tasks_trace() invoked.
[    2.244825][    T1] Running RCU synchronous self tests
[    2.244825][    T1] Running RCU synchronous self tests
[    2.244971][    T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    2.246730][    T1] futex hash table entries: 512 (order: 4, 65536 bytes, vmalloc)
[    2.248203][    T1] PM: RTC time: 01:56:10, date: 2023-07-10
[    2.264374][    T1] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    2.271068][    T1] audit: initializing netlink subsys (disabled)
[    2.274900][   T27] audit: type=2000 audit(1688954170.463:1): state=initialized audit_enabled=0 res=1
[    2.277206][    T1] thermal_sys: Registered thermal governor 'step_wise'
[    2.277218][    T1] thermal_sys: Registered thermal governor 'user_space'
[    2.278714][    T1] cpuidle: using governor menu
[    2.286753][    T1] NET: Registered PF_QIPCRTR protocol family
[    2.287968][    T1] dca service started, version 1.12.1
[    2.289044][    T1] PCI: Using configuration type 1 for base access
[    2.296159][    T1] WARNING: workqueue cpumask: online intersect > possible intersect
[    2.304821][    T1] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages
[    2.304821][    T1] HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page
[    2.304821][    T1] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages
[    2.304821][    T1] HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page
[    2.344869][    T1] cryptd: max_cpu_qlen set to 1000
[    2.356038][    T1] raid6: skipped pq benchmark and selected avx2x4
[    2.357065][    T1] raid6: using avx2x2 recovery algorithm
[    2.359672][    T1] ACPI: Added _OSI(Module Device)
[    2.360682][    T1] ACPI: Added _OSI(Processor Device)
[    2.361482][    T1] ACPI: Added _OSI(3.0 _SCP Extensions)
[    2.361482][    T1] ACPI: Added _OSI(Processor Aggregator Device)
[    2.395069][   T13] Callback from call_rcu_tasks() invoked.
[    2.461041][    T1] ACPI: 2 ACPI AML tables successfully acquired and loaded
[    2.513869][    T1] ACPI: Interpreter enabled
[    2.515511][    T1] ACPI: PM: (supports S0 S3 S4 S5)
[    2.516402][    T1] ACPI: Using IOAPIC for interrupt routing
[    2.517580][    T1] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[    2.519180][    T1] PCI: Ignoring E820 reservations for host bridge windows
[    2.524276][    T1] ACPI: Enabled 16 GPEs in block 00 to 0F
[    2.666866][    T1] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[    2.668223][    T1] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3]
[    2.669580][    T1] acpi PNP0A03:00: _OSC: not requesting OS control; OS requires [ExtendedConfig ASPM ClockPM MSI]
[    2.671937][    T1] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended configuration space under this bridge
[    2.688326][    T1] PCI host bridge to bus 0000:00
[    2.689101][    T1] pci_bus 0000:00: Unknown NUMA node; performance will be reduced
[    2.690383][    T1] pci_bus 0000:00: root bus resource [io  0x0000-0x0cf7 window]
[    2.691660][    T1] pci_bus 0000:00: root bus resource [io  0x0d00-0xffff window]
[    2.692963][    T1] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
[    2.694432][    T1] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfefff window]
[    2.694833][    T1] pci_bus 0000:00: root bus resource [bus 00-ff]
[    2.696509][    T1] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[    2.703131][    T1] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[    2.731035][    T1] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000
[    2.752787][    T1] pci 0000:00:01.3: quirk: [io  0xb000-0xb03f] claimed by PIIX4 ACPI
[    2.758303][    T1] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000
[    2.767864][    T1] pci 0000:00:03.0: reg 0x10: [io  0xc000-0xc03f]
[    2.774829][    T1] pci 0000:00:03.0: reg 0x14: [mem 0xfe800000-0xfe80007f]
[    2.795938][    T1] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000
[    2.804824][    T1] pci 0000:00:04.0: reg 0x10: [io  0xc040-0xc07f]
[    2.811153][    T1] pci 0000:00:04.0: reg 0x14: [mem 0xfe801000-0xfe80107f]
[    2.831522][    T1] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000
[    2.843001][    T1] pci 0000:00:05.0: reg 0x10: [mem 0xfe000000-0xfe7fffff]
[    2.869530][    T1] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[    2.875684][    T1] pci 0000:00:06.0: [1af4:1002] type 00 class 0x00ff00
[    2.884839][    T1] pci 0000:00:06.0: reg 0x10: [io  0xc080-0xc09f]
[    2.896153][    T1] pci 0000:00:06.0: reg 0x14: [mem 0xfe802000-0xfe80207f]
[    2.913197][    T1] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00
[    2.921088][    T1] pci 0000:00:07.0: reg 0x10: [io  0xc0a0-0xc0bf]
[    2.927245][    T1] pci 0000:00:07.0: reg 0x14: [mem 0xfe803000-0xfe80303f]
[    2.975144][    T1] ACPI: PCI: Interrupt link LNKA configured for IRQ 10
[    2.977963][    T1] ACPI: PCI: Interrupt link LNKB configured for IRQ 10
[    2.984375][    T1] ACPI: PCI: Interrupt link LNKC configured for IRQ 11
[    2.990471][    T1] ACPI: PCI: Interrupt link LNKD configured for IRQ 11
[    2.995172][    T1] ACPI: PCI: Interrupt link LNKS configured for IRQ 9
[    3.014901][    T1] iommu: Default domain type: Translated
[    3.015840][    T1] iommu: DMA domain TLB invalidation policy: lazy mode
[    3.021666][    T1] SCSI subsystem initialized
[    3.026508][    T1] ACPI: bus type USB registered
[    3.027938][    T1] usbcore: registered new interface driver usbfs
[    3.029218][    T1] usbcore: registered new interface driver hub
[    3.030439][    T1] usbcore: registered new device driver usb
[    3.033489][    T1] mc: Linux media interface: v0.10
[    3.034475][    T1] videodev: Linux video capture interface: v2.00
[    3.035552][    T1] pps_core: LinuxPPS API ver. 1 registered
[    3.036495][    T1] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    3.038329][    T1] PTP clock support registered
[    3.054967][    T1] EDAC MC: Ver: 3.0.0
[    3.057452][    T1] Advanced Linux Sound Architecture Driver Initialized.
[    3.064213][    T1] Bluetooth: Core ver 2.22
[    3.065035][    T1] NET: Registered PF_BLUETOOTH protocol family
[    3.065917][    T1] Bluetooth: HCI device and connection manager initialized
[    3.067179][    T1] Bluetooth: HCI socket layer initialized
[    3.068209][    T1] Bluetooth: L2CAP socket layer initialized
[    3.069400][    T1] Bluetooth: SCO socket layer initialized
[    3.070335][    T1] NET: Registered PF_ATMPVC protocol family
[    3.071402][    T1] NET: Registered PF_ATMSVC protocol family
[    3.072669][    T1] NetLabel: Initializing
[    3.073356][    T1] NetLabel:  domain hash size = 128
[    3.074134][    T1] NetLabel:  protocols = UNLABELED CIPSOv4 CALIPSO
[    3.075285][    T1] NetLabel:  unlabeled traffic allowed by default
[    3.078883][    T1] nfc: nfc_init: NFC Core ver 0.1
[    3.080133][    T1] NET: Registered PF_NFC protocol family
[    3.081238][    T1] PCI: Using ACPI for IRQ routing
[    3.083089][    T1] pci 0000:00:05.0: vgaarb: setting as boot VGA device
[    3.084240][    T1] pci 0000:00:05.0: vgaarb: bridge control possible
[    3.084802][    T1] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[    3.084839][    T1] vgaarb: loaded
[    3.102829][    T1] clocksource: Switched to clocksource kvm-clock
[    3.125702][    T1] VFS: Disk quotas dquot_6.6.0
[    3.126765][    T1] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    3.128727][    T1] FS-Cache: Loaded
[    3.130757][    T1] CacheFiles: Loaded
[    3.132258][    T1] TOMOYO: 2.6.0
[    3.132837][    T1] Mandatory Access Control activated.
[    3.137274][    T1] AppArmor: AppArmor Filesystem Enabled
[    3.138708][    T1] pnp: PnP ACPI init
[    3.159577][    T1] pnp: PnP ACPI: found 7 devices
[    3.208522][    T1] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
[    3.211187][    T1] NET: Registered PF_INET protocol family
[    3.216622][    T1] IP idents hash table entries: 131072 (order: 8, 1048576 bytes, vmalloc)
[    3.229616][    T1] tcp_listen_portaddr_hash hash table entries: 4096 (order: 6, 294912 bytes, vmalloc)
[    3.233026][    T1] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, vmalloc)
[    3.236469][    T1] TCP established hash table entries: 65536 (order: 7, 524288 bytes, vmalloc)
[    3.248513][    T1] TCP bind hash table entries: 65536 (order: 11, 9437184 bytes, vmalloc hugepage)
[    3.260928][    T1] TCP: Hash tables configured (established 65536 bind 65536)
[    3.266096][    T1] MPTCP token hash table entries: 8192 (order: 7, 720896 bytes, vmalloc)
[    3.270840][    T1] UDP hash table entries: 4096 (order: 7, 655360 bytes, vmalloc)
[    3.275199][    T1] UDP-Lite hash table entries: 4096 (order: 7, 655360 bytes, vmalloc)
[    3.278203][    T1] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    3.281854][    T1] RPC: Registered named UNIX socket transport module.
[    3.283102][    T1] RPC: Registered udp transport module.
[    3.284125][    T1] RPC: Registered tcp transport module.
[    3.285035][    T1] RPC: Registered tcp-with-tls transport module.
[    3.286029][    T1] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    3.291030][    T1] NET: Registered PF_XDP protocol family
[    3.292051][    T1] pci_bus 0000:00: resource 4 [io  0x0000-0x0cf7 window]
[    3.293167][    T1] pci_bus 0000:00: resource 5 [io  0x0d00-0xffff window]
[    3.294535][    T1] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window]
[    3.296007][    T1] pci_bus 0000:00: resource 7 [mem 0xc0000000-0xfebfefff window]
[    3.298603][    T1] pci 0000:00:00.0: Limiting direct PCI/PCI transfers
[    3.299959][    T1] PCI: CLS 0 bytes, default 64
[    3.300825][    T1] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
[    3.302134][    T1] software IO TLB: mapped [mem 0x00000000b5800000-0x00000000b9800000] (64MB)
[    3.303701][    T1] ACPI: bus type thunderbolt registered
[    3.314477][   T58] kworker/u4:3 (58) used greatest stack depth: 27896 bytes left
[    3.322798][    T1] RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer
[    3.344172][    T1] kvm_amd: SVM not supported by CPU 1, not amd or hygon
[    3.345453][    T1] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x1fb6cfa72cd, max_idle_ns: 440795262980 ns
[    3.347090][    T1] clocksource: Switched to clocksource tsc
[    3.353747][   T62] kworker/u4:4 (62) used greatest stack depth: 27840 bytes left
[    3.354389][    T1] AVX2 instructions are not detected.
[    3.355890][    T1] AVX or AES-NI instructions are not detected.
[    3.356852][    T1] AVX2 or AES-NI instructions are not detected.
[    3.359102][    T1] AVX or AES-NI instructions are not detected.
[    3.360019][    T1] AVX2 or AES-NI instructions are not detected.
[    3.361067][    T1] AVX or AES-NI instructions are not detected.
[    3.384314][   T71] kworker/u4:2 (71) used greatest stack depth: 27112 bytes left