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", 0x1000}, {&(0x7f0000006140)="f40fc436cbd3058336d553974176e59e950b7ba5f66e3ed864de8f4849003f145288d7298590de4ed8752fc6699381c3b328fbd37782", 0x36}, {&(0x7f0000000640)="b923271c9e5840ac7f59941330ecd561e13bd7e6e3d29a95714d869576fa347ce028da6b7eb3b7a5fa08d29d6522de02d8e62a3594", 0x35}], 0x5, &(0x7f00000061c0)=[{0x38, 0x104, 0xbe, "81fea6e24a93e783d95e5aa3a90680b38ddea67bfc18234246e30b964eedb17b3542cb77"}], 0x38}}], 0x5, 0xd4) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4) (async)

01:53:35 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92a060000001a2babfde8af0180829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d9095a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45b89b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500000000000000000000acaf71bc198e100000000000000000"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000feff8680050047000000000000008500b185a23436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9971a97c15243073a62ece04946af0300008e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000feff8680050047000000000000008500b185a23436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9971a97c15243073a62ece04946af0300008e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:53:35 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x66320100}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  692.243417][T23060] loop2: detected capacity change from 0 to 545
[  692.252971][T23059] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  692.281605][T23060] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  692.295370][T23059] device team0 left promiscuous mode
[  692.310083][T23059] device team_slave_0 left promiscuous mode
[  692.317541][T23059] device team_slave_1 left promiscuous mode
01:53:35 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x74000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  692.354503][T23059] bridge0: port 3(team0) entered disabled state
01:53:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x9, 0x9, 0x7c})
dup3(r0, r1, 0x80000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040))

01:53:35 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:35 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000feff8680050047000000000000008500b185a23436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9971a97c15243073a62ece04946af0300008e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000feff8680050047000000000000008500b185a23436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9971a97c15243073a62ece04946af0300008e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

[  692.409764][T23059] 8021q: adding VLAN 0 to HW filter on device team0
01:53:35 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x77070000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  692.494311][T23059] bond0: (slave team0): Enslaving as an active interface with an up link
[  692.505134][T23068] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  692.561009][ T3684] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  692.572774][T23068] bond0: (slave team0): Releasing backup interface
[  692.603160][T23086] loop2: detected capacity change from 0 to 545
[  692.642194][T23068] bridge0: port 3(team0) entered blocking state
[  692.653454][T23086] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  692.670323][T23068] bridge0: port 3(team0) entered disabled state
[  692.686652][T23068] device team0 entered promiscuous mode
[  692.693310][T23068] device team_slave_0 entered promiscuous mode
[  692.715492][T23068] device team_slave_1 entered promiscuous mode
[  692.800954][ T3684] usb 1-1: Using ep0 maxpacket: 16
[  692.921037][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.932240][ T3684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  692.945177][ T3684] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  692.954359][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.968786][ T3684] usb 1-1: config 0 descriptor??
[  693.910903][ T3684] usbhid 1-1:0.0: can't add hid device: -71
[  693.917069][ T3684] usbhid: probe of 1-1:0.0 failed with error -71
[  693.928813][ T3684] usb 1-1: USB disconnect, device number 84
01:53:37 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:37 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x78fb0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:37 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279a7ee8a600475b41067ab385dad84680556b461a80d8bf6ba9b1577332fdf777b5ee4c80cc666d8f4c2485039b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5e09c3d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a75000000"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000018006001f000000008d2b85a33436315a23a628ee1f7ac4e205a1ea85a2e004ae5e2025543145994aef27c88fe479e9871a97c15243073a62ece08e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e74158490b2c3dfa17d0adbf5c20000f1ff00"/135], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:53:37 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:37 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x9, 0x9, 0x7c})
dup3(r0, r1, 0x80000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) (async)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x9, 0x9, 0x7c}) (async)
dup3(r0, r1, 0x80000) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4) (async)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x8}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) (async)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) (async)

[  694.393754][T23100] loop2: detected capacity change from 0 to 545
[  694.404121][T23100] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  694.418977][T23097] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:53:37 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x801001ee}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  694.447027][T23097] device team0 left promiscuous mode
01:53:37 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, 0x0)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:37 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb7) (async)
getpid() (async, rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async, rerun: 32)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000018006001f000000008d2b85a33436315a23a628ee1f7ac4e205a1ea85a2e004ae5e2025543145994aef27c88fe479e9871a97c15243073a62ece08e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e74158490b2c3dfa17d0adbf5c20000f1ff00"/135], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async, rerun: 32)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[], 0xfffffd9d) (async, rerun: 32)
sendfile(r3, r5, 0x0, 0x80000028)

[  694.535294][T23121] loop2: detected capacity change from 0 to 545
[  694.540559][T19045] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  694.551975][T23097] device team_slave_0 left promiscuous mode
01:53:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x9, 0x9, 0x7c})
dup3(r0, r1, 0x80000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) (async)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x9, 0x9, 0x7c}) (async)
dup3(r0, r1, 0x80000) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4) (async)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x8}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) (async)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) (async)

01:53:37 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, 0x0)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:37 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x801001f7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  694.585912][T23097] device team_slave_1 left promiscuous mode
[  694.593425][T19045] Buffer I/O error on dev loop2, logical block 0, async page read
[  694.604217][T23097] bridge0: port 3(team0) entered disabled state
[  694.612448][T19045]  loop2: unable to read partition table
[  694.676704][T23097] 8021q: adding VLAN 0 to HW filter on device team0
[  694.695031][T23133] loop2: detected capacity change from 0 to 545
[  694.701868][T19045] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  694.727109][T19045] Buffer I/O error on dev loop2, logical block 0, async page read
[  694.727887][T23097] bond0: (slave team0): Enslaving as an active interface with an up link
[  694.740892][ T3688] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  694.753641][T19045]  loop2: unable to read partition table
[  694.776012][T23122] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  694.807223][T23122] bond0: (slave team0): Releasing backup interface
[  694.857849][T23122] bridge0: port 3(team0) entered blocking state
[  694.865804][T23122] bridge0: port 3(team0) entered disabled state
[  694.874478][T23122] device team0 entered promiscuous mode
[  694.880585][T23122] device team_slave_0 entered promiscuous mode
[  694.895245][T23122] device team_slave_1 entered promiscuous mode
[  695.030824][ T3688] usb 1-1: Using ep0 maxpacket: 16
[  695.150936][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.162452][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  695.175379][ T3688] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  695.184500][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.195976][ T3688] usb 1-1: config 0 descriptor??
[  696.122480][ T3688] usbhid 1-1:0.0: can't add hid device: -71
[  696.128537][ T3688] usbhid: probe of 1-1:0.0 failed with error -71
[  696.144536][ T3688] usb 1-1: USB disconnect, device number 85
01:53:39 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:39 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279a7ee8a600475b41067ab385dad84680556b461a80d8bf6ba9b1577332fdf777b5ee4c80cc666d8f4c2485039b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5e09c3d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a75000000"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000018006001f000000008d2b85a33436315a23a628ee1f7ac4e205a1ea85a2e004ae5e2025543145994aef27c88fe479e9871a97c15243073a62ece08e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e74158490b2c3dfa17d0adbf5c20000f1ff00"/135], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000018006001f000000008d2b85a33436315a23a628ee1f7ac4e205a1ea85a2e004ae5e2025543145994aef27c88fe479e9871a97c15243073a62ece08e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e74158490b2c3dfa17d0adbf5c20000f1ff00"/135], 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:53:39 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, 0x0)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280)=0xfff, 0x4)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x80000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="32f73fc31effbd13418ab912c56a114a74a7e6d5b1081e30e42e5bf7364f8ce5593fc706a26d22676c05597aa0ab18ab56ccc460abf8f438e5931349d0beb52424adf7a662558de9a17a875dc12a84248a9ec432157d4c145246a645bf84c60e36ebfbf879c0f5efc894bce2c339a7753aed699d8c3c940794c887278f8769a062e0a8fb9f6a814c24bb3c4db1c1b66c5fa85aac668d08409671560351e7ce1d5cc9c76217de45f2", &(0x7f00000001c0)=@tcp=r2}, 0x20)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000240)='devices.list\x00', 0x0, 0x0)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4)

01:53:39 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x80fb0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:39 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:39 executing program 2:
epoll_create1(0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:39 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:39 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x88040000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  696.600477][T23146] loop2: detected capacity change from 0 to 545
[  696.612838][T23145] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:53:39 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  696.685253][T23155] loop2: detected capacity change from 0 to 545
[  696.699169][T23156] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:53:39 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x99010000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  696.748888][T23155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
01:53:40 executing program 2:
epoll_create1(0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

[  696.855251][T23164] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  696.874491][ T3634] EXT4-fs (loop2): unmounting filesystem.
[  696.921046][ T3688] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  697.171118][ T3688] usb 1-1: Using ep0 maxpacket: 16
[  697.300997][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.311984][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  697.325285][ T3688] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  697.334388][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.344497][ T3688] usb 1-1: config 0 descriptor??
[  698.300926][ T3688] usbhid 1-1:0.0: can't add hid device: -71
[  698.306960][ T3688] usbhid: probe of 1-1:0.0 failed with error -71
[  698.315138][ T3688] usb 1-1: USB disconnect, device number 86
01:53:41 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:41 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:41 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141541)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0xfffe, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:53:41 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x9ac42000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:41 executing program 2:
epoll_create1(0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280)=0xfff, 0x4)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x80000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="32f73fc31effbd13418ab912c56a114a74a7e6d5b1081e30e42e5bf7364f8ce5593fc706a26d22676c05597aa0ab18ab56ccc460abf8f438e5931349d0beb52424adf7a662558de9a17a875dc12a84248a9ec432157d4c145246a645bf84c60e36ebfbf879c0f5efc894bce2c339a7753aed699d8c3c940794c887278f8769a062e0a8fb9f6a814c24bb3c4db1c1b66c5fa85aac668d08409671560351e7ce1d5cc9c76217de45f2", &(0x7f00000001c0)=@tcp=r2}, 0x20)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000240)='devices.list\x00', 0x0, 0x0)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280)=0xfff, 0x4) (async)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async)
accept4(r0, 0x0, &(0x7f0000000040), 0x80000) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="32f73fc31effbd13418ab912c56a114a74a7e6d5b1081e30e42e5bf7364f8ce5593fc706a26d22676c05597aa0ab18ab56ccc460abf8f438e5931349d0beb52424adf7a662558de9a17a875dc12a84248a9ec432157d4c145246a645bf84c60e36ebfbf879c0f5efc894bce2c339a7753aed699d8c3c940794c887278f8769a062e0a8fb9f6a814c24bb3c4db1c1b66c5fa85aac668d08409671560351e7ce1d5cc9c76217de45f2", &(0x7f00000001c0)=@tcp=r2}, 0x20) (async)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async)
openat$cgroup_ro(r3, &(0x7f0000000240)='devices.list\x00', 0x0, 0x0) (async)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4) (async)

01:53:41 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xcc060000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:41 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  698.769105][T23178] loop2: detected capacity change from 0 to 545
01:53:42 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141541) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb7)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0xfffe, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:53:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280)=0xfff, 0x4) (async)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x80000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="32f73fc31effbd13418ab912c56a114a74a7e6d5b1081e30e42e5bf7364f8ce5593fc706a26d22676c05597aa0ab18ab56ccc460abf8f438e5931349d0beb52424adf7a662558de9a17a875dc12a84248a9ec432157d4c145246a645bf84c60e36ebfbf879c0f5efc894bce2c339a7753aed699d8c3c940794c887278f8769a062e0a8fb9f6a814c24bb3c4db1c1b66c5fa85aac668d08409671560351e7ce1d5cc9c76217de45f2", &(0x7f00000001c0)=@tcp=r2}, 0x20) (async, rerun: 64)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 64)
openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000240)='devices.list\x00', 0x0, 0x0)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2009, 0x4)

01:53:42 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xd0070000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:42 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  698.931730][T23178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  699.005861][ T3634] EXT4-fs (loop2): unmounting filesystem.
[  699.091009][ T3656] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  699.330929][ T3656] usb 1-1: Using ep0 maxpacket: 16
[  699.450883][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  699.467998][ T3656] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  699.485990][ T3656] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  699.500059][ T3656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.518293][ T3656] usb 1-1: config 0 descriptor??
[  700.460989][ T3656] usbhid 1-1:0.0: can't add hid device: -71
[  700.467035][ T3656] usbhid: probe of 1-1:0.0 failed with error -71
[  700.483625][ T3656] usb 1-1: USB disconnect, device number 87
01:53:44 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:44 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:44 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xe8030000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:44 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141541)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0) (async, rerun: 32)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e7390a538db8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc5935fb605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a4cb6e5465a750000000000000000"], 0xb7) (async, rerun: 32)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0xfffe, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:53:44 executing program 3:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0)

01:53:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xee011080}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:44 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

[  700.932882][T23214] loop2: detected capacity change from 0 to 545
[  700.949618][T23216] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  700.991011][T23216] device team0 left promiscuous mode
[  700.999674][T23216] device team_slave_0 left promiscuous mode
01:53:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xf4010000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  701.032504][T23216] device team_slave_1 left promiscuous mode
[  701.061644][T23214] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  701.072000][T23216] bridge0: port 3(team0) entered disabled state
01:53:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xf7011080}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  701.142080][T23216] 8021q: adding VLAN 0 to HW filter on device team0
01:53:44 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

[  701.208113][T23216] bond0: (slave team0): Enslaving as an active interface with an up link
[  701.220634][T23223] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  701.238710][T23223] bond0: (slave team0): Releasing backup interface
[  701.245321][ T3656] usb 1-1: new high-speed USB device number 88 using dummy_hcd
01:53:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xf8f60000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  701.314176][ T3634] EXT4-fs (loop2): unmounting filesystem.
[  701.410541][T23240] loop2: detected capacity change from 0 to 545
[  701.450155][T23223] bridge0: port 3(team0) entered blocking state
[  701.456776][T23223] bridge0: port 3(team0) entered disabled state
[  701.475276][T23240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  701.482054][T23223] device team0 entered promiscuous mode
[  701.489574][T23223] device team_slave_0 entered promiscuous mode
[  701.495921][ T3656] usb 1-1: Using ep0 maxpacket: 16
[  701.505580][T23223] device team_slave_1 entered promiscuous mode
[  701.572463][ T3634] EXT4-fs (loop2): unmounting filesystem.
[  701.621081][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.640421][ T3656] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  701.655453][ T3656] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  701.664732][ T3656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.676415][ T3656] usb 1-1: config 0 descriptor??
[  702.611038][ T3656] usbhid 1-1:0.0: can't add hid device: -71
[  702.617343][ T3656] usbhid: probe of 1-1:0.0 failed with error -71
[  702.625939][ T3656] usb 1-1: USB disconnect, device number 88
01:53:46 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x0, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:46 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:53:46 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:46 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:46 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:46 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@private2}, 0x14)

01:53:46 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x8000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:46 executing program 3:
socketpair(0x21, 0x0, 0x2, 0x0)

[  703.090215][T23250] loop2: detected capacity change from 0 to 545
[  703.113240][T23251] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  703.130349][T23250] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  703.139192][T23251] device team0 left promiscuous mode
[  703.154805][T23251] device team_slave_0 left promiscuous mode
[  703.164255][T23250] EXT4-fs (loop2): unmounting filesystem.
[  703.170419][T23251] device team_slave_1 left promiscuous mode
[  703.177013][T23251] bridge0: port 3(team0) entered disabled state
01:53:46 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
umount2(0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:46 executing program 3:
r0 = getpgrp(0x0)
ioprio_get$pid(0x3, r0)

[  703.227109][T23251] 8021q: adding VLAN 0 to HW filter on device team0
01:53:46 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x2000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:46 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0) (async, rerun: 32)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7) (async, rerun: 32)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

[  703.283423][T23251] bond0: (slave team0): Enslaving as an active interface with an up link
[  703.295196][T23256] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  703.323202][T23256] bond0: (slave team0): Releasing backup interface
[  703.380530][T23276] loop2: detected capacity change from 0 to 545
[  703.433329][T23276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  703.448087][T23256] bridge0: port 3(team0) entered blocking state
[  703.460246][T23256] bridge0: port 3(team0) entered disabled state
[  703.461019][   T14] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  703.475717][T23256] device team0 entered promiscuous mode
[  703.489074][ T3634] EXT4-fs (loop2): unmounting filesystem.
[  703.495046][T23256] device team_slave_0 entered promiscuous mode
[  703.509225][T23256] device team_slave_1 entered promiscuous mode
[  703.730974][   T14] usb 1-1: Using ep0 maxpacket: 16
[  703.861421][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.872609][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  703.886087][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  703.895289][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.905076][   T14] usb 1-1: config 0 descriptor??
[  704.372704][   T14] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  704.380388][   T14] microsoft 0003:045E:07DA.0013: No inputs registered, leaving
[  704.390606][   T14] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  704.402082][   T14] microsoft 0003:045E:07DA.0013: no inputs found
[  704.408423][   T14] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway
[  704.775263][ T3688] usb 1-1: USB disconnect, device number 89
01:53:48 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x0, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:48 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:48 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000080)="a1", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0xc)

01:53:48 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @remote, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:53:48 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x4000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:48 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
umount2(0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

01:53:48 executing program 3:
syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0, 0x0)

[  705.307754][T23284] loop2: detected capacity change from 0 to 545
[  705.319196][T23288] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:53:48 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x5000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  705.366431][T23288] device team0 left promiscuous mode
[  705.377987][T23284] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  705.388048][T23288] device team_slave_0 left promiscuous mode
01:53:48 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xf7000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:48 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
umount2(0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})

[  705.436871][T23288] device team_slave_1 left promiscuous mode
[  705.455289][T23288] bridge0: port 3(team0) entered disabled state
[  705.465030][ T3634] EXT4-fs (loop2): unmounting filesystem.
01:53:48 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x100000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  705.590312][T23304] loop2: detected capacity change from 0 to 545
[  705.611547][ T3684] usb 1-1: new high-speed USB device number 90 using dummy_hcd
01:53:48 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x200000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  705.633509][T23304] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  705.648140][T23288] 8021q: adding VLAN 0 to HW filter on device team0
[  705.686147][T23288] bond0: (slave team0): Enslaving as an active interface with an up link
[  705.709824][T23294] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  705.721492][T23294] bond0: (slave team0): Releasing backup interface
[  705.763576][T23294] bridge0: port 3(team0) entered blocking state
[  705.769981][T23294] bridge0: port 3(team0) entered disabled state
[  705.802064][T23294] device team0 entered promiscuous mode
[  705.824460][T23294] device team_slave_0 entered promiscuous mode
[  705.833381][T23294] device team_slave_1 entered promiscuous mode
[  705.867782][ T3634] EXT4-fs (loop2): unmounting filesystem.
[  705.880879][ T3684] usb 1-1: Using ep0 maxpacket: 16
[  706.001076][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  706.041298][ T3684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  706.080012][ T3684] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  706.092962][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.115010][ T3684] usb 1-1: config 0 descriptor??
[  706.602303][ T3684] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  706.609920][ T3684] microsoft 0003:045E:07DA.0014: No inputs registered, leaving
[  706.618542][ T3684] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  706.630121][ T3684] microsoft 0003:045E:07DA.0014: no inputs found
[  706.636585][ T3684] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway
[  707.013694][ T3688] usb 1-1: USB disconnect, device number 90
01:53:50 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x300000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:50 executing program 2:
epoll_create1(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0)

01:53:50 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:50 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7) (async, rerun: 32)
getpid() (rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xd) (async, rerun: 32)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @remote, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async, rerun: 64)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:53:50 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

01:53:50 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x0, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:50 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:50 executing program 3:
r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37db5bb4"}})

[  707.545089][T23319] loop2: detected capacity change from 0 to 545
[  707.563884][T23321] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  707.579323][T23319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  707.614456][T23321] device team0 left promiscuous mode
01:53:50 executing program 3:
syz_mount_image$romfs(&(0x7f0000007c40), &(0x7f0000007c80)='./file0\x00', 0x0, 0x0, 0x0, 0x1000080, &(0x7f0000007e00))

01:53:50 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @remote, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @remote, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

[  707.661270][T23319] EXT4-fs (loop2): unmounting filesystem.
[  707.667836][T23321] device team_slave_0 left promiscuous mode
[  707.676830][T23321] device team_slave_1 left promiscuous mode
01:53:50 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x600000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  707.748085][T23321] bridge0: port 3(team0) entered disabled state
01:53:51 executing program 3:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x26a000)
pselect6(0x40, &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0, 0x0)

01:53:51 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "74f95bb4"}})

01:53:51 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x700000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  707.875956][T23321] 8021q: adding VLAN 0 to HW filter on device team0
[  707.931146][  T141] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  707.956360][T23321] bond0: (slave team0): Enslaving as an active interface with an up link
[  707.999336][T23327] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  708.037500][T23327] bond0: (slave team0): Releasing backup interface
01:53:51 executing program 3:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0)

01:53:51 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000007c40), &(0x7f0000007c80)='./file0\x00', 0x3085416d, 0x0, &(0x7f0000007dc0), 0x1000080, &(0x7f0000007e00)={[{'nr0\x00'}, {'m-'}, {','}]})

01:53:51 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x800000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  708.080568][T23327] bridge0: port 3(team0) entered blocking state
[  708.091674][T23327] bridge0: port 3(team0) entered disabled state
[  708.099080][T23327] device team0 entered promiscuous mode
[  708.105808][T23327] device team_slave_0 entered promiscuous mode
[  708.113125][T23327] device team_slave_1 entered promiscuous mode
[  708.150285][T23356] loop2: detected capacity change from 0 to 264192
[  708.174929][T23356] romfs: Unknown parameter 'nr0'
[  708.229096][  T141] usb 1-1: Using ep0 maxpacket: 16
[  708.381016][  T141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  708.391965][  T141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  708.405201][  T141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  708.414300][  T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.424756][  T141] usb 1-1: config 0 descriptor??
[  708.891917][  T141] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  708.899371][  T141] microsoft 0003:045E:07DA.0015: No inputs registered, leaving
[  708.912652][  T141] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  708.924362][  T141] microsoft 0003:045E:07DA.0015: no inputs found
[  708.930700][  T141] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway
[  709.296935][T20118] usb 1-1: USB disconnect, device number 91
01:53:53 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:53 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x18480, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x9}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:53:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x2}, 0x0)

01:53:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xa00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:53 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
syz_open_dev$media(&(0x7f00000003c0), 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c4", 0x1}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r1, r1]}}], 0x40}}], 0x1, 0x0)

01:53:53 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:53 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001880)={0x0, 0x0, 0x18}, 0x10)

01:53:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xe00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  709.867368][T23369] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  709.923899][T23369] device team0 left promiscuous mode
01:53:53 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000004880), 0xffffffffffffffff)

01:53:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x1400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:53 executing program 2:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0)

[  710.028292][T23369] device team_slave_0 left promiscuous mode
[  710.120882][ T3684] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  710.129823][T23369] device team_slave_1 left promiscuous mode
01:53:53 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f00000006c0)={0x0, 0xf0ff7f00000000}}, 0x0)

[  710.181077][T23369] bridge0: port 3(team0) entered disabled state
[  710.264199][T23369] 8021q: adding VLAN 0 to HW filter on device team0
[  710.295706][T23369] bond0: (slave team0): Enslaving as an active interface with an up link
[  710.305713][T23370] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  710.360483][T23370] bond0: (slave team0): Releasing backup interface
[  710.370827][ T3684] usb 1-1: Using ep0 maxpacket: 16
[  710.406745][T23370] bridge0: port 3(team0) entered blocking state
[  710.415742][T23370] bridge0: port 3(team0) entered disabled state
[  710.427698][T23370] device team0 entered promiscuous mode
[  710.433491][T23370] device team_slave_0 entered promiscuous mode
[  710.439894][T23370] device team_slave_1 entered promiscuous mode
[  710.491081][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  710.509997][ T3684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  710.542836][ T3684] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  710.566476][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.596719][ T3684] usb 1-1: config 0 descriptor??
[  711.530957][ T3684] usbhid 1-1:0.0: can't add hid device: -71
[  711.537258][ T3684] usbhid: probe of 1-1:0.0 failed with error -71
[  711.545529][ T3684] usb 1-1: USB disconnect, device number 92
01:53:55 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:55 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700))

01:53:55 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x18480, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x9}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x18480, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x9}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:53:55 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x1f00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:55 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2528"], 0x40}}, 0x0)

01:53:55 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:55 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x202000, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000002300))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000004880), 0xffffffffffffffff)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x50)

01:53:55 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x3400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  712.013058][T23391] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  712.026863][T23389] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
01:53:55 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xfffffffffffffd0c, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}}, 0x0)

[  712.056927][T23391] device team0 left promiscuous mode
[  712.071165][T23391] device team_slave_0 left promiscuous mode
[  712.082864][T23391] device team_slave_1 left promiscuous mode
[  712.132544][T23391] bridge0: port 3(team0) entered disabled state
01:53:55 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="b0", 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg$unix(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000001b00)={0x0, 0x989680})

01:53:55 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000100)=[{0x0}, {0x0}, {&(0x7f0000002240)=""/232, 0xe8}], 0x3, &(0x7f0000002340)}, 0x40010100)
sendmmsg$unix(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="b0", 0x1}, {&(0x7f0000000040)="9ff9671e0f91a32e23a6efc3cb812da26d47a67407df0682b8c47270f28c207b0086124a43de36d61755d9506f7bbc083a7b3ed617739a60a2bdbef3766dac1a85c7350dcf6ef385280c07ba89bab795c639c5a58c87d360eac0c5a8466c389347ceff99acbf06060c62cd5974e8d48f0623b64d9294534e64b0d15f94c828c43594ab66649ac29e449a4f6ba6633f066f88ed2c9eff44ec6b3ad2c810714ed1e64648c3da455fc928595637182211af11cceef097a4", 0xb6}, {&(0x7f0000000140)="3d073481d1b53c54397837eb9e8e6bd3addcfdd96d94214c0adc93958288f8ae5f02d4442198873229c70a9390e9efc246b1", 0x32}], 0x3}}], 0x1, 0x0)

01:53:55 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x3803000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  712.179167][T23391] 8021q: adding VLAN 0 to HW filter on device team0
[  712.196148][T23391] bond0: (slave team0): Enslaving as an active interface with an up link
[  712.215980][T23397] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  712.270292][T23397] bond0: (slave team0): Releasing backup interface
[  712.321069][  T141] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  712.371453][T23397] bridge0: port 3(team0) entered blocking state
[  712.386236][T23397] bridge0: port 3(team0) entered disabled state
[  712.394081][T23397] device team0 entered promiscuous mode
[  712.412229][T23397] device team_slave_0 entered promiscuous mode
[  712.419281][T23397] device team_slave_1 entered promiscuous mode
[  712.570835][  T141] usb 1-1: Using ep0 maxpacket: 16
[  712.690988][  T141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  712.702013][  T141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  712.715228][  T141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  712.724405][  T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.736281][  T141] usb 1-1: config 0 descriptor??
[  713.680898][  T141] usbhid 1-1:0.0: can't add hid device: -71
[  713.686956][  T141] usbhid: probe of 1-1:0.0 failed with error -71
[  713.695883][  T141] usb 1-1: USB disconnect, device number 93
01:53:57 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:57 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x18480, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x9}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:53:57 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x4000000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:57 executing program 3:
keyctl$dh_compute(0x17, &(0x7f0000000040), &(0x7f0000000080)=""/117, 0x75, &(0x7f0000000180)={&(0x7f0000000100)={'rmd128\x00'}})

01:53:57 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc}, 0x0)

01:53:57 executing program 5:
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:57 executing program 5:
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:57 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0)

01:53:57 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x4002000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:57 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0)

01:53:57 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x210001, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000400008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f59c4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ad95152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:53:57 executing program 5:
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  714.408294][T23421] could not allocate digest TFM handle rmd128
[  714.460826][  T141] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  714.700817][  T141] usb 1-1: Using ep0 maxpacket: 16
[  714.824798][  T141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  714.835778][  T141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  714.852576][  T141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  714.863521][  T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.874866][  T141] usb 1-1: config 0 descriptor??
[  715.810885][  T141] usbhid 1-1:0.0: can't add hid device: -71
[  715.816979][  T141] usbhid: probe of 1-1:0.0 failed with error -71
[  715.825530][  T141] usb 1-1: USB disconnect, device number 94
01:53:59 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x4402000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:59 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0)

01:53:59 executing program 3:
getrlimit(0x0, &(0x7f0000000340))

01:53:59 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x210001, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000400008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f59c4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ad95152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x210001, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000400008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f59c4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ad95152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:53:59 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="b0", 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg$unix(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf00c, 0x0)

01:53:59 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:53:59 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0)

01:53:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x6632010000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  716.303323][T23452] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:53:59 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:59 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3f954511"}})

01:53:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x7400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:59 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x210001, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000400008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f59c4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ad95152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x210001, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000400008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f59c4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ad95152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:53:59 executing program 3:
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0)

[  716.507779][T23466] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:53:59 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000))

01:53:59 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:53:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x7707000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:53:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x78fb000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  716.620957][T20118] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  716.646622][T23480] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  716.860879][T20118] usb 1-1: Using ep0 maxpacket: 16
[  716.991006][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  717.002064][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  717.015183][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  717.024472][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.035847][T20118] usb 1-1: config 0 descriptor??
[  717.981034][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  717.987114][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  717.997999][T20118] usb 1-1: USB disconnect, device number 95
01:54:01 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:01 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:01 executing program 2:
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect$hid(0x5, 0xfffffffffffffe8c, 0x0, 0x0)

01:54:01 executing program 3:
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0xe1df2ca29e5dbb2d)

01:54:01 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e21, 0x800, @empty, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x801001ee00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:01 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000003780), 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0)

[  718.449203][T23496] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x801001f700000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:01 executing program 3:
syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), 0xffffffffffffffff)

01:54:01 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:01 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async, rerun: 32)
r2 = dup(r0) (rerun: 32)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e21, 0x800, @empty, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async, rerun: 32)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (rerun: 32)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:01 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)="abc3a2c11fd5dbd63a03113f0577dc020236e6fedeabf44641d56ab5b51559a1c5a077c254d9d6f3a79884522e9d0c505b733b4e5c262dd4847e177cdafd854b64e754853bbc5760244502bda2c0a01eab76f7da6dc5c42aa3b35426596f6fec89e4fe481314c0218a01d2cb479758e47f256009e159e2c71452265f9eddb6ebea281b742eae7fdb6470552ed20e7843da4394e64a845dcb99f6912ebdcd4a70", 0xa0}, {&(0x7f00000000c0)="89cda74ca2be2d5dfb70f42fcb4c541039d645e84efb3d2d18ea8431934b103920d8e6b69b46c75ddd6c45614b", 0x2d}, {&(0x7f0000000380)="8d68c74bb4fd83dc00ec2ba970792ed522c2283f34d7ccadf658e7f9f4ea7b5fc8d74a1bd692354faf85cd43905280fc6b527e914ac05b787d59cfbc60d1d29b8b063f94c104eeed2a31ead198af39bc35cd199bec987b0b5519acfe1286015e2191f19d79cf6e7e80a811ffc8ec63be4e30ce1b0a4aa70bb6293428f8e89f9e486060fe7e77d21787202c5b85a90a525a6b716b939e431160409476c778b53d503c2f696d9d53ab12d6d1c7a1fd581f2e971bc8fff7f5", 0xb7}, {&(0x7f00000004c0)="e817388a9df9f479466b08d8c7b2411533ecf84bc4ab3dd9a296a2a269ef69b81ad0e9d9036119063460dfda31e5d0c8d556b39ee74a4f81dc8dd79789aa1a1c6abd4b8c5a72f4c1891a423f12e0f5baa9734188576c91d225acd24926b919b01d0c31c3022ae8b79ac5b787c232f8fb7dd5edff17b11bec9e3c8ac3b626e18a15b69191e6d39f622d6c0d0236f85826ed28888ceed5", 0x96}, {&(0x7f0000000580)="4fc6b94dea17caf4b8cb40469e9adede210174ed22eef63f6b3f7c4405afa1a8c86dd9e2106fa4903b0c9507eb07940b23eecc880c5f3cf2d5d4bc8b61be1e3b37398188111dfefd2f5ebb9008300560b8ac6909f9c77699363c67ef7791291223100521a6daafe222221538a67b55c5ef4c7e0e72f96b1c347b20df2335b0d0a78f4ddb855502b652976e439e19029dcd3a56f79049d9280759cdd74c742ec655eae1acfc2c6721b9d5d8fef12ba864a4a229bee848f8d255a874a8cea1a240647fb29441b20332ec4d851d3eb6152ff046c9db5576e6fa8ee5f7f18cf890043c84e4e4", 0xe4}, {&(0x7f0000000680)="2b49224210518860d5ec38c7f1cf1165bca901a2cb07ab8618c9b3d55f13659d88395569447c3d47ab994d49954dd643746431f9156960c21e12f9cd21e37bd6f03356badb0dddfabd7e5aa32992953ce8208e8d91723e852556e44a4505662ff852a7a6571668fdb2fd3c276fb24308cf95de9778c6d64aa04c5027745e127374acbc3dc6100983c68bf27e84a24fecaeaa0e86d387d74a70cf3af38ac59b2e94141d1bbf288396af4e1e616562a5815e3bfca1c09d098a6e306c7d6757d0de4fef7f0e0b2888a49734f23e8dbed2fe2ec2b72df82d884671649b98482c7f310f0be0456e9c48e70d493d4664", 0xed}, {&(0x7f0000000780)="ef2a3812315a1759acd293b0b9450d90b6e467e8580a922cf0e417b6cab4877743dfe70a8c5fd264eeac84c1710ceb7b2308355b14bfc834a15a09c5b555cd0e11cac1acd5d64e63f37ee37303affef450a5283424fe21fb88d599bb001adff8abde336d6cf7fa7b36474210c90a1dabf37ab2746031d56cf233581a429d2c535780df957cd7764c4d79b68a12867d37c09ad6253612a4b46ca1c13d4a625552dfb428014376b2b14b3465d58ff346df27bb3f1672da1ce26e5f9bc300e9018d0469d1a87c7d46bfcee8d0a7738261a3b1bcf68ca9f1a269421b9a75762ecd6a148c576f869d", 0xe6}, {&(0x7f0000000880)="a73a14e4676eb52151d8f0d473824d36bde2aa0b42989b658b2bbf69a34d188f9d9718cbb9d90c3887987bb04a5db426e6288a40021e359810b13f35cd395982dbc5c4b2f71ca83119b8e6fbb807370891d542aaba04bdd1cb7cde2ab5620999200c9e06685800fb5f4fdfeb8beb7e543a47bfc87995f983359d19c01d8f25380dba7e7aa2070a41ce2143bef458cf676f0e33dfda6fd954f51c7d7c0bb8ed36a508b82ea83ab48cace92311ba1e21e69ac34cd8e9caf19cf294ec8e97d5c2c6656fe221c63945", 0xc7}, {0x0}], 0x9, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000050}}], 0x1, 0x4000040)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)

[  718.656360][T23507] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  718.732925][T20118] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  718.981042][T20118] usb 1-1: Using ep0 maxpacket: 16
[  719.101230][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  719.121943][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  719.151007][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  719.160505][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.193608][T20118] usb 1-1: config 0 descriptor??
[  720.161052][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  720.167100][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  720.175464][T20118] usb 1-1: USB disconnect, device number 96
01:54:03 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:03 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x80fb000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:03 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:03 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e21, 0x800, @empty, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e21, 0x800, @empty, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:54:03 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)="abc3a2c11fd5dbd63a03113f0577dc020236e6fedeabf44641d56ab5b51559a1c5a077c254d9d6f3a79884522e9d0c505b733b4e5c262dd4847e177cdafd854b64e754853bbc5760244502bda2c0a01eab76f7da6dc5c42aa3b35426596f6fec89e4fe481314c0218a01d2cb479758e47f256009e159e2c71452265f9eddb6ebea281b742eae7fdb6470552ed20e7843da4394e64a845dcb99f6912ebdcd4a70", 0xa0}, {&(0x7f00000000c0)="89cda74ca2be2d5dfb70f42fcb4c541039d645e84efb3d2d18ea8431934b103920d8e6b69b46c75ddd6c45614b", 0x2d}, {&(0x7f0000000380)="8d68c74bb4fd83dc00ec2ba970792ed522c2283f34d7ccadf658e7f9f4ea7b5fc8d74a1bd692354faf85cd43905280fc6b527e914ac05b787d59cfbc60d1d29b8b063f94c104eeed2a31ead198af39bc35cd199bec987b0b5519acfe1286015e2191f19d79cf6e7e80a811ffc8ec63be4e30ce1b0a4aa70bb6293428f8e89f9e486060fe7e77d21787202c5b85a90a525a6b716b939e431160409476c778b53d503c2f696d9d53ab12d6d1c7a1fd581f2e971bc8fff7f5", 0xb7}, {&(0x7f00000004c0)="e817388a9df9f479466b08d8c7b2411533ecf84bc4ab3dd9a296a2a269ef69b81ad0e9d9036119063460dfda31e5d0c8d556b39ee74a4f81dc8dd79789aa1a1c6abd4b8c5a72f4c1891a423f12e0f5baa9734188576c91d225acd24926b919b01d0c31c3022ae8b79ac5b787c232f8fb7dd5edff17b11bec9e3c8ac3b626e18a15b69191e6d39f622d6c0d0236f85826ed28888ceed5", 0x96}, {&(0x7f0000000580)="4fc6b94dea17caf4b8cb40469e9adede210174ed22eef63f6b3f7c4405afa1a8c86dd9e2106fa4903b0c9507eb07940b23eecc880c5f3cf2d5d4bc8b61be1e3b37398188111dfefd2f5ebb9008300560b8ac6909f9c77699363c67ef7791291223100521a6daafe222221538a67b55c5ef4c7e0e72f96b1c347b20df2335b0d0a78f4ddb855502b652976e439e19029dcd3a56f79049d9280759cdd74c742ec655eae1acfc2c6721b9d5d8fef12ba864a4a229bee848f8d255a874a8cea1a240647fb29441b20332ec4d851d3eb6152ff046c9db5576e6fa8ee5f7f18cf890043c84e4e4", 0xe4}, {&(0x7f0000000680)="2b49224210518860d5ec38c7f1cf1165bca901a2cb07ab8618c9b3d55f13659d88395569447c3d47ab994d49954dd643746431f9156960c21e12f9cd21e37bd6f03356badb0dddfabd7e5aa32992953ce8208e8d91723e852556e44a4505662ff852a7a6571668fdb2fd3c276fb24308cf95de9778c6d64aa04c5027745e127374acbc3dc6100983c68bf27e84a24fecaeaa0e86d387d74a70cf3af38ac59b2e94141d1bbf288396af4e1e616562a5815e3bfca1c09d098a6e306c7d6757d0de4fef7f0e0b2888a49734f23e8dbed2fe2ec2b72df82d884671649b98482c7f310f0be0456e9c48e70d493d4664", 0xed}, {&(0x7f0000000780)="ef2a3812315a1759acd293b0b9450d90b6e467e8580a922cf0e417b6cab4877743dfe70a8c5fd264eeac84c1710ceb7b2308355b14bfc834a15a09c5b555cd0e11cac1acd5d64e63f37ee37303affef450a5283424fe21fb88d599bb001adff8abde336d6cf7fa7b36474210c90a1dabf37ab2746031d56cf233581a429d2c535780df957cd7764c4d79b68a12867d37c09ad6253612a4b46ca1c13d4a625552dfb428014376b2b14b3465d58ff346df27bb3f1672da1ce26e5f9bc300e9018d0469d1a87c7d46bfcee8d0a7738261a3b1bcf68ca9f1a269421b9a75762ecd6a148c576f869d", 0xe6}, {&(0x7f0000000880)="a73a14e4676eb52151d8f0d473824d36bde2aa0b42989b658b2bbf69a34d188f9d9718cbb9d90c3887987bb04a5db426e6288a40021e359810b13f35cd395982dbc5c4b2f71ca83119b8e6fbb807370891d542aaba04bdd1cb7cde2ab5620999200c9e06685800fb5f4fdfeb8beb7e543a47bfc87995f983359d19c01d8f25380dba7e7aa2070a41ce2143bef458cf676f0e33dfda6fd954f51c7d7c0bb8ed36a508b82ea83ab48cace92311ba1e21e69ac34cd8e9caf19cf294ec8e97d5c2c6656fe221c63945", 0xc7}, {0x0}], 0x9, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000050}}], 0x1, 0x4000040)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)

01:54:03 executing program 2:
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect$hid(0x5, 0xfffffffffffffe8c, 0x0, 0x0)

01:54:03 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x8804000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  720.636036][T23525] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:03 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x9901000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:04 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}}, 0x0, 0x0, 0xfffc, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7b64fff0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757cbcdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

[  720.839678][T23535] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:04 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x9ac4200000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  720.940870][T20118] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  721.096305][T23547] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  721.230968][T20118] usb 1-1: Using ep0 maxpacket: 16
[  721.373960][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  721.400585][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  721.415170][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  721.424652][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.456871][T20118] usb 1-1: config 0 descriptor??
[  722.411096][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  722.417123][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  722.434866][T20118] usb 1-1: USB disconnect, device number 97
01:54:06 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:06 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xcc06000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:06 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0)

01:54:06 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}}, 0x0, 0x0, 0xfffc, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7b64fff0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757cbcdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:06 executing program 2:
timer_create(0x3, 0x0, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f00000000c0))

01:54:06 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect$hid(0x0, 0xfffffffffffffe8c, 0x0, 0x0)

01:54:06 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000000), 0x600000000000, 0x0)

01:54:06 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  722.885217][T23554] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]})

01:54:06 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}}, 0x0, 0x0, 0xfffc, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7b64fff0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757cbcdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}}, 0x0, 0x0, 0xfffc, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7b64fff0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757cbcdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:54:06 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xd007000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  722.986887][T23567] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  723.321026][T20118] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  723.590842][T20118] usb 1-1: Using ep0 maxpacket: 16
[  723.750950][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.762028][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  723.775147][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  723.784394][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.794421][T20118] usb 1-1: config 0 descriptor??
[  724.264100][T20118] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0016/input/input29
[  724.279745][T20118] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  724.663949][   T14] usb 1-1: USB disconnect, device number 98
01:54:08 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]})

01:54:08 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xe803000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:08 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0xfffffffffffffe6a)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x2f3c1864546e2714)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x83, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd14400"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRES16=r1], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:08 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:08 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000000), 0x600000000000, 0x0)
ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)

01:54:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xf401000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:08 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff0000090584"], 0x0)

[  725.197372][T23589] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:08 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xf8f6000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:08 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0xfffffffffffffe6a)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x2f3c1864546e2714)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x83, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd14400"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRES16=r1], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0xfffffffffffffe6a) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x2f3c1864546e2714) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x83, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd14400"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRES16=r1], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:54:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:08 executing program 2:
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
dup(r0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0xfffffffffffffe8c, 0x0, 0x0)

[  725.354738][T23599] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:08 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0xffffffff00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  725.476612][T23608] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  725.510971][T20118] usb 1-1: new high-speed USB device number 99 using dummy_hcd
01:54:08 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  725.582611][ T3688] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  725.647150][T23617] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  725.770854][T20118] usb 1-1: Using ep0 maxpacket: 16
[  725.850805][ T3688] usb 4-1: Using ep0 maxpacket: 8
[  725.911179][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  725.922428][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  725.936189][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  725.945632][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.956256][T20118] usb 1-1: config 0 descriptor??
[  725.981120][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  725.992773][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  726.200950][ T3688] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e
[  726.211092][ T3688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.219103][ T3688] usb 4-1: Product: syz
[  726.223650][ T3688] usb 4-1: Manufacturer: syz
[  726.228270][ T3688] usb 4-1: SerialNumber: syz
[  726.240582][ T3688] usb 4-1: config 0 descriptor??
[  726.292608][ T3688] adutux 4-1:0.0: interrupt endpoints not found
[  726.458464][T20118] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0017/input/input30
[  726.473723][T20118] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  726.507963][T20118] usb 4-1: USB disconnect, device number 5
[  726.855392][T20118] usb 1-1: USB disconnect, device number 99
01:54:10 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:10 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0xfffffffffffffe6a) (async)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0xb7) (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x2f3c1864546e2714) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x83, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd14400"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRES16=r1], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:10 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:10 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:10 executing program 2:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

01:54:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

01:54:10 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, "9994850ab704dca3048826dc2647b9b61c6901"})
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb)

[  727.383141][T23636] loop3: detected capacity change from 0 to 512
[  727.384216][T23639] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:10 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:10 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:10 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000580060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf5f8ffffffffffffffed01c2ee512ffa14dd"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:10 executing program 2:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x210040, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0)

[  727.448847][T23636] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  727.472693][T23636] EXT4-fs (loop3): get root inode failed
[  727.478389][T23636] EXT4-fs (loop3): mount failed
01:54:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

[  727.550400][T23653] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  727.604565][T23657] loop3: detected capacity change from 0 to 512
[  727.629031][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  727.643358][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  727.659941][T19045]  loop3: unable to read partition table
[  727.670888][  T141] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  727.687314][T23657] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  727.727365][T23657] EXT4-fs (loop3): get root inode failed
[  727.733600][T23657] EXT4-fs (loop3): mount failed
[  727.950813][  T141] usb 1-1: Using ep0 maxpacket: 16
[  728.071048][  T141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  728.082351][  T141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  728.095214][  T141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  728.104276][  T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.116455][  T141] usb 1-1: config 0 descriptor??
[  728.604036][  T141] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0018/input/input31
[  728.620503][  T141] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  729.011463][   T14] usb 1-1: USB disconnect, device number 100
01:54:12 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:12 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:12 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async, rerun: 32)
r2 = dup(r0) (async, rerun: 32)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000580060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf5f8ffffffffffffffed01c2ee512ffa14dd"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:12 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

01:54:12 executing program 2:
io_setup(0x10000, &(0x7f0000000000)=<r0=>0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

01:54:12 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000580060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf5f8ffffffffffffffed01c2ee512ffa14dd"], 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:12 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  729.538798][T23674] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  729.543845][T23675] loop3: detected capacity change from 0 to 512
01:54:12 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  729.598948][T23675] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  729.621537][T23675] EXT4-fs (loop3): get root inode failed
[  729.630089][T23675] EXT4-fs (loop3): mount failed
01:54:12 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:12 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d6728285001000000ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500000000000000000000917db3085bf796e98a6b329aa049bcdfea2c6887b73587056bc345a10fba320f63a612c1784cc8eb259f6ef44291fae21b872cffaf3be3781b11897eaddb3afe9c41409e3e9dc4d6874f4eb266f06c59e21fcb48aae3caf38ee0dc664177460494bb0f59"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000140)='0', 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

[  729.675907][T23688] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  729.860843][   T14] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  729.869652][T23697] loop3: detected capacity change from 0 to 512
[  729.885604][T23697] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  729.910317][T23697] EXT4-fs (loop3): get root inode failed
[  729.923535][T23697] EXT4-fs (loop3): mount failed
[  730.130916][   T14] usb 1-1: Using ep0 maxpacket: 16
[  730.260923][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  730.271997][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  730.285165][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  730.294285][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.303893][   T14] usb 1-1: config 0 descriptor??
[  731.240960][   T14] usbhid 1-1:0.0: can't add hid device: -71
[  731.247097][   T14] usbhid: probe of 1-1:0.0 failed with error -71
[  731.255162][   T14] usb 1-1: USB disconnect, device number 101
01:54:14 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:14 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)

01:54:14 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:14 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000", 0x17}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:14 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000140)='0', 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:14 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

01:54:14 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xb6, &(0x7f0000000080)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:14 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  731.716580][T23709] loop3: detected capacity change from 0 to 512
[  731.729408][T23708] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:14 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

01:54:15 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000140)='0', 0x1) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/207, 0xcf}], 0x1)

01:54:15 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000", 0x17}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  731.878378][T23728] loop3: detected capacity change from 0 to 512
[  731.915644][ T2970] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  731.937229][T23730] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  731.947276][ T2970] Buffer I/O error on dev loop3, logical block 0, async page read
[  731.996696][ T2970] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  732.030809][ T2970] Buffer I/O error on dev loop3, logical block 0, async page read
[  732.040286][ T2970]  loop3: unable to read partition table
[  732.122639][T18941] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  732.150849][  T141] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  732.400863][  T141] usb 1-1: Using ep0 maxpacket: 16
[  732.531112][  T141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  732.542116][  T141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  732.555690][  T141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  732.564992][  T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.575653][  T141] usb 1-1: config 0 descriptor??
[  733.490936][  T141] usbhid 1-1:0.0: can't add hid device: -71
[  733.496929][  T141] usbhid: probe of 1-1:0.0 failed with error -71
[  733.504887][  T141] usb 1-1: USB disconnect, device number 102
01:54:17 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:17 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000100)='0', 0x1)
r1 = dup(0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d71b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r4, 0x0, 0x80000028)

01:54:17 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:17 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000", 0x17}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:17 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

01:54:17 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0)

[  733.966958][T23740] loop3: detected capacity change from 0 to 512
01:54:17 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:17 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

01:54:17 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  734.146047][T23748] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:17 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a", 0x23}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:17 executing program 2:
clock_getres(0x0, &(0x7f00000002c0))

01:54:17 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32)
r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000100)='0', 0x1)
r1 = dup(0xffffffffffffffff) (async)
write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d71b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r4, 0x0, 0x80000028)

[  734.203395][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  734.223544][T23751] loop3: detected capacity change from 0 to 512
[  734.229936][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  734.287579][T23754] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  734.294828][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  734.430966][ T3656] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  734.723034][ T3656] usb 1-1: Using ep0 maxpacket: 16
[  734.861008][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  734.872609][ T3656] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  734.886081][ T3656] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  734.895449][ T3656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.905778][ T3656] usb 1-1: config 0 descriptor??
[  735.830999][ T3656] usbhid 1-1:0.0: can't add hid device: -71
[  735.837144][ T3656] usbhid: probe of 1-1:0.0 failed with error -71
[  735.845479][ T3656] usb 1-1: USB disconnect, device number 103
01:54:19 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, 'j'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:19 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

01:54:19 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x34}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:19 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a", 0x23}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:19 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r3 = dup(0xffffffffffffffff)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x400000)

01:54:19 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000100)='0', 0x1)
r1 = dup(0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d71b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r2, r4, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r0, &(0x7f0000000100)='0', 0x1) (async)
dup(0xffffffffffffffff) (async)
write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d71b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r2, r4, 0x0, 0x80000028) (async)

[  736.318126][T23769] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  736.322043][T23771] loop3: detected capacity change from 0 to 512
01:54:19 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x74}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:19 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a", 0x23}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:19 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e260123217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab387189f3b6f6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9d955a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500000000000000000000aa0457510d7ee46b949bf5c1ab617ef7106661bfd88581a2f63ce01a30d2966e10f7dd907fdbc8c2ce5b346fa307658b75c0787d17a52660e6ea9e4ec40595c716b53803f9f864e5abf0e378cf56f2be4c9eacafc9fe2eb38db4871a2f2c2da694ea07f6b82803912c11a96b"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18500, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:19 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:19 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

01:54:19 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002", 0x29}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  736.461846][T23779] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  736.546249][T23783] loop3: detected capacity change from 0 to 512
[  736.559135][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  736.574676][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  736.620941][T20115] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  736.637533][T23786] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  736.642191][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  736.686481][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  736.714056][T19045] ldm_validate_partition_table(): Disk read failed.
[  736.727115][T19045] Dev loop3: unable to read RDB block 0
[  736.733198][T19045]  loop3: unable to read partition table
[  736.739090][T19045] loop3: partition table beyond EOD, truncated
[  736.880836][T20115] usb 1-1: Using ep0 maxpacket: 16
[  737.001006][T20115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  737.012361][T20115] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  737.025447][T20115] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  737.034675][T20115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.045229][T20115] usb 1-1: config 0 descriptor??
[  737.971047][T20115] usbhid 1-1:0.0: can't add hid device: -71
[  737.977043][T20115] usbhid: probe of 1-1:0.0 failed with error -71
[  737.984891][T20115] usb 1-1: USB disconnect, device number 104
01:54:21 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, 'j'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:21 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001080)={0x4f, {"f1f353f0c833097c27a892e9d357cff5f8dbe89627fac0c7baa3d2367d656bce7be2201f63550726fae46c98bb9d1015f4f6c630ca5fe559381741086cf09a276956cdc7e94dadd91d11e3b0870e56a7d380b72f9b3942a9527a975ed11798f36566468a95b4b5bee90b1dc6b83f9488e226e57be4eb015b2d2c87b4a9488e1f205eab5b424225cb6cb4a89a4f644fa5a17a96b6f1b989cee896f36037d03e5533f69dfd83cda70ce02910faf8777c0a2b88df10f0385e1bc828ff019eb5a450b1e05c738079972dfc58810132a59804b823355107214232b12efc8b93d69b777eb1e6db53d9f00a72d4634edf1a514fe9840f22c9af52a3273844507f4614bf298a072f1b0292c5461596f7daaab6e60ce35b40d84f5abf83b710420cfb9332c80c9205bace3d3f81bfeec61ae2537dbb854da4131e11a12f2939c46c119fcb9695c453380c41f08b77f4e3f56f4ceb9f12d12ff852642075ad082dbc7b6e1c4201b7f5b35846e7baf3ea591daa5e175b45f2fc93dfba95837f20dd701f829811f82ef2f71447df0390048fdded6e05838edb9fad4158751321d6452a67b6f11e87aaee34a5082fe86d2fe67b5ab0ba8b9a1023316dee0db52aac7c5eaeca00fcb7df6d82b1ee05e5f17729546e25fa6882f167137c761bf4179669859e027874d20c7584d4d4db23cebc32344ea2d4305215f0e13fa3cda44c00f200f1a95bf51288722b8ee15349fd12345f70f8502f54fb659da95677679697f30ebe4b1e0ff19b9873d6de900a89f11835afe90c42df20b80dd1cb1764482d3c2bc5151abb6c6027673f3d0e6f09a6704c6754ed50886f8726329b331a40955cacc11c3ddef202996302ce8cc90896dc848c7066e82a98def0741f008a8d2a68be8979daf97c645552aa06b57aef18db7a8135768fd829f852dc6e7ff64599717f7715d75c5056c4ec5b1b75c5f6d25d53810f8a72d5b79a21ef4e5aa97fcc00fd134e1520d225a6d8e72cd819d3f064bcf336ac26e133c359830d1b326ca62071e38d465913de34a93947e3d09db2e5ced544a3f30b89fd2e0ea3bc71172ff30273a3d5cbcd4f98bd884b83f7b447f9697cfcd4e4d52379aa8aaaa97b48feb0ea03c1a9318cc87bde35d753cfe997ca98a7c203424443a3b9b6098fbf061584eed12668be29bb7491fedb3debc8970c577c14ff9ecb8e2ad6b9e36447b35925b761267e7858b78a89b9f8e248b138700763a729213a32dae8bdc25243d94aa3d717be39737a3053ad2eb4a0c07953444a1206355f46207774634c35deb3b484ec1a4ccc0b532b620593ccfaf6ea298fe0cb62b4e92d80cd248fd9c18d518c29cb6af367d7094e93d9e9ab5c2aa95a12ceb885927cb05739b060843e8b47a454d42ad8a06211ac37fc830edfe811d434b38b7602af5a05a6e2dc4c85c6622b9df9bda2363e8b2aa0fdaa4eb32d2f70dcf08106ac9601ada331a6a7337df98cc342a52a998f8f9bf372531f10fd292c22f3dcf85551cc6a66531c699a1f37d64eb9c7788e912c5e7b3949d291a557bad3199db335cc7f8aecbb97fe00d80a12273dbab8b70c2c6159e8b8f7ffffffd273bd5534e0306078e0a4472f5282b71abdd2a6b1c74dccdc34f28053c024011994323d24784518e9edb57f09602cc1a1c06d88b7b171bb3f852401eb41089c547bdb5195a0c7e73a8c47d650fd0941a7ecc6e351e5dd4499baa9a81b4a28757b2408bbdf1267629778fc977224362326bf6820628b47f6a070152be1b9b41b20ce4d26064720585746a87bfb24b744612af89fe691777451d804355d5b103838e2381aadf191e70bf6a0fabe9cc84e029582c9683384afd49e08ed99dee0a3dabf879c2938b4c2fc4213e337ac56563d0a579c153f3821691d4b21f2ae3e1343604ce8d61b4b02438e6e3bbc766671250a6cd626ffb9c333d2e52414fad4bcdf36a0e84463618875600ad3bc5859e2e29bef9b8b0c3400490fab3deef256c4fb5d608c5cba570cd2f2b8e1517928e22bd508c43cffb630e080fa0cfb1d5fcb8d2fea44419a15b96f99aadb6212bf80f50b05650b8d82109973fd4e39f8272a7bdac7afa01338201ee45d80c0da849cf0ab77b5ea93b327dbebbc46aa795a966a4737dc84afc126aa54f501462e86c06f4b3052bad341174380d689475ee1790ff162239b427567ddf7ebac9c62034d2b8285fbe07be4e04c57e8462361d04e075be4e3dce985ff8c2c252685f8afe95f3d8b4961faf8c621c31fbd2a8af095ce9fc49a3ec84cf998a7b81069b03c1eef1f14a676a34039bcefeaa6d64d168b7282bc00676765788d5891f4617f22dbcb81d4f2fd7be7b42ae3b9818505d577e7f0dcd89f669d2c15d70e292c13b525d81beee6b6870c3c8a72f7d1e3b64472bbf9087f411d9b18f80cd42872f2caeaa3fc4ec777135752418b136892f4b2603a463bedfbf13dba2ca1bcaf41e74e807877eedf15551164b041e4dc9d3022e99c2e2fac9d15906ac6a7d63bfb57d8cfee8df66a00abce56e1424ecbda3b4a9dc5f381bb7ba38b57268750a0808d39c5cbf5cea7bc55ec1e8328206028c16abf2c3eeae79359777c53718d0c6ce3c9f1b093a3db834cfeb1e146e140465345d6f0a75de4a1a8a374c2467a641f5583907c5f1639eb16cc8156f4b7e1484be957cbe1b1fcb26d443bf759b738a86ccfdff4a6076cd5056f52126b3935cf2107be04033696ef408fcbebd73a10bf8f5d728d2729fd41bcb1bf1ec315216c8c5f9dfbf366f12945f648f901d968f6ee231b98bab2ccb31303c02cf32e065dd73cd81e2b0e99e5f64b2de44eeb477a3b370b9c7aa81ef780aa9f48dadd32cefab2070df2b52a6ac7077338e7269ce5608d1d109d66e307a2c82b411c1089a3afd99a56aab8f301cfc0e541afa853769154efa1d9901fae7b1b5a54e865de2eefc5a0b26dde5eacbc51d43920a9c0f212c27e16be26cccb2477b31aa5756054c985d84200f710cca0b091849890c4e87428217e2cbc211e1bd701cf9381de83b17b617daa7941a054534c9915d951dc9278974d9092e09fdb9978bad73ad989e3565b05fc7f3791be2d7e0b67fb904d9890e71152c168c58eb54a66d7d37fd2a9aa4ebd109adc946a7eb337e3a7afb50c7a959e55bb1933188c9019bee743102a845d3503f95b53248c480fc81b6afc21a5cc3fc81f19a2d438b152b648239460c420f5cb198582be439865acfb4e7e4ce5f4e12e1b267d293609a93a0c79949315e5195f511bc231ec9735cc5c94c473467cf6c341718392a9cd7a4dcff06369dbcc5f54be4345d70563aec33a4aec74bdd64fd86d902752e9dc65fd07c77b508309336cca5574542e234346dba7ddfa2e4a8c12806418b378a5b40dc19fa910c69a8850854007677f01d299a2c916be0cc554c3386febf013a10120ed0bbe636a6b6adeb40c30540ce7426078d7117354fc0e5974ee40345cc8f70970b4ba1e40a18b288bac7e920f0c3e1ec91ccabc01762f6e0d4c49d8a5760cee1c501b85ec6e3ca5c1911fa26b9ffb52f3b66417e889616b99e89be2ef781f49d8dafa599433f369c561d55494577468d8b5b0f3fdc0135cbd43ca79063d9a3e15f23ca1677eaf94fbcf3a81ea62fc8bca1422274644ec77368ef3e05cfa311ac3a8c1a8c132c3701f797c1f0d51ec72ce7a8fab44b9ff2e4e714b52caba8d198a42bd255be3723439faad37f050c06c9fcff2bd6d9393d61ba3efcafee71645159b8c1faad79d02a4d453b98d09c46288dcfafdf82c79b6404be1b9d45d5f7f56f39d50deb58647d5faee01ae3a6dcd4465bfd908e0cbbfa73ae5725503f70f022868950ce5c0f6cd9c10bf6019e9162447b58ab2c27f0eda060efc3c894ddf731d6964d1dac70c0085e397683757abcab5c9d55d2747c58817ec259eead68c112135707ee419ae042ad0a2947e84b4ae748b1f85a585b4d18bef8a9efa2e48e7aa5f5b42bbd1ae3851ad482c3d2042eecbffb63705d36aae2ee7c7110421e4cedb3ea6857b47e5d289b280286bc34c85bfc9677501fae389c14eb4d15f08359562da54cb3a8518b3d1308eeb2f678967098ea21a3d128e5bb623e3409a8acce6346208a386f3e4f2ddd4dc6234b373d9da0fd39ca0badf742767fc8708569352eb46d5ca588037fa8522e61c83209ac943685b262d8ef3d7fd4dd7dd14377494c0b542e23c4c95151c8e1395984ad2b6df2397e098f8415be65088651426abb5cd587c253a13054ee16e8dfd0f23f0a889db7529269e807cec75f7386a5844b789183341c705fcd2b96cf80ce14a4f6422948a6c8d3d8e9d455e2d6b8b87f4696993cbc010ce10614f1dff96dc18f865b26660d27229defa822953bf392c3d920a50eb2473aa94fbced152660d57159b33f2272fe6e7e1ce6e6ba1f948b59c277f185d9a686ac0445e15e20b46c8e0ea4656d715df96425b7d4b36cb856e7c7ba3aaf620c9d10d5d96370e463d2555e0085ba94d8ffd2973e6be31d7934e771b9b82d0066011da58f147744e747a240de1978a8eca86cfa845d8eca0aa9cabdc8668c43f9862c7ee85353d289d81d744877e22d67613673905e78cfaacde5f6e43ffcd6e7d9b9d15aea0dd922977ae87b0cb51a89ef15350309b43eb5c8e79e446d9ba2bb06d74fa6aed2431a5379da9776221130c87ac36b72bc1fc03f14c78cdb8a16f2d840b2bad04bf4655a2ab3c1ef4458e401fa817704b5a88e4bb8b15cf16383b9a7e2a64de19928b16e5f7f25be0ad126c3833ace7f36f3c3d9a6836d1a4710b4995ec0c9f10001f7dfc6410b29e9d031f1d3b4b34e9b4dc3a8fb08b49a29892e68dce9309c67874ecc75d477b59e2fbf4347f3c445e49126822f4301eaee1259475cfb22566e69d9ae0d436e402f8d100439a9ca6a518d457a91087e83663c413e339a0d8d4c31c083303b46b2982015227bd7e126976d7b26a670ba78f21a8c95b05450ee149c0ae1fb7397d179c6e295d0fc57dab28e5e9bdc99acd8596a928d6ebd97316b8c60cf657bc4ca1ffe8b9a445724842cb38681acc5d5eba455d5fa19cc8c5cac15a46d6a72c9b64983a686edff27b3669d46c005879949b1980a1456e8a85fe4969acd56415f144405ed99afb16d9d652fce35b9c800b8e217517690bed18e00051868dfe8acb5b10ff49d733316bcc7b8ba77265cda37e5faed1307f8a69338090f532f463f1a9740bbcc58851bc5c85b1a129596898667e55a6882f4d0d97c456697dbe282345dec80d76443e1ec7602f523607534f429d603bc087f9b189b15e9c389456ddc04b425a553fb7ec0fa0488b85afa75f624a4cd25f8454b620b0b4fd004a6f6750dcb0a6f3ceeb033fb9dd0f253a53bc4e1dfc7f03b5000cf1fa9c5f0ecbab3257146030f77f30b160b76262b8d3de2510e0984b8192caa7856a69b93f5f53db8190bb70c7daa2b052c56d38a644eb2c69d316d505848d9258c8934b1b870844e543b771f4969e25c8e9a5f825b9aaeeac6ff1cc4e956504fd07f834800413e22da22dfdc4a0c218dadd0442d305cb436dca3d835402e0362b12d02e52ae84c2e80c9fcd7a47efd6c4bc654c8148c47a2ae50f89e729676b4ee79c96991cb4484679eb8eda3517407dd402f0d1b48fcc9551275df982e34e1ee7dd2bb646b9f2ed45bc7e770cbce36566eced4dc3ddf8665232d029e9487d64848c10e8cd2b01415d3e80519cc9b2ff3218d6f239691e4800", 0x1000}}, 0x1006)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

01:54:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002", 0x29}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:21 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x199}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:21 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async, rerun: 32)
r2 = dup(r0) (rerun: 32)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async, rerun: 32)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18500, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:21 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

[  738.444346][T23794] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  738.458226][T23798] loop3: detected capacity change from 0 to 96
01:54:21 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002", 0x29}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  738.521444][T23798] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (24 blocks)
01:54:21 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001080)={0x4f, {"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", 0x1000}}, 0x1006)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

01:54:21 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x240}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:21 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:21 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

[  738.590254][T23808] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  738.681905][T23813] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  738.705016][T23816] loop3: detected capacity change from 0 to 96
[  738.733920][T23816] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (24 blocks)
[  738.770956][ T3687] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  738.786392][T19045] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  738.799317][T19045] Buffer I/O error on dev loop3, logical block 1, async page read
[  739.010798][ T3687] usb 1-1: Using ep0 maxpacket: 16
[  739.130983][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  739.141992][ T3687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  739.154833][ T3687] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  739.163966][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.176050][ T3687] usb 1-1: config 0 descriptor??
[  740.120988][ T3687] usbhid 1-1:0.0: can't add hid device: -71
[  740.127044][ T3687] usbhid: probe of 1-1:0.0 failed with error -71
[  740.138877][ T3687] usb 1-1: USB disconnect, device number 105
01:54:23 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, 'j'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:23 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7) (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18500, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async, rerun: 64)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async, rerun: 64)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:23 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:23 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x244}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f0000013c00))

01:54:23 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000800), 0x6, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x2, 0x5, 0x0, 0x0, 0xffffffffffffffff})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

01:54:23 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  740.585285][T23823] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  740.586099][T23824] loop3: detected capacity change from 0 to 96
[  740.642241][T23824] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (24 blocks)
01:54:23 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)="abc3a2c11fd5dbd63a03113f0577dc020236e6fedeabf44641d56ab5b51559a1c5a077c254d9d6f3a79884522e9d0c505b733b4e5c262dd4847e177cdafd854b64e754853bbc5760244502bda2c0a01eab76f7da6dc5c42aa3b35426596f6fec89e4fe481314c0218a01d2cb479758e47f256009e159e2c71452265f9eddb6ebea281b742eae7fdb6470552ed20e7843da4394e64a845dcb99f6912ebdcd4a70", 0xa0}, {&(0x7f00000000c0)="89cda74ca2be2d5dfb70f42fcb4c541039d645e84efb3d2d18ea8431934b103920d8e6b69b46c75ddd6c45614b", 0x2d}, {&(0x7f0000000380)="8d68c74bb4fd83dc00ec2ba970792ed522c2283f34d7ccadf658e7f9f4ea7b5fc8d74a1bd692354faf85cd43905280fc6b527e914ac05b787d59cfbc60d1d29b8b063f94c104eeed2a31ead198af39bc35cd199bec987b0b5519acfe1286015e2191f19d79cf6e7e80a811ffc8ec63be4e30ce1b0a4aa70bb6293428f8e89f9e486060fe7e77d21787202c5b85a90a525a6b716b939e431160409476c778b53d503c2f696d9d53ab12d6d1c7a1fd581f2e971bc8fff7f5", 0xb7}, {&(0x7f00000004c0)="e817388a9df9f479466b08d8c7b2411533ecf84bc4ab3dd9a296a2a269ef69b81ad0e9d9036119063460dfda31e5d0c8d556b39ee74a4f81dc8dd79789aa1a1c6abd4b8c5a72f4c1891a423f12e0f5baa9734188576c91d225acd24926b919b01d0c31c3022ae8b79ac5b787c232f8fb7dd5edff17b11bec9e3c8ac3b626e18a15b69191e6d39f622d6c0d0236f85826ed28888ceed5", 0x96}, {&(0x7f0000000580)}, {&(0x7f0000000680)}, {0x0}, {&(0x7f0000000880)="a73a14e4676eb52151d8f0d473824d36bde2aa0b42989b658b2bbf69a34d188f9d9718cbb9d90c3887987bb04a5db426e6288a40021e359810b13f35cd395982dbc5c4b2f71ca83119b8e6fbb807370891d542aaba04bdd1cb7cde2ab5620999200c9e06685800fb5f4fdfeb8beb7e543a47bfc87995f983359d19c01d8f25380dba7e7aa2070a41ce2143bef458cf676f0e33dfda6fd954f51c7d7c0bb8ed36a508b82ea83ab48cace92311ba1e21e69ac34cd8e9caf19cf294ec8e97d5c2c6656fe221c63945", 0xc7}, {&(0x7f0000000980)="040f20706f30a5d78e6725302e00b548d189b060413952a9e0c86618f9e0ab1029bee47af9bc0a103f59b68b313990536e527f3c43b693430fd489a24216d0ca1e7f8f201826ba26beb633541d5f30d7ab77abbef21d71b16c6fa6702cb082a6eae7ec3afc67adfefc7b713b3747", 0x6e}, {&(0x7f0000000a00)="18bad5cce593648fe110e06e25171ebd67bd72d08d7519538285f54b6be847b01384fe789ba42a1e6f29eb14c8b111ea7a729d7052d76771745c4e472a3471813a03e59850e7ea0104d50a4cddea1ef62452497f094fc38433", 0x59}], 0xa, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000050}}], 0x1, 0x4000040)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)

01:54:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000013c00))

01:54:23 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:23 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f0000000580)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @remote, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000013c00))

[  740.842374][T23840] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  740.880933][T20117] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  741.130968][T20117] usb 1-1: Using ep0 maxpacket: 16
[  741.250905][T20117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  741.275491][T20117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  741.301081][T20117] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  741.310303][T20117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.326049][T20117] usb 1-1: config 0 descriptor??
[  742.270908][T20117] usbhid 1-1:0.0: can't add hid device: -71
[  742.276950][T20117] usbhid: probe of 1-1:0.0 failed with error -71
[  742.288127][T20117] usb 1-1: USB disconnect, device number 106
01:54:25 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:25 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x338}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000013c00))

01:54:25 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:25 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f0000000580)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @remote, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:25 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)="abc3a2c11fd5dbd63a03113f0577dc020236e6fedeabf44641d56ab5b51559a1c5a077c254d9d6f3a79884522e9d0c505b733b4e5c262dd4847e177cdafd854b64e754853bbc5760244502bda2c0a01eab76f7da6dc5c42aa3b35426596f6fec89e4fe481314c0218a01d2cb479758e47f256009e159e2c71452265f9eddb6ebea281b742eae7fdb6470552ed20e7843da4394e64a845dcb99f6912ebdcd4a70", 0xa0}, {&(0x7f00000000c0)="89cda74ca2be2d5dfb70f42fcb4c541039d645e84efb3d2d18ea8431934b103920d8e6b69b46c75ddd6c45614b", 0x2d}, {&(0x7f0000000380)="8d68c74bb4fd83dc00ec2ba970792ed522c2283f34d7ccadf658e7f9f4ea7b5fc8d74a1bd692354faf85cd43905280fc6b527e914ac05b787d59cfbc60d1d29b8b063f94c104eeed2a31ead198af39bc35cd199bec987b0b5519acfe1286015e2191f19d79cf6e7e80a811ffc8ec63be4e30ce1b0a4aa70bb6293428f8e89f9e486060fe7e77d21787202c5b85a90a525a6b716b939e431160409476c778b53d503c2f696d9d53ab12d6d1c7a1fd581f2e971bc8fff7f5", 0xb7}, {&(0x7f00000004c0)="e817388a9df9f479466b08d8c7b2411533ecf84bc4ab3dd9a296a2a269ef69b81ad0e9d9036119063460dfda31e5d0c8d556b39ee74a4f81dc8dd79789aa1a1c6abd4b8c5a72f4c1891a423f12e0f5baa9734188576c91d225acd24926b919b01d0c31c3022ae8b79ac5b787c232f8fb7dd5edff17b11bec9e3c8ac3b626e18a15b69191e6d39f622d6c0d0236f85826ed28888ceed5", 0x96}, {&(0x7f0000000580)}, {&(0x7f0000000680)}, {0x0}, {&(0x7f0000000880)="a73a14e4676eb52151d8f0d473824d36bde2aa0b42989b658b2bbf69a34d188f9d9718cbb9d90c3887987bb04a5db426e6288a40021e359810b13f35cd395982dbc5c4b2f71ca83119b8e6fbb807370891d542aaba04bdd1cb7cde2ab5620999200c9e06685800fb5f4fdfeb8beb7e543a47bfc87995f983359d19c01d8f25380dba7e7aa2070a41ce2143bef458cf676f0e33dfda6fd954f51c7d7c0bb8ed36a508b82ea83ab48cace92311ba1e21e69ac34cd8e9caf19cf294ec8e97d5c2c6656fe221c63945", 0xc7}, {&(0x7f0000000980)="040f20706f30a5d78e6725302e00b548d189b060413952a9e0c86618f9e0ab1029bee47af9bc0a103f59b68b313990536e527f3c43b693430fd489a24216d0ca1e7f8f201826ba26beb633541d5f30d7ab77abbef21d71b16c6fa6702cb082a6eae7ec3afc67adfefc7b713b3747", 0x6e}, {&(0x7f0000000a00)="18bad5cce593648fe110e06e25171ebd67bd72d08d7519538285f54b6be847b01384fe789ba42a1e6f29eb14c8b111ea7a729d7052d76771745c4e472a3471813a03e59850e7ea0104d50a4cddea1ef62452497f094fc38433", 0x59}], 0xa, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000050}}], 0x1, 0x4000040)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)

01:54:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:54:25 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  742.745789][T23856] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:26 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:26 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='0', 0x1) (async, rerun: 64)
r2 = dup(r0) (rerun: 64)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid() (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async, rerun: 64)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f0000000580)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @remote, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async, rerun: 64)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (rerun: 64)
sendfile(r3, r5, 0x0, 0x80000028)

[  742.846855][T23865] loop3: detected capacity change from 0 to 512
[  742.874947][T23868] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:26 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x488}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:26 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  742.963418][T23865] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  742.991244][T23865] EXT4-fs (loop3): get root inode failed
[  743.000154][T23865] EXT4-fs (loop3): mount failed
[  743.090910][T20115] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  743.117308][T23877] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  743.354163][T20115] usb 1-1: Using ep0 maxpacket: 16
[  743.477510][T20115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.488600][T20115] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  743.501717][T20115] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  743.510937][T20115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.520413][T20115] usb 1-1: config 0 descriptor??
[  744.460963][T20115] usbhid 1-1:0.0: can't add hid device: -71
[  744.467495][T20115] usbhid: probe of 1-1:0.0 failed with error -71
[  744.475748][T20115] usb 1-1: USB disconnect, device number 107
01:54:28 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/337], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}], 0x0, &(0x7f0000013c00))

01:54:28 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:28 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:28 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)="abc3a2c11fd5dbd63a03113f0577dc020236e6fedeabf44641d56ab5b51559a1c5a077c254d9d6f3a79884522e9d0c505b733b4e5c262dd4847e177cdafd854b64e754853bbc5760244502bda2c0a01eab76f7da6dc5c42aa3b35426596f6fec89e4fe481314c0218a01d2cb479758e47f256009e159e2c71452265f9eddb6ebea281b742eae7fdb6470552ed20e7843da4394e64a845dcb99f6912ebdcd4a70", 0xa0}, {&(0x7f00000000c0)="89cda74ca2be2d5dfb70f42fcb4c541039d645e84efb3d2d18ea8431934b103920d8e6b69b46c75ddd6c45614b", 0x2d}, {&(0x7f0000000380)="8d68c74bb4fd83dc00ec2ba970792ed522c2283f34d7ccadf658e7f9f4ea7b5fc8d74a1bd692354faf85cd43905280fc6b527e914ac05b787d59cfbc60d1d29b8b063f94c104eeed2a31ead198af39bc35cd199bec987b0b5519acfe1286015e2191f19d79cf6e7e80a811ffc8ec63be4e30ce1b0a4aa70bb6293428f8e89f9e486060fe7e77d21787202c5b85a90a525a6b716b939e431160409476c778b53d503c2f696d9d53ab12d6d1c7a1fd581f2e971bc8fff7f5", 0xb7}, {&(0x7f00000004c0)="e817388a9df9f479466b08d8c7b2411533ecf84bc4ab3dd9a296a2a269ef69b81ad0e9d9036119063460dfda31e5d0c8d556b39ee74a4f81dc8dd79789aa1a1c6abd4b8c5a72f4c1891a423f12e0f5baa9734188576c91d225acd24926b919b01d0c31c3022ae8b79ac5b787c232f8fb7dd5edff17b11bec9e3c8ac3b626e18a15b69191e6d39f622d6c0d0236f85826ed28888ceed5", 0x96}, {&(0x7f0000000580)}, {&(0x7f0000000680)}, {0x0}, {&(0x7f0000000880)="a73a14e4676eb52151d8f0d473824d36bde2aa0b42989b658b2bbf69a34d188f9d9718cbb9d90c3887987bb04a5db426e6288a40021e359810b13f35cd395982dbc5c4b2f71ca83119b8e6fbb807370891d542aaba04bdd1cb7cde2ab5620999200c9e06685800fb5f4fdfeb8beb7e543a47bfc87995f983359d19c01d8f25380dba7e7aa2070a41ce2143bef458cf676f0e33dfda6fd954f51c7d7c0bb8ed36a508b82ea83ab48cace92311ba1e21e69ac34cd8e9caf19cf294ec8e97d5c2c6656fe221c63945", 0xc7}, {&(0x7f0000000980)="040f20706f30a5d78e6725302e00b548d189b060413952a9e0c86618f9e0ab1029bee47af9bc0a103f59b68b313990536e527f3c43b693430fd489a24216d0ca1e7f8f201826ba26beb633541d5f30d7ab77abbef21d71b16c6fa6702cb082a6eae7ec3afc67adfefc7b713b3747", 0x6e}, {&(0x7f0000000a00)="18bad5cce593648fe110e06e25171ebd67bd72d08d7519538285f54b6be847b01384fe789ba42a1e6f29eb14c8b111ea7a729d7052d76771745c4e472a3471813a03e59850e7ea0104d50a4cddea1ef62452497f094fc38433", 0x59}], 0xa, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000050}}], 0x1, 0x4000040)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)

01:54:28 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:28 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  744.938462][T23888] loop3: detected capacity change from 0 to 512
[  744.949992][T23886] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  744.962084][T23888] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
01:54:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}], 0x0, &(0x7f0000013c00))

[  745.047622][T23888] EXT4-fs (loop3): group descriptors corrupted!
[  745.086214][T23886] device team0 left promiscuous mode
01:54:28 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6cc}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:28 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/337], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

[  745.140544][T23897] loop3: detected capacity change from 0 to 512
[  745.200850][T23886] device team_slave_0 left promiscuous mode
[  745.208682][T23886] device team_slave_1 left promiscuous mode
[  745.221719][T23897] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  745.245330][T23886] bridge0: port 3(team0) entered disabled state
01:54:28 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  745.274869][T23897] EXT4-fs (loop3): group descriptors corrupted!
[  745.287568][T23886] 8021q: adding VLAN 0 to HW filter on device team0
[  745.311041][T20115] usb 1-1: new high-speed USB device number 108 using dummy_hcd
01:54:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}], 0x0, &(0x7f0000013c00))

01:54:28 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/337], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:28 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x777}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  745.394508][T23886] bond0: (slave team0): Enslaving as an active interface with an up link
01:54:28 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3bb2feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

[  745.488844][T23914] loop3: detected capacity change from 0 to 512
01:54:28 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

[  745.541538][T23914] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  745.561868][T23914] EXT4-fs (loop3): group descriptors corrupted!
[  745.570830][T20115] usb 1-1: Using ep0 maxpacket: 16
[  745.671603][T23921] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  745.690978][T20115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  745.754635][T20115] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  745.794714][T20115] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
01:54:29 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)="abc3a2c11fd5dbd63a03113f0577dc020236e6fedeabf44641d56ab5b51559a1c5a077c254d9d6f3a79884522e9d0c505b733b4e5c262dd4847e177cdafd854b64e754853bbc5760244502bda2c0a01eab76f7da6dc5c42aa3b35426596f6fec89e4fe481314c0218a01d2cb479758e47f256009e159e2c71452265f9eddb6ebea281b742eae7fdb6470552ed20e7843da4394e64a845dcb99f6912ebdcd4a70", 0xa0}, {&(0x7f00000000c0)="89cda74ca2be2d5dfb70f42fcb4c541039d645e84efb3d2d18ea8431934b103920d8e6b69b46c75ddd6c45614b", 0x2d}, {&(0x7f0000000380)="8d68c74bb4fd83dc00ec2ba970792ed522c2283f34d7ccadf658e7f9f4ea7b5fc8d74a1bd692354faf85cd43905280fc6b527e914ac05b787d59cfbc60d1d29b8b063f94c104eeed2a31ead198af39bc35cd199bec987b0b5519acfe1286015e2191f19d79cf6e7e80a811ffc8ec63be4e30ce1b0a4aa70bb6293428f8e89f9e486060fe7e77d21787202c5b85a90a525a6b716b939e431160409476c778b53d503c2f696d9d53ab12d6d1c7a1fd581f2e971bc8fff7f5", 0xb7}, {&(0x7f00000004c0)="e817388a9df9f479466b08d8c7b2411533ecf84bc4ab3dd9a296a2a269ef69b81ad0e9d9036119063460dfda31e5d0c8d556b39ee74a4f81dc8dd79789aa1a1c6abd4b8c5a72f4c1891a423f12e0f5baa9734188576c91d225acd24926b919b01d0c31c3022ae8b79ac5b787c232f8fb7dd5edff17b11bec9e3c8ac3b626e18a15b69191e6d39f622d6c0d0236f85826ed28888ceed5", 0x96}, {&(0x7f0000000580)}, {&(0x7f0000000680)}, {0x0}, {&(0x7f0000000880)="a73a14e4676eb52151d8f0d473824d36bde2aa0b42989b658b2bbf69a34d188f9d9718cbb9d90c3887987bb04a5db426e6288a40021e359810b13f35cd395982dbc5c4b2f71ca83119b8e6fbb807370891d542aaba04bdd1cb7cde2ab5620999200c9e06685800fb5f4fdfeb8beb7e543a47bfc87995f983359d19c01d8f25380dba7e7aa2070a41ce2143bef458cf676f0e33dfda6fd954f51c7d7c0bb8ed36a508b82ea83ab48cace92311ba1e21e69ac34cd8e9caf19cf294ec8e97d5c2c6656fe221c63945", 0xc7}, {&(0x7f0000000980)="040f20706f30a5d78e6725302e00b548d189b060413952a9e0c86618f9e0ab1029bee47af9bc0a103f59b68b313990536e527f3c43b693430fd489a24216d0ca1e7f8f201826ba26beb633541d5f30d7ab77abbef21d71b16c6fa6702cb082a6eae7ec3afc67adfefc7b713b3747", 0x6e}, {&(0x7f0000000a00)="18bad5cce593648fe110e06e25171ebd67bd72d08d7519538285f54b6be847b01384fe789ba42a1e6f29eb14c8b111ea7a729d7052d76771745c4e472a3471813a03e59850e7ea0104d50a4cddea1ef62452497f094fc38433", 0x59}], 0xa, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000050}}], 0x1, 0x4000040)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000)

[  745.837531][T20115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.869243][T20115] usb 1-1: config 0 descriptor??
[  746.442675][ T1232] ieee802154 phy0 wpan0: encryption failed: -22
[  746.449014][ T1232] ieee802154 phy1 wpan1: encryption failed: -22
[  746.820947][T20115] usbhid 1-1:0.0: can't add hid device: -71
[  746.826931][T20115] usbhid: probe of 1-1:0.0 failed with error -71
[  746.838634][T20115] usb 1-1: USB disconnect, device number 108
01:54:30 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000013c00))

01:54:30 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7d0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:30 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)

01:54:30 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0) (async)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3bb2feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:30 executing program 2:
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004db00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x4, "c839f426157b4a"})
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffc}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect$hid(0x0, 0xfffffffffffffe8c, 0x0, 0x0)

01:54:30 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  747.291585][T23935] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  747.307972][T23933] loop3: detected capacity change from 0 to 512
[  747.331222][T23933] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
01:54:30 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

01:54:30 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3bb2feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3bb2feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"], 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

[  747.349171][T23933] EXT4-fs (loop3): group descriptors corrupted!
01:54:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000013c00))

[  747.391296][T23946] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:30 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:30 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

[  747.519684][T23955] loop3: detected capacity change from 0 to 512
[  747.520124][T23956] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  747.568563][T23955] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  747.579519][T23955] EXT4-fs (loop3): group descriptors corrupted!
[  747.681084][T20118] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  747.931036][T20118] usb 1-1: Using ep0 maxpacket: 16
[  748.050939][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  748.065560][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  748.078615][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  748.091013][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.101213][T20118] usb 1-1: config 0 descriptor??
[  749.040895][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  749.047001][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  749.057420][T20118] usb 1-1: USB disconnect, device number 109
01:54:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

01:54:32 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000013c00))

01:54:32 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:32 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:32 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

01:54:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x19}})

[  749.513375][T23976] loop3: detected capacity change from 0 to 512
[  749.514798][T23978] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

01:54:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
ioctl$TIOCSTI(r0, 0x5437, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$TCSETS(r1, 0x5402, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)

[  749.576939][T23976] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  749.612116][T23976] EXT4-fs (loop3): group descriptors corrupted!
01:54:32 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  749.639918][T23985] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

01:54:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400), 0x0, 0x800}], 0x0, &(0x7f0000013c00))

01:54:32 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

[  749.807265][T23995] loop3: detected capacity change from 0 to 512
[  749.821578][T23999] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  749.826430][ T2970] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  749.839242][ T3653] Bluetooth: hci6: sending frame failed (-49)
[  749.840318][   T47] Bluetooth: hci6: Opcode 0x1003 failed: -49
01:54:33 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3400}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:33 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

[  749.853183][ T2970] Buffer I/O error on dev loop3, logical block 0, async page read
[  749.922926][ T2970]  loop3: unable to read partition table
[  749.929928][T23995] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  749.931114][ T3687] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  749.940210][T23995] EXT4-fs (loop3): group descriptors corrupted!
[  749.959866][T24006] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  750.230851][ T3687] usb 1-1: Using ep0 maxpacket: 16
[  750.360995][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  750.372292][ T3687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  750.385504][ T3687] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  750.394967][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.405121][ T3687] usb 1-1: config 0 descriptor??
[  750.873179][ T3687] HID 045e:07da: Invalid code 65791 type 1
[  750.880178][ T3687] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0019/input/input32
[  750.964049][ T3687] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  751.280182][ T3687] usb 1-1: USB disconnect, device number 110
01:54:34 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:34 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3803}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:34 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:34 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000040)=ANY=[])
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

01:54:34 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0)

01:54:34 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400), 0x0, 0x800}], 0x0, &(0x7f0000013c00))

01:54:35 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES8=r2], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1a, 0xd2b1, 0x8, 0x8, 0x9, 0x1ff, 0x5, 0x6}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES8=r4], 0xfffffd9d)
sendfile(r3, r4, 0x0, 0x80000028)

[  751.814429][T24014] loop3: detected capacity change from 0 to 512
[  751.815720][T24015] loop2: detected capacity change from 0 to 512
[  751.822477][T24013] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:35 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:35 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0)

[  751.866383][T24014] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  751.877776][T24015] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  751.887966][T24014] EXT4-fs (loop3): group descriptors corrupted!
01:54:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400), 0x0, 0x800}], 0x0, &(0x7f0000013c00))

[  751.936812][T24015] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
01:54:35 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0)

01:54:35 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  751.968026][T24032] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  751.983732][T24034] loop3: detected capacity change from 0 to 512
[  751.991564][T24034] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  751.991594][T24034] EXT4-fs (loop3): group descriptors corrupted!
[  752.063741][T24037] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  752.111084][T20117] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  752.157511][ T3634] EXT4-fs (loop2): unmounting filesystem.
[  752.354339][T20117] usb 1-1: Using ep0 maxpacket: 16
[  752.474649][T20117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  752.485889][T20117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  752.498924][T20117] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  752.508072][T20117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.519412][T20117] usb 1-1: config 0 descriptor??
[  753.003033][T20117] HID 045e:07da: Invalid code 65791 type 1
[  753.010405][T20117] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input33
[  753.095042][T20117] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  753.405658][T20117] usb 1-1: USB disconnect, device number 111
01:54:37 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0)

01:54:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}], 0x0, &(0x7f0000013c00))

01:54:37 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES8=r2], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1a, 0xd2b1, 0x8, 0x8, 0x9, 0x1ff, 0x5, 0x6}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES8=r4], 0xfffffd9d) (async)
sendfile(r3, r4, 0x0, 0x80000028)

01:54:37 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x10141)

01:54:37 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4402}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:37 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:37 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:37 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES8=r2], 0xb7) (async)
getpid() (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async, rerun: 64)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1a, 0xd2b1, 0x8, 0x8, 0x9, 0x1ff, 0x5, 0x6}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async, rerun: 32)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES8=r4], 0xfffffd9d) (async)
sendfile(r3, r4, 0x0, 0x80000028)

01:54:37 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001280), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0)

[  753.934672][T24051] loop3: detected capacity change from 0 to 512
[  753.948300][T24053] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  753.957533][T24051] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  753.968248][T24051] EXT4-fs (loop3): group descriptors corrupted!
01:54:37 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0)

01:54:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000012c0)={0x0})
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x2484, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xf4}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3ff)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48004800})
ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380))

01:54:37 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7707}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}], 0x0, &(0x7f0000013c00))

01:54:37 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:37 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78fb}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  754.100644][T24070] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  754.138619][T24076] loop3: detected capacity change from 0 to 512
01:54:38 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80fb}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:38 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0)

[  754.856771][T20117] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  754.896231][T24076] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  754.966588][T24076] EXT4-fs (loop3): group descriptors corrupted!
[  754.977569][T24084] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  755.160830][T20117] usb 1-1: Using ep0 maxpacket: 16
[  755.280857][T20117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  755.291800][T20117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  755.304649][T20117] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  755.313723][T20117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.324180][T20117] usb 1-1: config 0 descriptor??
[  755.802792][T20117] HID 045e:07da: Invalid code 65791 type 1
[  755.809709][T20117] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001B/input/input34
[  755.893337][T20117] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  756.205146][ T3687] usb 1-1: USB disconnect, device number 112
01:54:39 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:39 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1}, 0x0)

01:54:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000012c0)={0x0})
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x2484, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xf4}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3ff)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48004800})
ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380))

01:54:39 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:54:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}], 0x0, &(0x7f0000013c00))

01:54:39 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8804}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  756.741299][T24096] loop3: detected capacity change from 0 to 512
[  756.741338][T24095] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  756.760974][T24096] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  756.780368][T24096] EXT4-fs (loop3): group descriptors corrupted!
[  756.841817][T24101] hub 9-0:1.0: USB hub found
[  756.850867][T24101] hub 9-0:1.0: 8 ports detected
01:54:40 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001900)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000019c0), r0)

01:54:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}], 0x0, &(0x7f0000013c00))

01:54:40 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1}, 0x0)

01:54:40 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9901}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:40 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xcc06}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  757.661688][T24107] loop3: detected capacity change from 0 to 512
[  757.675225][T24111] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:40 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000080)=@raw=[@ldst={0x0, 0x0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xce, &(0x7f0000000140)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  757.711084][T20115] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  757.717743][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  757.747425][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  757.791704][T19045]  loop3: unable to read partition table
[  757.819797][T24107] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  757.855668][T24107] EXT4-fs (loop3): group descriptors corrupted!
[  757.950944][T20115] usb 1-1: Using ep0 maxpacket: 16
[  758.071071][T20115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  758.082149][T20115] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  758.095147][T20115] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  758.104257][T20115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.115254][T20115] usb 1-1: config 0 descriptor??
[  759.050883][T20115] usbhid 1-1:0.0: can't add hid device: -71
[  759.057525][T20115] usbhid: probe of 1-1:0.0 failed with error -71
[  759.065370][T20115] usb 1-1: USB disconnect, device number 113
01:54:42 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:42 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}, {0x0, 0x0, 0x9c2}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000006940)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x0)

01:54:42 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1}, 0x0)

01:54:42 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd007}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}], 0x0, &(0x7f0000013c00))

[  759.523895][T24121] loop2: detected capacity change from 0 to 9
[  759.534777][T24128] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  759.542731][T24121] Dev loop2: unable to read RDB block 9
[  759.543768][T24129] loop3: detected capacity change from 0 to 512
[  759.548735][T24121]  loop2: unable to read partition table
01:54:42 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef4100000", 0x17}], 0x1}, 0x0)

01:54:42 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  759.569868][T24121] loop2: partition table beyond EOD, truncated
01:54:42 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd00"/151], 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

[  759.632131][T24129] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  759.648289][T24129] EXT4-fs (loop3): group descriptors corrupted!
01:54:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}], 0x0, &(0x7f0000013c00))

01:54:42 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf401}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}, {0x0, 0x0, 0x9c2}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000006940)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x0)

[  759.729393][T24137] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  759.771763][T24141] loop3: detected capacity change from 0 to 512
[  759.796944][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  759.841813][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  759.878525][T19045]  loop3: unable to read partition table
[  759.880819][ T3656] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  759.919445][T24141] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  759.934057][T24146] loop2: detected capacity change from 0 to 9
[  759.949398][T24141] EXT4-fs (loop3): group descriptors corrupted!
[  759.954368][T19252] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  760.020663][T19252] Buffer I/O error on dev loop2, logical block 0, async page read
[  760.096498][T19252] Dev loop2: unable to read RDB block 9
[  760.136429][T19252]  loop2: unable to read partition table
[  760.147647][T19252] loop2: partition table beyond EOD, truncated
[  760.180928][ T3656] usb 1-1: Using ep0 maxpacket: 16
[  760.320945][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  760.331994][ T3656] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  760.344881][ T3656] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  760.354111][ T3656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.367907][ T3656] usb 1-1: config 0 descriptor??
[  761.316299][ T3656] usbhid 1-1:0.0: can't add hid device: -71
[  761.322538][ T3656] usbhid: probe of 1-1:0.0 failed with error -71
[  761.339036][ T3656] usb 1-1: USB disconnect, device number 114
01:54:44 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:44 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef4100000", 0x17}], 0x1}, 0x0)

01:54:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}], 0x0, &(0x7f0000013c00))

01:54:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf6f8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:44 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async, rerun: 32)
r2 = dup(r0) (rerun: 32)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd00"/151], 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (rerun: 64)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:44 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'})

01:54:44 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x20, 0x7f, 0x202}, 0x48)

01:54:45 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef4100000", 0x17}], 0x1}, 0x0)

[  761.787987][T24160] loop3: detected capacity change from 0 to 512
[  761.798094][T24155] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:45 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf700}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  761.854814][T24160] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  761.872977][T24160] EXT4-fs (loop3): group descriptors corrupted!
01:54:45 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000080)=@raw=[@ldst], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000400), 0x1, 0x2)
syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000001900)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)

01:54:45 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf8f6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:45 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0)

[  761.942463][T24169] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  762.098875][T24176] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  762.110807][ T3688] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  762.360818][ T3688] usb 1-1: Using ep0 maxpacket: 16
[  762.480975][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  762.492287][ T3688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  762.505457][ T3688] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  762.514578][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.526566][ T3688] usb 1-1: config 0 descriptor??
[  763.471011][ T3688] usbhid 1-1:0.0: can't add hid device: -71
[  763.477059][ T3688] usbhid: probe of 1-1:0.0 failed with error -71
[  763.498218][ T3688] usb 1-1: USB disconnect, device number 115
01:54:47 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfb78}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}], 0x0, &(0x7f0000013c00))

01:54:47 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xce, &(0x7f0000000140)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:54:47 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4c2ae5465a7500"/340], 0xb7) (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000008680060047000000000000008500b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd00"/151], 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:47 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0)

01:54:47 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:47 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000012c0)={0x0})
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x2484, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xf4}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3ff)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48004800})
ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380))

01:54:47 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfb80}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:47 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

[  763.953926][T24186] loop3: detected capacity change from 0 to 512
[  763.969096][T24187] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  763.988328][T24186] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
01:54:47 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0)

[  764.032553][T24186] EXT4-fs (loop3): group descriptors corrupted!
01:54:47 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x13266}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  764.174076][T24202] hub 9-0:1.0: USB hub found
[  764.180907][T24202] hub 9-0:1.0: 8 ports detected
01:54:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}], 0x0, &(0x7f0000013c00))

[  764.812098][ T3687] usb 1-1: new high-speed USB device number 116 using dummy_hcd
01:54:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000012c0)={0x0})
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x2484, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xf4}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3ff)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48004800})
ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380))

[  764.856075][T24209] loop3: detected capacity change from 0 to 512
[  764.867512][T24209] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  764.893145][T24209] EXT4-fs (loop3): group descriptors corrupted!
01:54:48 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}], 0x0, &(0x7f0000013c00))

01:54:48 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba", 0x29}], 0x1}, 0x0)

[  764.920064][T24207] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:48 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba", 0x29}], 0x1}, 0x0)

[  764.993083][T24215] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  765.040677][T24220] loop3: detected capacity change from 0 to 512
[  765.048908][T24221] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  765.102088][T24222] hub 9-0:1.0: USB hub found
[  765.107177][T24222] hub 9-0:1.0: 8 ports detected
[  765.238422][T24220] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  765.248940][T24220] EXT4-fs (loop3): group descriptors corrupted!
[  765.620984][ T3687] usb 1-1: Using ep0 maxpacket: 16
[  765.761064][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  765.772951][ T3687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  765.786068][ T3687] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  765.795199][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.807328][ T3687] usb 1-1: config 0 descriptor??
[  766.293281][ T3687] HID 045e:07da: Invalid code 65791 type 1
[  766.300258][ T3687] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001C/input/input35
[  766.383454][ T3687] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  766.697270][ T3688] usb 1-1: USB disconnect, device number 116
01:54:50 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:50 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}], 0x0, &(0x7f0000013c00))

01:54:50 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (rerun: 32)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:50 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba", 0x29}], 0x1}, 0x0)

01:54:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000012c0)={0x0})
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
fcntl$getown(0xffffffffffffffff, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x2484, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xf4}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3ff)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48004800})
ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380))

01:54:50 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x50000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  767.229826][T24231] loop3: detected capacity change from 0 to 512
[  767.233063][T24233] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  767.269211][T24231] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
01:54:50 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:54:50 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20c49a}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  767.331697][T24231] EXT4-fs (loop3): group descriptors corrupted!
[  767.351570][T24241] hub 9-0:1.0: USB hub found
[  767.357101][T24241] hub 9-0:1.0: 8 ports detected
[  767.709772][T24246] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:50 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba800000", 0x2c}], 0x1}, 0x0)

01:54:51 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf70000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:51 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba800000", 0x2c}], 0x1}, 0x0)

[  768.111665][T24254] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  768.131619][  T141] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  768.390804][  T141] usb 1-1: Using ep0 maxpacket: 16
[  768.540903][  T141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  768.551898][  T141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  768.567919][  T141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  768.576983][  T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.587199][  T141] usb 1-1: config 0 descriptor??
[  769.083038][  T141] HID 045e:07da: Invalid code 65791 type 1
[  769.089830][  T141] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001D/input/input36
[  769.173623][  T141] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  769.485281][ T3687] usb 1-1: USB disconnect, device number 117
01:54:53 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000006940)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x787)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x9)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)

01:54:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}], 0x0, &(0x7f0000013c00))

01:54:53 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:53 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba800000", 0x2c}], 0x1}, 0x0)

01:54:53 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:53 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba80000012", 0x2d}], 0x1}, 0x0)

[  770.016009][T24260] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  770.025072][T24263] loop3: detected capacity change from 0 to 512
[  770.047582][T24263] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  770.058358][T24263] EXT4-fs (loop3): group descriptors corrupted!
01:54:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  770.079775][T24266] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:54:53 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

01:54:53 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba80000012", 0x2d}], 0x1}, 0x0)

[  770.185621][T24274] loop3: detected capacity change from 0 to 512
[  770.200314][T24274] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  770.216401][T24274] EXT4-fs (loop3): get root inode failed
01:54:53 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async, rerun: 64)
getpid() (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async, rerun: 64)
sendfile(r3, r5, 0x0, 0x80000028) (rerun: 64)

01:54:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  770.235658][T24274] EXT4-fs (loop3): mount failed
01:54:53 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1})

01:54:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

[  770.292446][T24281] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:53 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00'})

01:54:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  770.391000][T20118] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  770.414367][T24296] loop3: detected capacity change from 0 to 512
[  770.440626][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  770.450948][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  770.459143][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  770.469268][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  770.477665][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  770.487325][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  770.495925][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  770.511569][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  770.530576][T19045]  loop3: unable to read partition table
[  770.577755][T24296] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  770.591126][T24296] EXT4-fs (loop3): get root inode failed
[  770.597060][T24296] EXT4-fs (loop3): mount failed
[  770.640799][T20118] usb 1-1: Using ep0 maxpacket: 16
[  770.770897][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  770.785735][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  770.798593][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  770.807764][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.817677][T20118] usb 1-1: config 0 descriptor??
[  771.303271][T20118] HID 045e:07da: Invalid code 65791 type 1
[  771.310283][T20118] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001E/input/input37
[  771.393569][T20118] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  771.707795][T20118] usb 1-1: USB disconnect, device number 118
01:54:55 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:55 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010008188040f80ec59acbc0413a1f848100000005e000000000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba80000012", 0x2d}], 0x1}, 0x0)

01:54:55 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:55 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), 0x8, 0x10, 0x0}, 0x80)

01:54:55 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:54:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:54:55 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  772.228090][T24305] loop3: detected capacity change from 0 to 512
[  772.244962][T24307] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
01:54:55 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  772.318790][T24305] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:54:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x2484, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380))
sched_setscheduler(r0, 0x2, &(0x7f00000000c0))

01:54:55 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000890)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r4, 0x0, 0x80000028)

[  772.377447][T24305] EXT4-fs (loop3): get root inode failed
[  772.384502][T24305] EXT4-fs (loop3): mount failed
01:54:55 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:55 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)

[  772.518970][T24328] hub 9-0:1.0: USB hub found
[  772.550920][ T3684] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  772.567542][T24328] hub 9-0:1.0: 8 ports detected
[  772.810789][ T3684] usb 1-1: Using ep0 maxpacket: 16
[  772.931074][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  772.950767][ T3684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  772.970803][ T3684] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  772.979863][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.995909][ T3684] usb 1-1: config 0 descriptor??
[  773.940943][ T3684] usbhid 1-1:0.0: can't add hid device: -71
[  773.947195][ T3684] usbhid: probe of 1-1:0.0 failed with error -71
[  773.955587][ T3684] usb 1-1: USB disconnect, device number 119
01:54:57 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:57 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:54:57 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:57 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000890)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r4, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000890) (async)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r4, 0x0, 0x80000028) (async)

01:54:57 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff)

01:54:57 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000040))

01:54:57 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000130001000000000000000000ac1414000000000000000000000000000000000000000000000000000000000100000000000000000a000000", @ANYRES32], 0xb8}}, 0x0)

[  774.426344][T24339] loop3: detected capacity change from 0 to 512
01:54:57 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xffff, 0x1}]})

[  774.492091][T24339] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  774.530838][T24339] EXT4-fs (loop3): get root inode failed
01:54:57 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  774.554994][T24339] EXT4-fs (loop3): mount failed
01:54:57 executing program 5:
fanotify_init(0x1a, 0x0)

01:54:57 executing program 2:
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}}}]}}, 0x0)
syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0)

01:54:57 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

[  774.674314][T24359] loop3: detected capacity change from 0 to 512
[  774.687949][T24359] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  774.702944][T24359] EXT4-fs (loop3): get root inode failed
[  774.709237][T24359] EXT4-fs (loop3): mount failed
[  774.710827][T20115] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  774.778301][T19045] I/O error, dev loop3, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  774.960852][ T3684] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  774.970818][T20115] usb 1-1: Using ep0 maxpacket: 16
[  775.091056][T20115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.102187][T20115] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  775.115316][T20115] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  775.124410][T20115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.134044][T20115] usb 1-1: config 0 descriptor??
[  775.200894][ T3684] usb 3-1: Using ep0 maxpacket: 16
[  775.325800][ T3684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.339449][ T3684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  775.349324][ T3684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  775.359150][ T3684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  775.369142][ T3684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  775.530948][ T3684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  775.540385][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.552580][ T3684] usb 3-1: Product: syz
[  775.556833][ T3684] usb 3-1: Manufacturer: syz
[  775.563516][ T3684] usb 3-1: SerialNumber: syz
[  775.851202][ T3684] cdc_ncm 3-1:1.0: bind() failure
[  775.858822][ T3684] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  775.865952][ T3684] cdc_ncm 3-1:1.1: bind() failure
[  775.885747][ T3684] usb 3-1: USB disconnect, device number 6
[  776.050868][T20115] usbhid 1-1:0.0: can't add hid device: -71
[  776.058251][T20115] usbhid: probe of 1-1:0.0 failed with error -71
[  776.073146][T20115] usb 1-1: USB disconnect, device number 120
01:54:59 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000890)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r4, 0x0, 0x80000028)

01:54:59 executing program 5:
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x1c}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)

01:54:59 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:54:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:59 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:54:59 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000005a80)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}})

[  776.528717][T24371] loop3: detected capacity change from 0 to 512
[  776.552480][T24371] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  776.571864][T24371] EXT4-fs (loop3): get root inode failed
01:54:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  776.577686][T24371] EXT4-fs (loop3): mount failed
01:54:59 executing program 2:
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)

01:54:59 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x11}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x6f0342, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:54:59 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:54:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:54:59 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x1260, &(0x7f0000000040)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

[  776.708387][T24385] loop3: detected capacity change from 0 to 512
01:55:00 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)='\r ')

[  776.762282][T24385] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  776.830901][  T141] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  776.840661][T24385] EXT4-fs (loop3): get root inode failed
[  776.850181][T24385] EXT4-fs (loop3): mount failed
[  776.902896][   T14] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  776.923659][T19045] I/O error, dev loop3, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  777.070824][  T141] usb 6-1: Using ep0 maxpacket: 16
[  777.162747][   T14] usb 1-1: Using ep0 maxpacket: 16
[  777.211324][  T141] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  777.222550][  T141] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  777.232346][  T141] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  777.242466][  T141] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  777.252286][  T141] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  777.300983][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  777.312378][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  777.325465][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  777.334979][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.346729][   T14] usb 1-1: config 0 descriptor??
[  777.440998][  T141] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  777.450259][  T141] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.458442][  T141] usb 6-1: Product: syz
[  777.463205][  T141] usb 6-1: Manufacturer: syz
[  777.467917][  T141] usb 6-1: SerialNumber: syz
[  777.750892][  T141] cdc_ncm 6-1:1.0: bind() failure
[  777.757945][  T141] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  777.765064][  T141] cdc_ncm 6-1:1.1: bind() failure
[  777.777239][  T141] usb 6-1: USB disconnect, device number 40
01:55:01 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close_range(r0, r0, 0x0)
dup3(r1, r0, 0x0)

[  778.290939][   T14] usbhid 1-1:0.0: can't add hid device: -71
[  778.297039][   T14] usbhid: probe of 1-1:0.0 failed with error -71
[  778.313504][   T14] usb 1-1: USB disconnect, device number 121
01:55:01 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x11}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x6f0342, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x11}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x6f0342, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:55:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x38030000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:01 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/85, 0x55}, {&(0x7f0000001c80)=""/188, 0xbc}], 0x2}, 0x0)
sendmsg(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)='\n', 0x1}], 0x1}, 0x0)

01:55:01 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:01 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x1, 0x1, 0x2, "e5"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:01 executing program 5:
process_vm_writev(0xffffffffffffffff, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/219, 0xdb}, {0x0}], 0x2, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/139, 0x8b}, {&(0x7f0000001900)=""/38, 0x26}, {0x0}], 0x3, 0x0)

01:55:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  778.758023][T24403] loop3: detected capacity change from 0 to 512
01:55:02 executing program 5:
pselect6(0x40, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)={0xfffffffffffffffc}, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0x39]}, 0x8})

[  778.835101][T24403] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  778.861599][T24403] EXT4-fs (loop3): get root inode failed
01:55:02 executing program 5:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x7c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x64, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "18991b8e935aa14b993940f47174cb2f4f068679a236b4251f33ceb666c40a2c0868b01664ea14b1790fcb07753bf2b2688582ff93496dcdbc472cf3c97ae74ddffe4c984391db77b170d2d061ed0ce39db19bc35aa8a02b8e"}]}]}, 0x7c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000000000000f6, &(0x7f0000000a80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeed}, 0x17)

[  778.880996][T24403] EXT4-fs (loop3): mount failed
01:55:02 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000000)=@raw=[@map_fd, @map_idx], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:02 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter, 0x48)

01:55:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:02 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x11}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x6f0342, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x11}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x6f0342, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:55:02 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xf, &(0x7f0000000180)=@framed={{}, [@map_idx_val, @map_fd, @initr0, @kfunc, @jmp, @alu, @ldst, @map_idx]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:02 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:02 executing program 5:
pselect6(0x40, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)={0xfffffffffffffffc}, &(0x7f0000000b80)={0x0, 0x989680}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0x39]}, 0x8})

[  779.060942][T20115] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  779.198594][T24432] loop3: detected capacity change from 0 to 512
[  779.214781][T24432] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  779.234367][T24432] EXT4-fs (loop3): get root inode failed
[  779.240284][T24432] EXT4-fs (loop3): mount failed
[  779.300846][T20115] usb 1-1: Using ep0 maxpacket: 16
[  779.421024][T20115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  779.432501][T20115] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  779.445569][T20115] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  779.455185][T20115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.465039][T20115] usb 1-1: config 0 descriptor??
[  780.400855][T20115] usbhid 1-1:0.0: can't add hid device: -71
[  780.407010][T20115] usbhid: probe of 1-1:0.0 failed with error -71
[  780.418740][T20115] usb 1-1: USB disconnect, device number 122
01:55:04 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x1, 0x1, 0x2, "e5"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:04 executing program 5:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10)

01:55:04 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x44020000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409", 0x1d, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:04 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x163141)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRES8=r1], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @local, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x125103, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x2000000080000028)

01:55:04 executing program 2:
socketpair(0x23, 0x0, 0x0, &(0x7f00000000c0))

01:55:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x66320100}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:04 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0)

[  780.894618][T24445] loop3: detected capacity change from 0 to 512
[  780.942476][T24445] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  780.976604][T24445] EXT4-fs (loop3): get root inode failed
[  780.987111][T24445] EXT4-fs (loop3): mount failed
01:55:04 executing program 2:
pselect6(0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x3}, &(0x7f0000000b40), &(0x7f0000000b80)={0x0, 0x989680}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0x39]}, 0x8})

01:55:04 executing program 5:
clock_getres(0x6, &(0x7f0000001040))

01:55:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409", 0x1d, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

[  781.189362][T24462] loop3: detected capacity change from 0 to 512
[  781.209668][T24462] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  781.210914][T20118] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  781.235915][T24462] EXT4-fs (loop3): get root inode failed
[  781.247447][T24462] EXT4-fs (loop3): mount failed
[  781.302760][T19045] I/O error, dev loop3, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  781.490792][T20118] usb 1-1: Using ep0 maxpacket: 16
[  781.611027][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  781.622207][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  781.635572][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  781.645310][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.655392][T20118] usb 1-1: config 0 descriptor??
[  782.590932][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  782.596988][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  782.605649][T20118] usb 1-1: USB disconnect, device number 123
01:55:06 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x1, 0x1, 0x2, "e5"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:06 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:06 executing program 2:
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)

01:55:06 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x2021, 0x0, 0x0)

01:55:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409", 0x1d, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:06 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x163141)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRES8=r1], 0xb7)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @local, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x125103, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x2000000080000028)

01:55:06 executing program 5:
r0 = epoll_create(0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

01:55:06 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x21966131})
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x100000001, 0x2196612d})
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@delnexthop={0x58, 0x69, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{0x8}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
r4 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0xfdb7}}, 0x0)

01:55:06 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x163141) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRES8=r1], 0xb7) (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @local, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x125103, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x2000000080000028)

[  783.064281][T24475] loop3: detected capacity change from 0 to 512
01:55:06 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x77070000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:06 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:55:06 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000740)=""/217, 0xd9, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x6000001c})
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x10, 0x0, 0x0, 0x1473bf3)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004c80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000140)=""/63, 0x3f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

[  783.182302][T24475] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  783.244922][T24475] EXT4-fs (loop3): get root inode failed
[  783.255854][T24475] EXT4-fs (loop3): mount failed
[  783.350888][T20118] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  783.600818][T20118] usb 1-1: Using ep0 maxpacket: 16
[  783.721751][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  783.732915][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  783.745864][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  783.755016][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.764986][T20118] usb 1-1: config 0 descriptor??
[  784.700858][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  784.706883][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  784.715344][T20118] usb 1-1: USB disconnect, device number 124
01:55:08 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:08 executing program 5:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x0)

01:55:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78fb0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:08 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:55:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5d", 0x2b, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:08 executing program 2:
pipe2(&(0x7f0000001a00)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x60000006})

01:55:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x801001ee}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  785.168600][T24508] loop3: detected capacity change from 0 to 512
01:55:08 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380), 0x45)

01:55:08 executing program 2:
io_setup(0x40, &(0x7f0000000040)=<r0=>0x0)
io_getevents(r0, 0x0, 0x0, 0x0, 0x0)
io_submit(r0, 0x3, &(0x7f00000008c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0, 0x0])

[  785.234164][T24508] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  785.253978][T24508] EXT4-fs (loop3): get root inode failed
[  785.260478][T24508] EXT4-fs (loop3): mount failed
01:55:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x801001f7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5d", 0x2b, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:08 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0)
getpeername$tipc(r0, 0x0, 0x0)

[  785.378194][T24526] loop3: detected capacity change from 0 to 512
[  785.398168][T24526] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  785.429357][T24526] EXT4-fs (loop3): get root inode failed
[  785.435325][T24526] EXT4-fs (loop3): mount failed
[  785.540999][T20118] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  785.790829][T20118] usb 1-1: Using ep0 maxpacket: 16
[  785.930905][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.941999][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  785.954990][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  785.964218][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.973630][T20118] usb 1-1: config 0 descriptor??
[  786.910923][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  786.917051][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  786.925005][T20118] usb 1-1: USB disconnect, device number 125
01:55:10 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:10 executing program 2:
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x0, 0x0)

01:55:10 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80fb0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:10 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85195be9dc4f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd55a473791d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:55:10 executing program 5:
pselect6(0x0, 0x0, 0x0, &(0x7f0000000b40), &(0x7f0000000b80)={0x0, 0x989680}, 0x0)

01:55:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5d", 0x2b, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:10 executing program 2:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)

[  787.385453][T24538] loop3: detected capacity change from 0 to 512
01:55:10 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x88040000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:10 executing program 5:
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000000640)='./binderfs2\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0))

01:55:10 executing program 2:
socketpair(0x1d, 0x0, 0x0, &(0x7f0000000140))

[  787.452811][T24538] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  787.490403][T24538] EXT4-fs (loop3): get root inode failed
01:55:10 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:55:10 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xa, &(0x7f0000000000)=@raw=[@map_fd, @map_idx, @cb_func, @cb_func, @btf_id], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  787.519359][T24538] EXT4-fs (loop3): mount failed
[  787.663184][T24552] can: request_module (can-proto-0) failed.
[  787.670840][T20118] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  787.930892][T20118] usb 1-1: Using ep0 maxpacket: 16
[  788.050913][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  788.061957][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  788.075604][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  788.084897][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.093989][T20118] usb 1-1: config 0 descriptor??
[  789.030950][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  789.036968][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  789.045775][T20118] usb 1-1: USB disconnect, device number 126
01:55:12 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:12 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x99010000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:12 executing program 5:
socketpair(0x10, 0x0, 0x6, &(0x7f0000000040))

01:55:12 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f84", 0x32, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:12 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:55:12 executing program 2:
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0)

01:55:12 executing program 2:
io_setup(0x40, &(0x7f0000000040))

01:55:12 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9ac42000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  789.503149][T24570] loop3: detected capacity change from 0 to 512
01:55:12 executing program 5:
timer_create(0x0, 0x0, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}}, &(0x7f0000000400))

01:55:12 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xcc060000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  789.606144][T24570] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:12 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 64)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (rerun: 64)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7) (async)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:55:12 executing program 2:
setitimer(0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140))

[  789.659217][T24570] EXT4-fs (loop3): get root inode failed
[  789.668847][T24570] EXT4-fs (loop3): mount failed
[  789.950842][T20118] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  790.190824][T20118] usb 1-1: Using ep0 maxpacket: 16
[  790.311051][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  790.322100][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  790.334976][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  790.344151][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.353885][T20118] usb 1-1: config 0 descriptor??
[  791.290983][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  791.297055][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  791.304825][T20118] usb 1-1: USB disconnect, device number 127
01:55:14 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x6a, 0x82, 0xd8, 0x40, 0x17cc, 0x1010, 0xdcd5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x4c, 0x40, 0x93, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x400}}]}}]}}]}}, 0x0)

01:55:14 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd0070000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f84", 0x32, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:14 executing program 2:
uname(&(0x7f0000000240)=""/194)

01:55:14 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:14 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x20, 0x88, 0x80, 0x6, 0x46}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xcee8}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd14400"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r4, 0x0, 0x80000028)

[  791.755554][T24598] loop3: detected capacity change from 0 to 512
01:55:15 executing program 2:
pipe2(&(0x7f0000001a00)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x80087601, 0x0)

01:55:15 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  791.799549][T24598] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:15 executing program 2:
socket(0x10, 0x0, 0x8)

01:55:15 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xee011080}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  791.871360][T24598] EXT4-fs (loop3): get root inode failed
[  791.877157][T24598] EXT4-fs (loop3): mount failed
01:55:15 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:15 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f84", 0x32, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

[  792.030824][T20118] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  792.043997][T24620] loop3: detected capacity change from 0 to 512
[  792.065882][T24620] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  792.078694][ T3684] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  792.095524][T24620] EXT4-fs (loop3): get root inode failed
[  792.101915][T24620] EXT4-fs (loop3): mount failed
[  792.331017][ T3684] usb 1-1: Using ep0 maxpacket: 16
[  792.410985][T20118] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  792.460898][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  792.472041][ T3684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  792.485155][ T3684] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  792.494452][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.508496][ T3684] usb 1-1: config 0 descriptor??
[  792.591043][T20118] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=dc.d5
[  792.600263][T20118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.608411][T20118] usb 6-1: Product: syz
[  792.612768][T20118] usb 6-1: Manufacturer: syz
[  792.617483][T20118] usb 6-1: SerialNumber: syz
[  792.623330][T20118] usb 6-1: config 0 descriptor??
[  792.880898][T20118] snd-usb-audio: probe of 6-1:0.0 failed with error -71
[  792.889326][T20118] usb 6-1: USB disconnect, device number 41
[  792.993611][ T3684] microsoft 0003:045E:07DA.001F: No inputs registered, leaving
[  793.002237][ T3684] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  793.014074][ T3684] microsoft 0003:045E:07DA.001F: no inputs found
[  793.020415][ T3684] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway
01:55:16 executing program 5:
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0)
ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f0000001440))

01:55:16 executing program 2:
pselect6(0x40, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)={0xfffffffffffffffc}, 0x0, 0x0)

01:55:16 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x20, 0x88, 0x80, 0x6, 0x46}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xcee8}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd14400"}, 0xd8)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r4, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x20, 0x88, 0x80, 0x6, 0x46}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xcee8}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd14400"}, 0xd8) (async)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r4, 0x0, 0x80000028) (async)

01:55:16 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7011080}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  793.404687][ T3684] usb 1-1: USB disconnect, device number 2
01:55:17 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:17 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d271849", 0x36, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:17 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf8f60000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:17 executing program 2:
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(&(0x7f0000000600), &(0x7f0000000640)='./binderfs2\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@stats}]})

01:55:17 executing program 5:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
read$msr(r0, 0x0, 0x0)

01:55:17 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async, rerun: 64)
r2 = dup(r0) (async, rerun: 64)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async, rerun: 64)
getpid() (rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async, rerun: 64)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async, rerun: 64)
write$capi20_data(0xffffffffffffffff, &(0x7f00000001c0)={{0x10, 0x20, 0x88, 0x80, 0x6, 0x46}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xcee8}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd14400"}, 0xd8) (async, rerun: 32)
write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (rerun: 32)
sendfile(r3, r4, 0x0, 0x80000028)

01:55:17 executing program 5:
io_setup(0x40, &(0x7f0000000040))
clock_getres(0x0, &(0x7f0000001040))

01:55:17 executing program 2:
process_vm_readv(0x0, &(0x7f0000001880)=[{&(0x7f0000000080)=""/193, 0xc1}], 0x1, &(0x7f0000001f00)=[{&(0x7f0000001940)=""/214, 0xd6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

[  793.933577][T24642] loop3: detected capacity change from 0 to 512
01:55:17 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:17 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4005, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf4180723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cd526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdf444"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

[  794.006096][T24642] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  794.032375][T24642] EXT4-fs (loop3): get root inode failed
[  794.038252][T24642] EXT4-fs (loop3): mount failed
01:55:17 executing program 5:
pipe2(&(0x7f0000001a00)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x5450, 0x0)

01:55:17 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  794.260900][ T3687] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  794.540951][ T3687] usb 1-1: Using ep0 maxpacket: 16
[  794.681169][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  794.692262][ T3687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  794.705502][ T3687] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  794.714625][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.726141][ T3687] usb 1-1: config 0 descriptor??
[  795.224042][ T3687] microsoft 0003:045E:07DA.0020: No inputs registered, leaving
[  795.233852][ T3687] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  795.245957][ T3687] microsoft 0003:045E:07DA.0020: no inputs found
[  795.252349][ T3687] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway
[  795.630992][ T3687] usb 1-1: USB disconnect, device number 3
01:55:19 executing program 5:
bpf$BPF_LINK_CREATE(0x1e, &(0x7f0000000040), 0x10)

01:55:19 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d271849", 0x36, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:19 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:19 executing program 2:
io_setup(0x40, &(0x7f0000000040)=<r0=>0x0)
io_getevents(r0, 0x6, 0x0, 0x0, &(0x7f0000000180))

01:55:19 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4005, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf4180723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cd526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdf444"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (async)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4005, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0) (async)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf4180723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cd526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdf444"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028) (async)

01:55:19 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:19 executing program 5:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x989680}, &(0x7f0000000c00)={&(0x7f0000000bc0), 0x8})

01:55:19 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  796.165167][T24668] loop3: detected capacity change from 0 to 512
01:55:19 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), 0x4)

01:55:19 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4005, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf4180723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cd526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdf444"}, 0xd8) (async)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

[  796.238127][T24668] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:19 executing program 5:
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='_:\x00')

01:55:19 executing program 2:
socketpair(0x11, 0x2, 0x10001, &(0x7f00000000c0))

[  796.291382][T24668] EXT4-fs (loop3): get root inode failed
[  796.309627][T24668] EXT4-fs (loop3): mount failed
[  796.461247][   T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  796.700811][   T14] usb 1-1: Using ep0 maxpacket: 16
[  796.821035][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  796.832121][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  796.845052][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  796.854159][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.863933][   T14] usb 1-1: config 0 descriptor??
[  797.333173][   T14] microsoft 0003:045E:07DA.0021: No inputs registered, leaving
[  797.342079][   T14] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  797.353780][   T14] microsoft 0003:045E:07DA.0021: no inputs found
[  797.360121][   T14] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway
[  797.734160][T20118] usb 1-1: USB disconnect, device number 4
01:55:21 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:21 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020252a26252e262623217b0a878c2ed32ec036f5266fd73c690279c4ee8a600475b41067ab385dad848bf6ba9b1577332fdf777b5ee4c80cc666d85555b5e739b8c755b2ed4c9c9c2a27e3f2f82f46ec0d88e79dcf208ff92ada65b78b1a2babfde8af0180c4c6961d6a5839ef2eae81829bcdd94765afc0d6bb0e07a883139e984aa3e7326afc3be362bc710c3b85f00900004f490ee39bb3a853b134c1f645b79195bfc67d0d51de996b4a57710f969d901e215730825d088c95a44c1e247c6add0cddc1e5ab973d8fab040bf0e19b2d2ec6f7dd8c7a00f92d224c713933bdeeeaf6c5ce2b735162a94c0d67282850e4372e45ba9b7759e4bc593572605e9dd5d87384b9d048d5e2efc3e22ae9b463d7b63931ced70d44d150ad451165cc5b6d4b7dab58aaa3206dcd50565bff835a4aa624891b9cf50d5a5f4cb6e5465a7500"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d)
sendfile(r3, r5, 0x0, 0x80000028)

01:55:21 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:21 executing program 5:
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2\x00', 0x1ff)
bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8)

01:55:21 executing program 2:
io_setup(0x40, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000140))

01:55:21 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d271849", 0x36, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

[  798.259736][T24695] loop3: detected capacity change from 0 to 512
01:55:21 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
geteuid()

01:55:21 executing program 2:
pipe2(&(0x7f0000001a00)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x5460, 0x0)

01:55:21 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  798.299816][T24695] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  798.361892][T24695] EXT4-fs (loop3): get root inode failed
[  798.394557][T24695] EXT4-fs (loop3): mount failed
01:55:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

01:55:21 executing program 5:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x49fd32626a1331d7, 0x0)

01:55:21 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  798.611052][ T3687] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  798.850786][ T3687] usb 1-1: Using ep0 maxpacket: 16
[  798.971267][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  798.982426][ T3687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  798.995796][ T3687] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  799.005187][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.014938][ T3687] usb 1-1: config 0 descriptor??
[  799.930892][ T3687] usbhid 1-1:0.0: can't add hid device: -71
[  799.937315][ T3687] usbhid: probe of 1-1:0.0 failed with error -71
[  799.945191][ T3687] usb 1-1: USB disconnect, device number 5
01:55:23 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52", 0x38, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:23 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 64)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0) (rerun: 64)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0) (async, rerun: 32)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (rerun: 32)
getpid() (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (rerun: 64)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async, rerun: 64)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:55:23 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:23 executing program 2:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffd28)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180))
setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r2=>0x0})
timer_settime(r1, 0x1, &(0x7f00000003c0)={{}, {0x0, r2+60000000}}, 0x0)

01:55:23 executing program 5:
r0 = getpgrp(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000000)={0x38}, 0x0)

01:55:23 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:23 executing program 5:
r0 = getpgrp(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0)

[  800.416000][T24724] loop3: detected capacity change from 0 to 512
01:55:23 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async, rerun: 32)
write$binfmt_script(r5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async, rerun: 32)
sendfile(r3, r5, 0x0, 0x80000028)

[  800.486529][T24724] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  800.524151][T24724] EXT4-fs (loop3): get root inode failed
01:55:23 executing program 5:
syz_genetlink_get_family_id$wireguard(&(0x7f0000001480), 0xffffffffffffffff)

[  800.546791][T24724] EXT4-fs (loop3): mount failed
01:55:23 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8)
sendfile(r3, r5, 0x0, 0x80000028)

01:55:23 executing program 5:
open_tree(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x81000)

[  800.722006][T20118] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  801.001056][T20118] usb 1-1: Using ep0 maxpacket: 16
[  801.154191][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  801.176844][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  801.218815][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  801.247669][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.276357][T20118] usb 1-1: config 0 descriptor??
[  802.220876][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  802.227021][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  802.238838][T20118] usb 1-1: USB disconnect, device number 6
01:55:25 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:25 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:25 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/timers\x00', 0x0, 0x0)

01:55:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52", 0x38, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:25 executing program 2:
creat(&(0x7f0000000340)='./file0\x00', 0x0)

01:55:25 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0) (async)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
sendfile(r3, r5, 0x0, 0x80000028)

01:55:25 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:25 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:25 executing program 2:
clock_getres(0x0, &(0x7f0000001040))

[  802.693384][T24759] loop3: detected capacity change from 0 to 512
01:55:25 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x24900, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = dup(r0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/340], 0xb7) (async, rerun: 64)
getpid() (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) (async)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc516f39c041244ac}, 0x20000890) (rerun: 32)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18400, 0x0)
write$capi20_data(r4, &(0x7f00000001c0)={{0x10, 0x0, 0x86, 0x80, 0x6, 0x47}, 0x85, "b1aece5331e5542750c9e58d2b85a33436315a23a6288690af3ba0feaf653e80ee1f7ac4e205a1ea85a2e004ae5c2025543145994aef21c88f1ab0e9871a97c15243073a62ece04946d31b840b8e564976cfd804d0f1ccb7f06bdb1fc44fad6dc8052ac15152b80e7415849088e6dfa17d0adbf594e9c234890e6b03ed01c2ee512ffa14dd"}, 0x97) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x0, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) (async)
sendfile(r3, r5, 0x0, 0x80000028)

[  802.750476][T24759] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:26 executing program 5:
r0 = getpgrp(0xffffffffffffffff)
prlimit64(r0, 0x0, &(0x7f0000000000), 0x0)

01:55:26 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  802.801140][T24759] EXT4-fs (loop3): get root inode failed
[  802.806940][T24759] EXT4-fs (loop3): mount failed
[  803.140844][T20118] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  803.390801][T20118] usb 1-1: Using ep0 maxpacket: 16
[  803.510940][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  803.521972][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  803.535406][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  803.544596][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.555110][T20118] usb 1-1: config 0 descriptor??
[  804.490901][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  804.496892][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  804.508617][T20118] usb 1-1: USB disconnect, device number 7
01:55:28 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x9, "f8"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:28 executing program 2:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x707003, 0x0)

01:55:28 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000180)=@framed={{}, [@map_idx_val, @map_fd, @initr0, @kfunc, @jmp, @alu, @ldst]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52", 0x38, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:28 executing program 4:
open_tree(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x81000)

01:55:28 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:28 executing program 4:
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0)

01:55:28 executing program 5:
io_setup(0x40, &(0x7f0000000040))
clock_getres(0x0, 0x0)

01:55:28 executing program 2:
r0 = getpgrp(0xffffffffffffffff)
prlimit64(r0, 0x0, &(0x7f0000000000)={0x3f}, 0x0)

01:55:28 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  804.962736][T24790] loop3: detected capacity change from 0 to 512
01:55:28 executing program 4:
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(&(0x7f0000000600), &(0x7f0000000640)='./binderfs2\x00', 0x0, 0xa0000, &(0x7f00000006c0))

01:55:28 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  805.056589][T24790] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  805.073867][T24790] EXT4-fs (loop3): get root inode failed
[  805.091019][T24790] EXT4-fs (loop3): mount failed
[  805.260903][T20118] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  805.510812][T20118] usb 1-1: Using ep0 maxpacket: 16
[  805.650939][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  805.662015][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  805.675225][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  805.684395][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.698673][T20118] usb 1-1: config 0 descriptor??
[  806.650838][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  806.656814][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  806.668634][T20118] usb 1-1: USB disconnect, device number 8
01:55:30 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x9, "f8"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:30 executing program 2:
pipe(&(0x7f0000000000))
socketpair(0x2a, 0x0, 0x0, &(0x7f00000000c0))

01:55:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:30 executing program 4:
r0 = fsopen(&(0x7f00000046c0)='incremental-fs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff)

01:55:30 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:30 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_fd], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:30 executing program 5:
r0 = getpgrp(0xffffffffffffffff)
prlimit64(r0, 0x0, &(0x7f0000000000), &(0x7f0000000040))

01:55:30 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:30 executing program 2:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)

[  807.126298][T24813] loop3: detected capacity change from 0 to 512
01:55:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x5460, 0x0)

01:55:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000040))

[  807.181341][T24813] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  807.221196][T24813] EXT4-fs (loop3): get root inode failed
[  807.228493][T24813] EXT4-fs (loop3): mount failed
01:55:30 executing program 5:
socketpair(0x2, 0x805, 0x5, &(0x7f00000006c0))

[  807.470815][T20118] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  807.731141][T20118] usb 1-1: Using ep0 maxpacket: 16
[  807.861860][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  807.872996][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  807.887635][ T1232] ieee802154 phy0 wpan0: encryption failed: -22
[  807.894042][ T1232] ieee802154 phy1 wpan1: encryption failed: -22
[  807.902450][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  807.911828][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.922481][T20118] usb 1-1: config 0 descriptor??
[  808.881029][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  808.887197][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  808.895717][T20118] usb 1-1: USB disconnect, device number 9
01:55:32 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x9, "f8"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:32 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='.\x00'}, 0x10)

01:55:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:32 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x400, 0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xe}, 0x48)

01:55:32 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0)

01:55:32 executing program 4:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)="0519e8", 0x3}}, 0x0)

01:55:32 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x10022, 0x0, 0x0)

01:55:32 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3803000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8935, 0x0)

[  809.352331][T24843] loop3: detected capacity change from 0 to 512
[  809.384982][T24843] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0xffffffffffffffff, 0x0)

01:55:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev, {[@lsrr={0x83, 0x3}]}}}}})

[  809.442257][T24843] EXT4-fs (loop3): get root inode failed
[  809.442480][T24850] ieee802154 phy0 wpan0: encryption failed: -22
[  809.448011][T24843] EXT4-fs (loop3): mount failed
[  809.660853][T20118] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  809.900810][T20118] usb 1-1: Using ep0 maxpacket: 16
[  810.021021][T20118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  810.032785][T20118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  810.046361][T20118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  810.055492][T20118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.064930][T20118] usb 1-1: config 0 descriptor??
[  811.011100][T20118] usbhid 1-1:0.0: can't add hid device: -71
[  811.017068][T20118] usbhid: probe of 1-1:0.0 failed with error -71
[  811.025071][T20118] usb 1-1: USB disconnect, device number 10
01:55:34 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:34 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x20, 0x1, 0x1, [r1, r2, r0, r0]}}], 0x20}}], 0x1, 0x0)

01:55:34 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:34 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:34 executing program 2:
socketpair(0x18, 0x0, 0x800, &(0x7f0000000040))

01:55:34 executing program 4:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x800, 0x4)

01:55:34 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x14, 0x4, 0x81, 0x4, 0x1}, 0x48)

01:55:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)

01:55:34 executing program 2:
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x9778307cacbefe95}, 0x20)

01:55:34 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  811.474794][T24869] loop3: detected capacity change from 0 to 512
01:55:34 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4402000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  811.537176][T24869] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:34 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6632010000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  811.589137][T24869] EXT4-fs (loop3): get root inode failed
[  811.595425][T24869] EXT4-fs (loop3): mount failed
[  811.771126][   T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  812.041630][   T14] usb 1-1: Using ep0 maxpacket: 16
[  812.170886][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  812.182001][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  812.194876][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  812.204080][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.214162][   T14] usb 1-1: config 0 descriptor??
[  812.683422][   T14] HID 045e:07da: Invalid code 65791 type 1
[  812.690555][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0022/input/input41
[  812.773035][   T14] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  812.883704][   T14] usb 1-1: USB disconnect, device number 11
01:55:36 executing program 4:
socketpair(0x22, 0x0, 0x25, &(0x7f0000000000))

01:55:36 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48)

01:55:36 executing program 5:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7ff}, 0x20)

01:55:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:36 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:36 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:36 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newnexthop={0x18, 0x68, 0x203, 0x0, 0x0, {0xa}}, 0x18}}, 0x0)

01:55:36 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7707000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  813.407439][T24893] loop3: detected capacity change from 0 to 512
01:55:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0)

01:55:36 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x38}}], 0x2, 0x0)

01:55:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0)

01:55:36 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78fb000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:36 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = getpid()
sendmmsg$unix(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x2, 0x0)

01:55:36 executing program 4:
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)

[  813.506263][T24893] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  813.533368][T24893] EXT4-fs (loop3): get root inode failed
[  813.539609][T24893] EXT4-fs (loop3): mount failed
01:55:36 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)

01:55:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

[  813.668690][T24915] loop3: detected capacity change from 0 to 512
[  813.724500][T24915] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  813.730816][T20117] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  813.763626][T24915] EXT4-fs (loop3): get root inode failed
[  813.769469][T24915] EXT4-fs (loop3): mount failed
[  813.990876][T20117] usb 1-1: Using ep0 maxpacket: 16
[  814.111762][T20117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  814.122712][T20117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  814.135588][T20117] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  814.144640][T20117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.156828][T20117] usb 1-1: config 0 descriptor??
[  814.642407][T20117] HID 045e:07da: Invalid code 65791 type 1
[  814.649265][T20117] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0023/input/input42
[  814.733219][T20117] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  814.845216][   T14] usb 1-1: USB disconnect, device number 12
01:55:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newnexthop={0x1c, 0x68, 0x203, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0)

01:55:38 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x801001ee00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0)

01:55:38 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = getpid()
sendmmsg$unix(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x2, 0x0)

01:55:38 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000007c0)="c9030d")

01:55:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:38 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x400)

01:55:38 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x20, 0x7f, 0x214}, 0x48)

01:55:38 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x801001f700000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4)

[  815.369678][T24926] loop3: detected capacity change from 0 to 512
[  815.397940][T24926] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:38 executing program 2:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x4}, 0x20)

[  815.427688][T24926] EXT4-fs (loop3): get root inode failed
[  815.438604][T24926] EXT4-fs (loop3): mount failed
01:55:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:38 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80fb000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:38 executing program 4:
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100011, r0, 0x0)

01:55:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

[  815.522586][T24942] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  815.562588][T24947] loop3: detected capacity change from 0 to 512
[  815.611558][T24947] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  815.643449][T24947] EXT4-fs (loop3): get root inode failed
[  815.650623][T24947] EXT4-fs (loop3): mount failed
[  815.700929][   T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  815.951102][   T14] usb 1-1: Using ep0 maxpacket: 16
[  816.090920][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  816.101986][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  816.115887][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  816.125074][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.136381][   T14] usb 1-1: config 0 descriptor??
[  816.623058][   T14] HID 045e:07da: Invalid code 65791 type 1
[  816.629922][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0024/input/input43
[  816.712664][   T14] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  816.824255][ T3684] usb 1-1: USB disconnect, device number 13
01:55:40 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, 0x0)

01:55:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local, {[@ra={0x94, 0x4}]}}}}})

01:55:40 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0)

01:55:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:40 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8804000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8919, 0x0)

01:55:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0)

01:55:40 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9901000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  817.358025][T24963] loop3: detected capacity change from 0 to 512
01:55:40 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9ac4200000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  817.420469][T24963] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:40 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xcc06000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  817.484760][T24963] EXT4-fs (loop3): get root inode failed
[  817.517809][T24963] EXT4-fs (loop3): mount failed
[  817.710796][   T14] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  817.970792][   T14] usb 1-1: Using ep0 maxpacket: 16
[  818.090851][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  818.101930][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  818.114942][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  818.125712][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.137873][   T14] usb 1-1: config 0 descriptor??
[  818.633067][   T14] HID 045e:07da: Invalid code 65791 type 1
[  818.640037][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0025/input/input44
[  818.724401][   T14] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  819.036751][T20117] usb 1-1: USB disconnect, device number 14
01:55:42 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, 0x0)

01:55:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newnexthop={0x18, 0x4f, 0x203}, 0x18}}, 0x0)

01:55:42 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd007000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:42 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x400, 0x9, 0x3a00}, 0x48)
mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)

01:55:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

[  819.560928][T24984] loop3: detected capacity change from 0 to 512
[  819.568187][T24985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
01:55:42 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newnexthop={0x2c, 0x68, 0x203, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8}]}]}, 0x2c}}, 0x0)

[  819.606858][T24984] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

[  819.697298][T24984] EXT4-fs (loop3): get root inode failed
[  819.709686][T24984] EXT4-fs (loop3): mount failed
01:55:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:43 executing program 5:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

[  819.853111][T25004] loop3: detected capacity change from 0 to 512
[  819.881088][ T3687] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  819.915826][T25004] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  819.928981][T25004] EXT4-fs (loop3): get root inode failed
[  819.935449][T25004] EXT4-fs (loop3): mount failed
[  820.150867][ T3687] usb 1-1: Using ep0 maxpacket: 16
[  820.270919][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  820.282304][ T3687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  820.295177][ T3687] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  820.304290][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.317563][ T3687] usb 1-1: config 0 descriptor??
[  820.803149][ T3687] HID 045e:07da: Invalid code 65791 type 1
[  820.810045][ T3687] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0026/input/input45
[  820.894512][ T3687] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  821.209723][  T141] usb 1-1: USB disconnect, device number 15
01:55:44 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, 0x0)

01:55:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x80086601, 0x0)

01:55:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:44 executing program 5:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:44 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x400, 0x9, 0x3a00}, 0x48)
mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)

01:55:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409", 0x1d, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:44 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0x4007011, r0, 0x0)

01:55:44 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf8f6000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:44 executing program 5:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

[  821.745960][T25014] loop3: detected capacity change from 0 to 512
01:55:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x5451, 0x0)

01:55:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:45 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  821.821287][T25014] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  821.851820][T25014] EXT4-fs (loop3): get root inode failed
[  821.863682][T25014] EXT4-fs (loop3): mount failed
[  822.061324][  T141] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  822.300781][  T141] usb 1-1: Using ep0 maxpacket: 16
[  822.441026][  T141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  822.452282][  T141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  822.465288][  T141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  822.474460][  T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.488821][  T141] usb 1-1: config 0 descriptor??
[  822.982996][  T141] HID 045e:07da: Invalid code 65791 type 1
[  822.990609][  T141] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0027/input/input46
[  823.072823][  T141] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  823.389792][ T3656] usb 1-1: USB disconnect, device number 16
01:55:47 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000007c0))

01:55:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409", 0x1d, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:47 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xa6a4}, {0x0, 0x5}, {0x0, 0x8, 0x3, 0xfffff000}]})

01:55:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:47 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)

01:55:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:47 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:47 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x29, 0x3, 0x0, 0x0)

01:55:47 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  823.917971][T25038] loop3: detected capacity change from 0 to 512
01:55:47 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:47 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[  823.978663][T25038] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  824.002017][T25038] EXT4-fs (loop3): get root inode failed
[  824.007876][T25038] EXT4-fs (loop3): mount failed
[  824.220836][T20117] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  824.470788][T20117] usb 1-1: Using ep0 maxpacket: 16
[  824.590945][T20117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  824.602169][T20117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  824.618182][T20117] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  824.627252][T20117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.638378][T20117] usb 1-1: config 0 descriptor??
[  825.122727][T20117] HID 045e:07da: Invalid code 65791 type 1
[  825.129591][T20117] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0028/input/input47
[  825.213835][T20117] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  825.528603][T20117] usb 1-1: USB disconnect, device number 17
01:55:49 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000007c0))

01:55:49 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:49 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:49 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8901, 0x0)

01:55:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409", 0x1d, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:49 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a1, 0x0)

01:55:49 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7f, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x48)

[  826.049987][T25063] loop3: detected capacity change from 0 to 512
01:55:49 executing program 2:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000180), 0x0)

01:55:49 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:49 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

[  826.092105][T25063] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  826.113561][T25063] EXT4-fs (loop3): get root inode failed
[  826.119522][T25063] EXT4-fs (loop3): mount failed
01:55:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, &(0x7f0000000400)={'wlan1\x00'})

01:55:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_proto_private(r0, 0x8946, &(0x7f0000000880))

[  826.341108][  T141] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  826.590861][  T141] usb 1-1: Using ep0 maxpacket: 16
[  826.720903][  T141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.732002][  T141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  826.744880][  T141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  826.754024][  T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.765308][  T141] usb 1-1: config 0 descriptor??
[  827.242500][  T141] HID 045e:07da: Invalid code 65791 type 1
[  827.249400][  T141] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0029/input/input48
[  827.339619][  T141] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  827.644030][ T3687] usb 1-1: USB disconnect, device number 18
01:55:51 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000007c0))

01:55:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5d", 0x2b, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:51 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0)

01:55:51 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:51 executing program 2:
getpid()
timer_create(0xef18ceddae49869e, 0x0, &(0x7f0000000080))

01:55:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup2(r0, r0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0)

01:55:51 executing program 4:
io_setup(0x10000, &(0x7f0000000000)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)={&(0x7f00000000c0), 0x8})

01:55:51 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x6bd, 0x0, &(0x7f0000000180))

01:55:51 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:51 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0)

[  828.172706][T25092] loop3: detected capacity change from 0 to 512
01:55:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_proto_private(r0, 0x8907, 0x0)

01:55:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0)

[  828.263167][T25092] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  828.292481][T25092] EXT4-fs (loop3): get root inode failed
[  828.298445][T25092] EXT4-fs (loop3): mount failed
[  828.461110][ T3687] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  828.700779][ T3687] usb 1-1: Using ep0 maxpacket: 16
[  828.820899][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  828.835719][ T3687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  828.848671][ T3687] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  828.857949][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.867173][ T3687] usb 1-1: config 0 descriptor??
[  829.353125][ T3687] HID 045e:07da: Invalid code 65791 type 1
[  829.360013][ T3687] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002A/input/input49
[  829.444833][ T3687] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  829.763187][T20117] usb 1-1: USB disconnect, device number 19
01:55:53 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x2, &(0x7f00000007c0)="c903")

01:55:53 executing program 2:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "ab5a77bf6abe7dec5e1593a344931f565815d3d37d56feec9a43da91b61849798acabb97f0af9e90e3bf260bd0dd9e1bed460ab0528d0de67fd543b638ade762"}, 0x48, 0xfffffffffffffffe)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "ab5a77bf6abe7dec5e1593a344931f565815d3d37d56feec9a43da91b61849798acabb97f0af9e90e3bf260bd0dd9e1bed460ab0528d0de67fd543b638ade762"}, 0x48, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r1)
keyctl$invalidate(0x15, r0)

01:55:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0)

01:55:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5d", 0x2b, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:53 executing program 4:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0)

01:55:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

01:55:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:53 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x14, 0x2, &(0x7f0000000bc0)=@raw=[@initr0], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:55:53 executing program 4:
open$dir(&(0x7f0000000180)='./file2\x00', 0x1c2c3, 0x0)
mount$cgroup2(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f00000000c0), 0x0, 0x0)

[  830.294766][T25118] loop3: detected capacity change from 0 to 512
01:55:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

01:55:53 executing program 4:
open$dir(&(0x7f0000000000)='./file0\x00', 0x60840, 0x3c)
geteuid()
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10, 0x0)

[  830.353299][T25118] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  830.373376][T25118] EXT4-fs (loop3): get root inode failed
[  830.386543][T25118] EXT4-fs (loop3): mount failed
[  830.508743][T25133] overlayfs: missing 'lowerdir'
[  830.601044][  T141] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  830.840864][  T141] usb 1-1: Using ep0 maxpacket: 16
[  830.960978][  T141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  830.972392][  T141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  830.985343][  T141] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  830.994606][  T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  831.006490][  T141] usb 1-1: config 0 descriptor??
[  831.492954][  T141] HID 045e:07da: Invalid code 65791 type 1
[  831.499947][  T141] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002B/input/input50
[  831.584392][  T141] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  831.898134][  T141] usb 1-1: USB disconnect, device number 20
01:55:55 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x2, &(0x7f00000007c0)="c903")

01:55:55 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={[{@size={'size', 0x3d, [0x25]}}]})

01:55:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

01:55:55 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:55 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5d", 0x2b, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:55 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x0, 0x2, &(0x7f00000020c0)=[{0x0, 0x0, 0x1f}, {&(0x7f0000001080)="12ac362b2ada0cb55f6c4ab2d39dc35e756c783f033628855cb2ca1a1e513d1ca10eccb32714f5e12ceac63bb8c4e4b8b14bc2172b036298ba5b04b45027832d26b6d6a0e7e0b5fdbb6c9208b80ceb621b839e7410f9b884b8a9e83417ebbbbcaa86f2216ea8b2d548a7351691660fdb6e96e3a6bdb5b96dd73455be6da74d2de99a8ebe85bdf78d9b98d84c42e20354107e15e7982844f5eff0b6974f3e4056ff6a047ceca7259b9aef64ffce8e96c4a582a014dc9084d048d355927cf84c0458e604230ea1e6880a2588efc3bcd0490f43a6f374ec0ace57246961a9d315be57e736d195e204fbf60c5f55087d252092790bde6c32708d9b14d47e8e775179620330dc12b8ff5046376fc4fa14b260791a807b35c92142cf370cb35e9a1c2fbfbb0a73d21cc55bd9eb3c9848747e3976010b1afbc117b5777ef84c1870a77cf1b4fd79cbf880fdb8a4267a1a2e0c3b093f11562e03265c2d680b8d0095a13be6363c39be8d19a1397524069ffcda88c06a459360117adfe468cb547084e76e76342fe32709f18ddd6c5334775eba395fdfbfbc48843da2096d889aa413629a9e9a46d45aa42e1d2e7c4b38aee74be086598db9a612436538b9a2c971e13ba0acbdc4e444b2c142b81b65fd3309ba9b3a35cd7a483956a3d83cd07932e7ad4a17ebaabd5eecb5ca8a8491c5f51395a45ded63b9f022c8a1799bc270d2a453a332849599262a8520bdb877eb3e488635673a83be2d3dae2b1ad8248d3da8d966bd522ab730679f99cc172f0002b1ef8eb844323da26f66ef95b97438b75934166774c97d5a21f08c2a6cdba82ffcebb130448f66c3fea733d8307f520c8e7a1fe8406b3b313ab986c8771ade2ac3f316a75e753f70e612755403904257dd187b968c1d6ca856f2a7c9aba48319543d98b9394b5be789a1ace9e220a45bfb8ce1f03680a79cfe82f80e9c7641a690767d1d3c0f57cd1328e7c616b163246aa3f566787afb6159e88c0c6dcf332f81bdaa369063819afe2099770ddad3a48136a435c9f453383fc7f13cb189125c353bbec82cd343e6a3e1a4bb401be0043569940f6269506115be6291dd9a90fe6869f926d298722aaafacef3134af3e48b4cdf1c6b5e925f13c6b951a3c7e84a0ef1e9a964469fa33b35f7bd3678d8d318704675ee16c820a76a5dfcf50f7cb5dd79c78f735235b0caaf8ba0ffeb691f80764eb56020a11ec24fee6a48f47966bfeef33968bba005527d89bdd52b787947f3b3d2b1d2485c3541eb60909bd8b7d6168f7da2a7182ebf0b6a26c2f7bcf4c1d12f4db7b21653678659500f5c3bd368369520018daeaac35aaf60192976d647cb5db35a75cee4e6b4615cea1c5160fef2645fac0cdb0cdc38cdf4d8c23fb717ef34de66748a8a8b8bfd05ca4252325ebb9683f4853cd875e1d15fc44b2e26becfda590f012de815c00f210779cac74f16f0ee9c1c0f62a57bf71b33a60b723a0816b6eab7dd25ebecb3ea58107efc9e268715eae6a6cbb5b79ef5211cf9d0f75809d45422a58b5806bf7b4ffb6eec69bdce33d9a806ebe948e3f8be65e1210981ab4b250d785f35ea6c4317eb29b2a6b6dd89391e4ddfccee69c68fd632224025ac46641fec07a4eb49a0ecd52d2a68d5abf804ef75b7c225d7a5d5c85331ebed7e03461f013a1e4b36d7016a26b9e0720173dc1d7515fb9b5f89cf6169c94d881fd58c3dbee9644922277bf85439ca5d73bb2899e6b4f65c0865ec2d742e787a88f17d19b431fe840278985cdb94f5b0a96e29c15b142c3775e0266f9e4dbe40abcd049c223a5a6ef06dd505f1be9d3bec176966ce4110fc8726d26a9e346b457c6968977e684a318865eb66d68c2fe53fa61a6c51db468563c1c42bb40033425c50093e1fe693a7f3507e34782f0bb62136a79809486dfdc1009730ffa455fecc319c29091ca94cdac1924f644a8b02a77ee49838235a04de7f8e0acfb5ff86d249e7cb7d61a5853f0c8d7720411329cf118c04c3273d9ca87f19c5a9469bae4b9a0ecd101c222021ccb4517d31abb27df2557cd0cce9a9ec35c26b8aa62f2e2861947e3c3864e905a87e49c828b841c187912d421066ed07f752f4719c2d7d30258e70f61bf6e2bd9800c5e44b4508f82b989647743c69aac46f55509d6524fd61214015c29a8588843d614206845461ad5ab246e5940acf09974bdc3889faee478d374bb5f57258714223ca9d26d0a5297543a35aa1182660272a1eed7c64c3a51aa5f7dd67438a2e03175d13bccac650d5451695c86406b89bac5a36fee6103037d5801e097c1fc87961f84fba46ec694dac8caf97a1680d679ec19f53a1b99236c1be240f0eee36900d076ddb869bbc308e963319447b6128874718991dfe2334318f1b2dfd17f77b88b1120369e1254214b8fa650618e031967387b257fea2ffcedc05b756ed0420ec1d315c0db7617fe25d0926ceaf957eb16b084d658726a77d35e7fcb08ef3cd7f1ed971d97534140328b941cd88926153f7cf38c30b3f4b9ad066c07240ac2f950e31106697da7f9755105efa0f57e6a62a908fa32aedea199bab2fb7314a01eb85a696fcb617e073ec4111fdd7459eb7524317afc223422a74a2dfa490bfbc03be139d26d2ec6675b92315dc23b09ea2651c536898caedf7807103b8d1dcbe8c6bf871ebfd79970517911a90a2f1331795639537af5401cb15d7e01f0653733d2bf1849247d4fe879d04a973cfb362450e3bb037d6a4fb50752ada0d94fa95a1b653cebb53a6bb3d7afd19eefeae287b2c0711d09a7e4f4c3062463fc7ab2f96e0fe895ad5e23b37f1370a95d67c0ef0a11cb72f579e2cfd44038f66db3d0c9ef27f321d77142a6aa47283a42fa8b977c5b987bd73840225204ad9629a3ce4de85a382b5b661bb1b66ba10aca80218ba3c3e5f38c82c59bbcfbaf963a28da0afcee3d1512bbb1a2c29029936af833e7288b324c6214488d78ee324cf96d70b8302974b10da5ab98a9eb00b8a6800140da124379b88f32d7c3854a99d616111e1a8e970b515f27d33dd157cd2c268289ac5f4f260328ab1e2ba0c037302e515feb5bb343b602597a426b7ef067f2e7d912ba8564737627af664044833a2d3cbc058ca067688acea11e53d8fe1c62fa7f0d7b53adfeb8a7c3c5c847938b7770f20cae64dfd39e82adbfbc703ae4c2f49f13533a043ed0ca4f95b0145f9cc668a165d7da353ec882dc3305d470bc703c454b68c9c3040ab45ba86d2709a9cab306a8ac92369e2b698ba1f8650f243ccd2576637fa8058b52f98211d10fdb0c9ee36ec984b179a470eb7c5f688a8f8213f0cb71c485977d2384f1325b2282a7d035c4cfa8c9afb3648b090cfb1ac61f72b03533a5b574f25f58af05f234b379895223eb18bcf76078a838c964fb8f448073c71388d9aa2ff0b18df0cccad1dc354ad415bf1a87713fd9e24cc0adab9a19d6841cc6af65fa24f0c47055b80c53b323ca4c9ce28349ed834197ae16ce4407530ddac329e4176a46a83e9f661be84bc12e849a13759839093cd76141c2aea8fa484601dfd513bb340b3dce70a02c06c75e3b9c5e817ec9341fe047515ac2fab98510eb579f7e7d8a2ee0b6adb055ca57ba88547efd6fce8c0b7a0c16e48c5265d719b99bde73103c91d66c5189d7262b256f092d06393ed21cf2bb3e67abfb98f52a4c8a3b6c74552ba555c63e605bf318be939bf6da23dddc296cae1d1e3f4c916d3b7ff1efd5c69fa69324be946d6b0a6d5f011b80b415c44000bcc4e4f52d2609ee953fbcfc35a3d85faf14695f7d61f4389b956bd2c351a79427c315b36dd60652213edffeb8c81499ba0b2c4249fff8ddd4551182ceebd5390c480d949d360dc64571b611a1188c21742cdf5211e1a4d614890beaa8180ffbcb8cae61f8107daa9d4c20a664b9fd1ea160240e84460b89c7e22e9e0daf8a2e366387f51981d3901fd4a92e2f846463817e877f0046358853e26e2f8bde07ded310bad4c7c31e264337a5339444431d878e658e5f143bf98d3a5120dff9120141247e76497e6f6337fdc078d492314247f4d04d6170df5f7b42be38a75af01602367ab5a76bd271a7a6bb35cc3af3331678c014e7e92393c99b6b7b87cef4b5c7517bc9d3ce8a05648c7e8a3627a54febc953c853f6bacb5849b09878950c62ef31285a1aff2689c008b8e0c405bcca16df935b882d7ed001d4a36b07b5c32f6fd97dec777da5be52c6a47a21d4de09ec75c16fc8784ebabdb5ea6e5a7a7d77a0c8ad4329356a7e804489cd7898e4dacd97b1f9461ddf98321e8bfa88b17a9aba3b79fa82a11caaffb2172f527e05323a8a26bbcf661ec62359c22c6fb7227b21c585ea8cdb196f6c6b4ca4d7ca6d6deabb5c7bf35c6d31abdb60ae606bb594d036276fd695161bcea0e5953c0db782a16d2b45c4851acde4b6c70498b4e9829d1aef99d2825c26fef9b038679801add65800d2702fc0417f1775373146470a17a2cb35ebf192cf724cbb980d5e2b463f9e8796ef42c7b71b9dcb40a728d2d3b797c4fccd8e3334f6b4be05b41deac2a15f8d2b62c992c2809a2c96bcfd726ae7250edfece568eed1e1ba79faae58e7ddf436d8e6d4dca6c9e37aba3e71d59aded16afe85c256e3fa6ab2200222da2c9c0a182aa52d6df603ec174d2f202d1c9de34b2fcf5c7ff0d7021d34c2ad4b34a5e68db3ea8b8ee0f00134e60b27a7017a382eb3e1dd2c6437e97b6334fbe8a697f12797cc21a13de87855e4ccd7b628ea891d549c70f70a7dcc81c5586d7a66f50434bba5d21ede0dfd4ee334b63bedf6396244c798253a929de4e688fd286af12499efe0080ab0195d194c166f66d4be912cc8a58e560379144b098b8453ce988d212a4a27fb2ff9c36d9b911f6f7c7abe14d1155ea60fb4dc169fd2d86b2ad887d5267dacedbe77b4fd6560b433ed092c052497454b3a793bdff8d1b02088e3b749e6c91089328a3d5d4238ef64104959be1aa770ea3123487db0e1d3b1c15432a9cee5309dbf2daaf32ab51e95b95dc4643319dbb73e0eccdceb52dbfa33ec313ec35d3e2c71d58a7d14fa85ccab0e13c2f5318049d1b7a47b66bad93193874b97e73c3097da1a2247c5edb273996f454440dd36a031726235ce7da1a273b0ac7253626c09391909b71a86d2f834927efec76cc28d0e90151c915139e866781ce531aad66e488454ca44adbb684a30870f16cb0977671b55f1e10683cd51901b0d201502cff1eee9c2ab75411933f4cfed07bf6043b9d0df68999958a210d995f3d956301c9ac67be0af54cc5b0835c821b7a8d9d3dca837ed54fd72620a4509fe75545786ba41ee73013f18ca482bbeed35e86bdffb8f45d56a905435a3bed0e0ad5d6f2805ceee8914d9c4b77959292f674d28758463ebb0b7489fe14708eaffc6fcacae47c83b6399d8c546d168eb012bb8c62cfe639ff467c3437daaaf34fca9da0e3703b5326eb9d890641064e23a2db993248234cc5259f8b7ef0fa3877fe96e3b3cb41d99bf64feaabe40670bdc41bfd25ce04b263e89b7c207ae1b1032e942ebb38d1fd4fb17c9083b629ea6d0d70ec73a96220fc7ff308652004b581edb486c375fdf713acec8bcbcb7daad6f99a11c0d4dbe60bf2b08ffa81e38397b92d9de3e41b71fc29d4fc546984a4bdacb718b6aaf28ab5279ac7d275c2ccfa801cfb389ed39b17403b45447209b71d29403aa6b0fde9cf80e9582e752c55cd9375dd38bd9beecd1768a0fc0a051c3a205fc0", 0xffb, 0x6}], 0x0, &(0x7f0000002140)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x1ff}}]})

01:55:55 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:55 executing program 2:
syz_mount_image$msdos(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0))
syz_mount_image$tmpfs(0x0, 0x0, 0x1, 0x1, &(0x7f00000020c0)=[{0x0}], 0x2800, &(0x7f0000002140)={[{@mode}, {@size={'size', 0x3d, [0x0]}}]})

01:55:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

[  832.422300][T25140] loop3: detected capacity change from 0 to 512
[  832.422874][T25141] loop4: detected capacity change from 0 to 8
01:55:55 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f0000000140)={'ip6_vti0\x00', 0x0})

01:55:55 executing program 2:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x6})

01:55:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

[  832.489763][T25140] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  832.507928][T25140] EXT4-fs (loop3): get root inode failed
[  832.519417][T25140] EXT4-fs (loop3): mount failed
[  832.712773][T20117] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  832.962312][T20117] usb 1-1: Using ep0 maxpacket: 16
[  833.080958][T20117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.092184][T20117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  833.105074][T20117] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  833.114183][T20117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.124005][T20117] usb 1-1: config 0 descriptor??
[  833.603467][T20117] HID 045e:07da: Invalid code 65791 type 1
[  833.610514][T20117] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002C/input/input51
[  833.693228][T20117] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  834.014534][ T3684] usb 1-1: USB disconnect, device number 21
01:55:57 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "f800"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "6a01"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "5effe6ff"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x2, &(0x7f00000007c0)="c903")

01:55:57 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f84", 0x32, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:57 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

01:55:57 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={[{@size={'size', 0x3d, [0x74]}}]})

01:55:57 executing program 4:
socketpair(0x10, 0x3, 0x2, &(0x7f0000000880))

01:55:57 executing program 4:
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000380)='./file0\x00', 0x0, 0x1)

01:55:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:57 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x8}, 0x48)

01:55:57 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  834.543186][T25166] loop3: detected capacity change from 0 to 512
01:55:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

[  834.618487][T25166] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:55:57 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={[{@size}]})

[  834.664528][T25166] EXT4-fs (loop3): get root inode failed
[  834.670569][T25166] EXT4-fs (loop3): mount failed
[  834.695102][T25181] tmpfs: Bad value for 'size'
[  834.852905][ T3684] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  835.100785][ T3684] usb 1-1: Using ep0 maxpacket: 16
[  835.220919][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  835.232243][ T3684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  835.245205][ T3684] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  835.254304][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.264633][ T3684] usb 1-1: config 0 descriptor??
[  835.732371][ T3684] HID 045e:07da: Invalid code 65791 type 1
[  835.739369][ T3684] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002D/input/input52
[  835.835348][ T3684] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  836.137384][ T3684] usb 1-1: USB disconnect, device number 22
01:55:59 executing program 4:
r0 = bpf$PROG_LOAD(0x4, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000000)=@raw=[@alu={0x3, 0x1, 0xa, 0x6, 0x7, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x556cf3ab}, @cb_func={0x18, 0x3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x74, &(0x7f00000000c0)=""/116, 0x41000, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x9, 0x43ff}, 0x10, 0x29c0e}, 0x80)
r1 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000540)=@raw=[@initr0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x4, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x3f}, 0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x7c, 0x5}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000540)=""/72, 0x2c, 0x48}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x2, <r4=>0x0}, 0x8)
r5 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)
ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000840)=""/150)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x9, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xce, &(0x7f0000000400)=""/206, 0x41000, 0x0, '\x00', 0x0, 0x17, r3, 0x8, &(0x7f0000000600)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x0, 0x1ff}, 0x10, r4, r0, 0x0, &(0x7f00000006c0)=[0x1, r5]}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r1, 0x58, &(0x7f0000000a40)}, 0x10)
syz_open_dev$mouse(&(0x7f0000000b00), 0xfffffffffffffff9, 0x20280)
syz_open_dev$rtc(&(0x7f0000000e00), 0x3, 0x200001)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

01:55:59 executing program 2:
bpf$PROG_LOAD(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000000)=@raw=[@alu={0x3, 0x1, 0xa, 0x6, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x556cf3ab}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], 0x0, 0x0, 0x74, &(0x7f00000000c0)=""/116, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_open_dev$mouse(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}, 0xc)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
syz_open_dev$mouse(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

01:55:59 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f84", 0x32, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:55:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:55:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:59 executing program 0:
select(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x77359400})

01:55:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

[  836.660139][T25192] loop3: detected capacity change from 0 to 512
01:55:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:55:59 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000030101"], 0x14}}, 0x0)

01:55:59 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x10, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0x2f, 0x6, 0x7, 0x7, 0x12, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x40, 0x2c1, 0x1f}})
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x40, 0x3, @vifc_lcl_ifindex=r1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

01:55:59 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x10000a006)

[  836.721702][T25192] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  836.741775][T25192] EXT4-fs (loop3): get root inode failed
[  836.751352][T25192] EXT4-fs (loop3): mount failed
01:56:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:56:00 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:00 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f84", 0x32, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x8}}}}, 0x30}}, 0x0)

01:56:00 executing program 4:
bpf$PROG_LOAD(0x15, 0x0, 0x0)

01:56:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x8}}}}, 0x30}}, 0x0)

[  836.996580][T25224] loop3: detected capacity change from 0 to 512
[  837.053571][T25224] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  837.085548][   T27] audit: type=1804 audit(1661651760.269:125): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2053028216/syzkaller.M3C2an/1192/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0
[  837.116744][T25224] EXT4-fs (loop3): get root inode failed
[  837.127642][T25224] EXT4-fs (loop3): mount failed
01:56:00 executing program 0:
shmget(0x3, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)

01:56:00 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:00 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d271849", 0x36, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:00 executing program 4:
capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000340))
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x5609, 0x0)

01:56:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)

01:56:00 executing program 2:
r0 = bpf$PROG_LOAD(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000000)=@raw=[@alu={0x3, 0x1, 0xa, 0x6, 0x7, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x556cf3ab}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x9, 0x43ff}, 0x10, 0x29c0e}, 0x80)
r1 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000540)=@raw=[@initr0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x4, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000780)={0x0, 0x0, 0x7, 0x0, 0x3f}, 0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x7c, 0x5}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000540)=""/72, 0x2c, 0x48}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x2, <r4=>0x0}, 0x8)
r5 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)
ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000840)=""/150)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x9, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xce, &(0x7f0000000400)=""/206, 0x41000, 0x4, '\x00', 0x0, 0x17, r3, 0x8, &(0x7f0000000600)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x1c, 0x1ff}, 0x10, r4, r0, 0x0, &(0x7f00000006c0)=[0x1, r5]}, 0x80)
r7 = syz_open_dev$mouse(&(0x7f0000000b00), 0xfffffffffffffff9, 0x0)
syz_open_dev$rtc(&(0x7f0000000e00), 0x3, 0x200001)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0xb, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x630, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff4f5d}]}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000980)=""/143, 0x41000, 0x4, '\x00', 0x0, 0x24, r7, 0x8, &(0x7f0000000b40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xb, 0x0, 0x1}, 0x10, 0x0, r5}, 0x80)

01:56:00 executing program 4:
capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000340))
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x5609, 0x0)

[  837.561010][T25234] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use)
[  837.561442][T25237] loop3: detected capacity change from 0 to 512
01:56:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)

01:56:00 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:00 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000540)=@raw=[@initr0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
clock_gettime(0x6, &(0x7f0000000140))
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x222000, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000040)=""/141)

01:56:00 executing program 2:
r0 = bpf$PROG_LOAD(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000000)=@raw=[@alu={0x3, 0x1, 0xa, 0x6, 0x0, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], 0x0, 0x0, 0x74, &(0x7f00000000c0)=""/116, 0x41000, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x9, 0x43ff}, 0x10}, 0x80)
r1 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x4, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x2}, 0x8)
r3 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x7, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x1c}, 0x10, 0x0, r0, 0x0, &(0x7f00000006c0)=[0x1, r3]}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r1, 0x0, 0x0}, 0x10)
syz_open_dev$mouse(&(0x7f0000000b00), 0xfffffffffffffff9, 0x20280)
syz_open_dev$rtc(&(0x7f0000000e00), 0x3, 0x200001)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0x7, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_fd, @map_idx_val={0x18, 0x9}]}, 0x0, 0x6, 0x8f, &(0x7f0000000980)=""/143, 0x41000, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xb, 0x0, 0x1}, 0x10}, 0x80)

[  837.626980][T25237] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  837.656181][T25237] EXT4-fs (loop3): get root inode failed
[  837.674375][T25237] EXT4-fs (loop3): mount failed
01:56:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)

01:56:00 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d271849", 0x36, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:00 executing program 4:
capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000340))
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x5609, 0x0)

01:56:00 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:00 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
splice(r0, 0x0, r0, 0x0, 0x1, 0x0)

[  837.786995][T25253] loop3: detected capacity change from 0 to 512
[  837.788602][ T2970] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
01:56:01 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x300}, 0x0)

01:56:01 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0)

01:56:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x244}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:01 executing program 4:
capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000340))
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x5609, 0x0)

[  837.828925][ T2970] Buffer I/O error on dev loop3, logical block 0, async page read
01:56:01 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x0, 0x8, 0x301}, 0x14}}, 0x0)

01:56:01 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

01:56:01 executing program 0:
io_setup(0x33, &(0x7f0000000840)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_cancel(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  837.881426][ T2970]  loop3: unable to read partition table
[  837.894485][T25253] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:56:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  837.971342][T25253] EXT4-fs (loop3): get root inode failed
[  837.994649][T25253] EXT4-fs (loop3): mount failed
01:56:01 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d271849", 0x36, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:01 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x1ec4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@generic="b87f14f2213ad8e0192468e3670eda1caf098c9b5ca9970160ff897c2f063ddbb2e62a939bd51cb108dca0f0cc450112d41eb744fd7d86224e65cabd4ab8c32d5d25078c96b565ac5314afbb508dd5b4c8462af03f71dcc44c2669bf3f707e221f76da011f06f53d79b8328a4aabc4f502ac60c98ad9aa4ea813e7de441c913167dc4b45ec053d8e6d65930abf728d7cd3f83f9efa2c1cb62069dd0a4e04187d64bf80c378b3a18179e7cf02725e4490f2b32cea5d34cfa719e6556cf09f1b6d737094d58c40819793d8de06e6fcdc9a4f", @nested={0x151, 0x0, 0x0, 0x1, [@generic="740f1bc7aee5fd99f59a41785ac2a581e871a58fe27801ed9f9630d44806bc66952c373b677ea5f20347993c5885d8e7569c018651532443cded3dc10208a50f914d360c105e8d8e8042e6bf22b0ab08273fa246b89f89b9b406ed3e9a723ea232491ad42efe197c8addaf2cfa8b9c741d21cd9b2c7619fba8bccbd29cf5e096a473c49a9b3648f67c9f2daa8f5c850dc4775d305d9a7cfffe0b5cc21843d10f7ffa21289952180fda8efbd140566a7e1a1c82a8f11e8ac3d2d48d5e687cdd295062a1205ef89a226ed13cc228acba67a5e1b74640b824007bb8cc510fcd6cd75f4bb7002b9692be01221c15ee55c4bdb3afbbaa61", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @generic="c817f30da0d9c81488d856708885233abfd056fd339a8c1e810d0702ab91b1207c616f1bc5bb5c9f8590e1c2e634d44fbd287020cd4838ef15bcf68e54637d3511272e4739171f0b85a5af47e8a5030d"]}, @generic="3e9b0a6e4a4842fefd926ff4e119cf08e7a67a45a419b781bfb9f6d59b91aebb908ba516656e2c9d35c0bd664ffa14cd25ae39aacffc46aeff5ff644cd49577c28a9d9959960c0aaa2f1cc33b62e07dbac4d8f5d45e4e39db1662616d93a5d4059b81cf91998dc40240e3fa6843617e68449aff55192f1968c9160d0d55f6f943afc02992add861bbcb96546ad617a33ea579cbb9161da0bab808a0540e1661509fa590ae6f6248ffa0096671d04e2a0730f5a5c199be3fdde114bf534a92d09b7d2638df1d3d44705e7b37372d7761a6a8f91e05297f55fbd9c7eb1301634ab10c98f24", @nested={0xe1, 0x0, 0x0, 0x1, [@generic="119991dd988fa908f1f46fc3df82cac7c09a2456046db1f20ff9efedd65e985db0f032b9e78ddf0b71e181af00dd30ad36ac3a46eebd26379cc89fd848f7e8117efebb0b2e248614e1aa1ce7528f28b6dfb961497cba10be83d34e8c3e3c4b5a859ec1a062f15a9055ec6a35f51946c0cd00772dfe72e064409364180c6d5344b96d37b9aadc508558a12cf3e2b9203f8f8cf605b53027c7a8c752fe9c3fca5887a6ee55e44c1953e246ac6dd6f6029b6dca115bfb3345d3a3141b6f62e64a51c4890112a738eb1e202befd970fedb8c388569fd85", @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, @nested={0x1abd, 0x0, 0x0, 0x1, [@generic="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", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private}, @generic="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"]}]}, 0x1ec4}}, 0x0)

01:56:01 executing program 2:
r0 = bpf$PROG_LOAD(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000000)=@raw=[@alu={0x3, 0x1, 0xa, 0x6, 0x7, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x556cf3ab}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x74, &(0x7f00000000c0)=""/116, 0x41000, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x9, 0x43ff}, 0x10, 0x29c0e}, 0x80)
r1 = syz_open_dev$mouse(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x7c, 0x5}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000540)=""/72, 0x2c, 0x48}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x2, <r3=>0x0}, 0x8)
r4 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000540)=@raw=[@initr0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x80)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x5, 0xce, &(0x7f0000000400)=""/206, 0x41000, 0x0, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000600)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x1c, 0x1ff}, 0x10, r3, r0, 0x0, &(0x7f00000006c0)=[0x1, r4]}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r1, 0x58, &(0x7f0000000a40)}, 0x10)
syz_open_dev$mouse(&(0x7f0000000b00), 0xfffffffffffffff9, 0x20280)

01:56:01 executing program 5:
r0 = bpf$PROG_LOAD(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000000)=@raw=[@alu={0x3, 0x1, 0xa, 0x6, 0x7, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x556cf3ab}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x74, &(0x7f00000000c0)=""/116, 0x41000, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x9, 0x43ff}, 0x10, 0x29c0e}, 0x80)
r1 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000540)=@raw=[@initr0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x4, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x3f}, 0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x7c, 0x5}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000540)=""/72, 0x2c, 0x48}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x2, <r4=>0x0}, 0x8)
r5 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000540)=@raw=[@initr0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x80)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)
ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000840)=""/150)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x9, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xce, &(0x7f0000000400)=""/206, 0x41000, 0x4, '\x00', 0x0, 0x17, r3, 0x8, &(0x7f0000000600)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x1c, 0x1ff}, 0x10, r4, r0, 0x0, &(0x7f00000006c0)=[0x1, r5]}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r1, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
r8 = syz_open_dev$mouse(&(0x7f0000000b00), 0xfffffffffffffff9, 0x20280)
syz_open_dev$rtc(&(0x7f0000000e00), 0x3, 0x200001)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x20, &(0x7f0000000d00)={&(0x7f0000000bc0)=""/255, 0xff, <r9=>0x0, &(0x7f0000000cc0)=""/44, 0x2c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0xc, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x630, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @alu={0x4, 0x1, 0x7e473ba127fbeb5a, 0x0, 0xb, 0x779a59d3b1f6aa21, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff4f5d}]}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000980)=""/143, 0x41000, 0x4, '\x00', r7, 0x24, r8, 0x8, &(0x7f0000000b40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xb, 0x6, 0x1}, 0x10, r9, r5}, 0x80)

01:56:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x338}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:01 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xf00}, 0x0)

01:56:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x18, 0x6, 0x1, 0x301, 0x0, 0x0, {}, [@generic="b8"]}, 0x18}}, 0x0)

01:56:01 executing program 2:
mlockall(0x2)
r0 = shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil)
shmat(r0, &(0x7f0000200000/0x4000)=nil, 0x5000)
r1 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000356000/0x4000)=nil, 0xffffffffffff6fff)
shmat(r0, &(0x7f00000a0000/0x3000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f000020b000/0x2000)=nil, 0x5000)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(0x0, 0x0)
shmat(r0, &(0x7f00000aa000/0x1000)=nil, 0x4000)
shmget$private(0x0, 0x400000, 0x1, &(0x7f000000e000/0x400000)=nil)
shmdt(0x0)
shmat(0x0, &(0x7f00000e5000/0x1000)=nil, 0xdf5f2043c18ee8be)
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil)
shmat(0x0, &(0x7f00000b4000/0x4000)=nil, 0x3000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x5000)
shmctl$SHM_UNLOCK(0x0, 0xc)

01:56:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  838.114784][T25287] loop3: detected capacity change from 0 to 512
[  838.125906][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
01:56:01 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x3, 0x8, 0x301}, 0x14}}, 0x0)

01:56:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14}, 0x14}, 0x300}, 0x0)

01:56:01 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@nested={0x4, 0x80}]}, 0x18}}, 0x0)

[  838.188418][T25287] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  838.233560][T25287] EXT4-fs (loop3): get root inode failed
[  838.248215][T25287] EXT4-fs (loop3): mount failed
01:56:01 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52", 0x38, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:01 executing program 5:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@dev, @loopback, 0x0, "6d61860f7f0d6d4bfc4e9f27276986491a7988b084b58dfe9fa1474f7f383fe8"}, 0x3c)

01:56:01 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x10000a006)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)

01:56:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x488}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:01 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x1ec4, 0x6, 0x1, 0x301, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x8}, [@generic="b87f14f2213ad8e0192468e3670eda1caf098c9b5ca9970160ff897c2f063ddbb2e62a939bd51cb108dca0f0cc450112d41eb744fd7d86224e65cabd4ab8c32d5d25078c96b565ac5314afbb508dd5b4c8462af03f71dcc44c2669bf3f707e221f76da011f06f53d79b8328a4aabc4f502ac60c98ad9aa4ea813e7de441c913167dc4b45ec053d8e6d65930abf728d7cd3f83f9efa2c1cb62069dd0a4e04187d64bf80c378b3a18179e7cf02725e4490f2b32cea5d34cfa719e6556cf09f1b6d737094d58c40819793d8de06e6fcdc9a4f", @nested={0x139, 0x80, 0x0, 0x1, [@generic="740f1bc7aee5fd99f59a41785ac2a581e871a58fe27801ed9f9630d44806bc66952c373b677ea5f20347993c5885d8e7569c018651532443cded3dc10208a50f914d360c105e8d8e8042e6bf22b0ab08273fa246b89f89b9b406ed3e9a723ea232491ad42efe197c8addaf2cfa8b9c741d21cd9b2c7619fba8bccbd29cf5e096a473c49a9b3648f67c9f2daa8f5c850dc4775d305d9a7cfffe0b5cc21843d10f7ffa21289952180fda8efbd140566a7e1a1c82a8f11e8ac3d2d48d5e687cdd295062a1205ef89a226ed13cc228acba67a5e1b74640b824007bb8cc510fcd6cd75f4bb7002b9692be01221c15ee55c4bdb3", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @generic="c817f30da0d9c81488d856708885233abfd056fd339a8c1e810d0702ab91b1207c616f1bc5bb5c9f8590e1c2e634d44fbd287020cd4838ef15bcf68e"]}, @nested={0x1c8b, 0x6a, 0x0, 0x1, [@generic="e9321070313851c0ff1e53e15ffef1002b8a5273e5e7b94010caf5229e3050e957c0fbff94498bf30aa31d3122a97a3f2d82490c2d8a7af5e0a665b29bc46b0709407a8ca63c0c9f62c08ff8936f1b3d7a4fa8bd95e711370ca5070c531e886435ae4229e333065d14cd6527a2074d8acc70b8d66833cbd947b9a4cde0bf9df5614e726ebc731c9b938c65e7b7f9ecb769b500d1421fa898136aaa289ad4ef6b99b7d452b6fa1991f3ca0f8cd3a40515276c95f21ecf27461960f2e86799f7d5184c0a114e8719238560e051aeae0c625a5cacdd715cc81b03446b5c664237b67792a25742d65dbaadd0ddca77ff8a167f0de0458737b567ce79a9fa7bb17146f48d4d39ed217b9a0835ee5f92bd8e2cebee73f1d746424c1a0a054a06eff9f19793a75756855ac99a6ce390069c0e62344df5a52c9d005d569794f10569af61f2a0f4218248f40986c0f9fca7fb810786bb7191c1514dd52e876cde2ee939c51979f9b0713a0e4f0e1e3e99eaecae326c27a2b1ecc2b6d125d5688a7ea774fe7ddb6aa7c33f926437f7a9d686c84c7c00d230f31ebc514c49c9399f2ea6b613ef057da0aa8a1691a991696633c9f8767f7b61f03a08894147d28470d64f5f16d3aa3fe37f5d0c72a09efeb388c98b52666e39754643a060e45361587fad20edc79aef10f67dc91c60bcb1a216101e873bd034cf4a258f7df93d5dd4cf2d30b2de27d43344247680bf5520984f5ffe8b9ad7d3f9a6c4177e367500ffbb8ef1d4008e028f61392d8d9dde93075cad27e510b8be9730c7833555d2f24c8e8bba4b6d1a6497209769e0db738c2ba692f7f500c914e1b2c6b46e668478abdf535c6b3a962ba2ca13124cf48269cbdd1fea64506ceddf972b7b1e1a0340ddc93bd506f2682637fb77b5c07442068a33f8e6a180c6e897313d35720a9ca9459bf2d056bd7b5fd7302a5bb30dd8c2cc0e49e4316298c31388bbc12336b19ebc85bc2d2e24c1a4442440669e0fadf9277723da2b868b81a8174a37532c456cdf7225bfeca0d8ddf5e863df34ed493a19516b6589a2c86b31309e15dc860ae44c77057bb83e0f22eac964b6824809ca3078d542571e741af3026b6b90e0b23e8732473417d8a4e82280c0e89cde16c7aeaec8f04b30ac6c73eb295530d1083bf94a93639f77b30f016d8d813106329d694c18a139584e5fecced6fe3859856e08dd18d9ec834d0202022d60bca455e30b686d804759ae8802e90c5f2c56facc6fbad71082f7f7c34364f2f4158afd934679d89e0953e70e53d5fbd40c5808340cf4e359d84274e86bdf2647bb32039950411dfa56112e0d21297d008a3b79b7f1b6470ffeab5b48344d960bd041754a88a833ee9a56c7739006da128b73773777ceec225707f13344e7aaaf6f4bd51cf3a7bfa2c0bfd1ccfbb139b028fd26e868bf077e548f206815bb4630bf6def711815707bfa33a0005df353a5fe55cd79a180d7eb16025e5899500fde0b2fdf65c651bd999b85121a2e652120ccef3f6e465bceb5b8e51fbd62f1b445b5ed83aa510a691b9f6fab825a27fd0b7b6f63066d967ccb80612d81a3104557bd8d7a1dbe68dba374c35647a8c71aab9732a4559e9a5a4180d65c3de93c179afc0bea01291de2bc213bb68ef30be82849e87c4a21d134240b24b87f2fea3edbb080e533da9fecd95aa257569a319495ad40abaf78a49d8835ec3dd1d7343bcaf40da4459410a1ac5f6a983ae060c8b425d3825214c47e39e1037cfe6e07bc9b86ce79026b70b48ea31eef8965811c1cba0cf41bb7e577155f3c1ea8fc260dedbd00c0f3f7b2a338e0ed5233f0d07d6a67700cacf6d5439fa0bcd8e4249e5af1b5ac4ff4f1c55a0372a183076fe488630b519bbed8ec10a93a736208029145550e152a59bfb2c15857805051ed010790ccc0d2cf225685215aae92964cbedd7f53853a947f42d9d3eaf57c20840f7bd63770cc014f059df27c19ab79c768afb68aadf95203668aa6712d42d0281391486b0447e44cbd818134d44ab7fc808d1a2e7c85e6963a736e7c5984a44e05e8773535efed10f279d85ca8a45a59c79250390224b617e624e5e2e3753fbbe4936821eeda13006c2123a4572ddc9fd354de3f2267c9ccec62878cc911d0d369dcc9f38f0286f74fc98dd018065a698bc8d84fbea5455cd4dfce278e4940d17a27982836b8b1a93fc1a1e33c36878187db4dacdcbb955529c4def5672f68ebffb0e5642ce4c6c2dde8b10a64d4c7ee1994f7aee06d8e66978fd1680b3f5eb93c416e5335fe9318c73115e777e8660c3431c6febc31ebe592d28055faafef899f64dcd521ffdc14572ef0d5484d157193ee870516d593520c9f38788e33dadfe9897ba6ca1c40aed21b438c91eaa5c1dd594635eeaf98eeb5d920f0e057a5def98c088a9283f37d1206f4cfaada28b5945ca604af52ad56ec96ed9bb3ef4d2173732982dd58c2507227a5bb3e215e7bd27e90740cf00331e228425e5be620e788fb9ec7bc6d899a00116eac444940ba12458c49d9c3dd25e328242f286ea18cfd217619fa6d1deaf95d14ba645f21740c451ca5cd7b4cc24beb200c7c7717e74a3b00212e2fd059d363a6e271659d70a89a36b4de2f4f37776b8bcffaed3a490b364e03a3fc2573deadef0d87b33c85c72aff6e1428f545bc0012033aabd9368a9e98370a6827c12931723c2ddfd48de39019882415f0a26f5aa1915950bdfaf9f6f9d9a1d5ad8063b5d9abdb96366b243f9890d023dcf36f2a73c3dde2d8a6c86d250608bed1ef74d633cf8377a464bc79e08dc527033557e6f0e94bca5f38316a9416d1b1a2b3f3de1307472cb7b6d02afdd77c305b29db1899d2fd0f49720c1aea94bbf03dc1b2645d17a912e2a174a22a1b4da203c40e6f8ec730e99746a3897bc138c7d4d09ebc84ccd483c8681e4e5b793db185030ede3ff830a41b060875660b7fe17bb8e36f9078395817ea3b297b2388f7fcbdbc5bef70f34238074d718ec6b664269e01043ca3d65556c511e4850ca9e858fa53acd57d56c784b6ac5f533527c5d234065ee44f39c12c6012d84a75f39fbe51850726d96b96cad33dc9f5466cebd8ce8a20650566203ed68ff0a5da472f3b440f341ee4eb395073ad9292cd8e633ca3258512ebab43ef0cd88f6ce238f3a364c1f42c2e7e720043c8994e018ca13b5a6447bc3936613bf226b970abec6403ae522b56a23a210ba0404bd0c7f3bddf2d451ea42bbda2d026cb5350d84453dff29ad2543e6e4ff1dc2d7d2dbc9f402016ca033e38a2589f2ca34a8e2b14e61dc0668c5837bb21a43cdb48d138d10001f72bb39a7e198f1fed8498e972fb83125ee126ceeb5e5a3f9fe5daf037901192fdce2a0734b934fc4a4dd9bb6889938a09c62534651277e154e788fd8079c7d25257686739dd783c91fcc80420b173881d20276a60c750a8779c13f979a5c3f991b42ce9983e0907726e747dd476bc224f3a15f05ff3a0694a0dddf448d66ca31af2fe41a59727bf189eac01a7f584a9f8a438894c9685797aab70c7764a5fb5cc963330590d53ffe4d4e22272167d43aab505d91589f45c35e92092128199e466642bd63138718d30dfd8dca1eacfb14f58b8e2810e95499994f15a5896154253c9cea2d7b512b3ae550e0bf2e3a27677fdbaed8a020290d09638615fdcb699109f7a939f6472d87566d81f4d692c29dd10c586988d63012c086f2da4633844c4c23f3d77fe41fcb4420ff53eda94d6a06c5cf2371e517ba0d4c99bf42f5d6329c64bf108e8dbe0ffa242013a31ffcbe131976097def87e440762d384012d2c6b8cb19fa4b9de3ae4a017368270a181b5eca49dddda771054e4fd3a34389c5b235476b9c7b449667b2f92e99d312f66f7c6c77c986c1cde6c77f1e2286dc7b8af578887c20ec3e58c52f6e6ba1609b13bd4bd0d9cf0d8263caeca298e5dee4bcecb1a0a3f35c8caeb258efbd941bcdef49b820fc26b89e53bc272a56b042673d6d56ba48dc4fda2212900d3924c3a7a0448f5fc204ab6567c48a30f98941ffddabeb9f324ec3ef4b78a07e34dc4e065ec3bf51ccec06f1318c1369f120b495a6ffcb5f1433a5e8acc80594871f8422bdf97177dabc7f01d2a316fcc947ffaaba0a4aa949590bd7d1eea62f4b0da4c1ecab51e83ad298d17bc47737bd23b33f6f695cb157a26fee603dcf1d5cf07148c0e915a9cfdfef97e20be914fc794029e4fdff4d95612d7c25e2d9f65c4c8c3a6", @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="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", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="1c2b8ad9c6cb906b8455866e64120116c5f4cf55bb307c3b86036f00792756b58c1b0e27ab77353ea3f28e7d36adacd501f184bd082239f5b6e999eef136dc67b31770933bf0449609707315d9dd85f9b4abd245a16da9c006faa8933bde5740809bf8c06f950c4c8468f97a9fbe3c72b52b7ff20cd6d9467862461895181651069810f3f0457694dcfb5c7da26da978db856ffc72e6ce5af0948130b7f0112606651a96a66a65eb29c843f70cf77f717159ff2cb80dc65eb79e2a502a91a6315a8510ff9f30395b43ca88734de5913d394b60a9ec6ade34c49b5ae6bc5d45d6e146f92dcef593e7ff39f2"]}, @typed={0x14, 0x11, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x1ec4}, 0x1, 0x0, 0x0, 0x4000}, 0x20048004)

01:56:01 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$binfmt_misc(r0, &(0x7f0000001040)={'syz0'}, 0x4)

01:56:01 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  838.367123][T25312] netlink: 7856 bytes leftover after parsing attributes in process `syz-executor.4'.
[  838.387434][T25316] loop3: detected capacity change from 0 to 512
[  838.469028][T25316] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  838.493479][   T27] audit: type=1804 audit(1661651761.679:126): pid=25323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2441650945/syzkaller.7WAq7B/1009/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0
[  838.525615][T25316] EXT4-fs (loop3): get root inode failed
[  838.531848][T25316] EXT4-fs (loop3): mount failed
[  838.640276][T19252] udevd[19252]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
01:56:02 executing program 2:
getresuid(&(0x7f00000046c0), &(0x7f0000004700), &(0x7f0000004740))

01:56:02 executing program 5:
r0 = socket$igmp(0x2, 0x3, 0x2)
accept$alg(r0, 0x0, 0x0)

01:56:02 executing program 4:
syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x28e001)

01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:02 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52", 0x38, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:02 executing program 0:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000540)=@raw=[@initr0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x3f}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000540)=""/72, 0x1c, 0x48}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x2, <r1=>0x0}, 0x8)
r2 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000840)=""/150)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x7, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2}, @kfunc, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600), 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x1c, 0x1ff}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, r2]}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
syz_open_dev$mouse(0x0, 0xfffffffffffffff9, 0x20280)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0xb, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x630, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff4f5d}]}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000980)=""/143, 0x41000, 0x4, '\x00', r4, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xb, 0x6, 0x1}, 0x10, 0x0, r2}, 0x80)

01:56:02 executing program 5:
r0 = bpf$PROG_LOAD(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000000)=@raw=[@alu={0x3, 0x1, 0xa, 0x6, 0x7, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x556cf3ab}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x74, &(0x7f00000000c0)=""/116, 0x41000, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x9, 0x43ff}, 0x10, 0x29c0e}, 0x80)
r1 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x204101)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000540)=@raw=[@initr0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x4, 0x1, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x7, 0x0, 0x3f}, 0xc)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x2, <r3=>0x0}, 0x8)
r4 = syz_open_dev$mouse(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000540)=@raw=[@initr0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x80)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000840)=""/150)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x9, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000400)=""/206, 0x41000, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x1c, 0x1ff}, 0x10, r3, r0, 0x0, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff]}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r1, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = syz_open_dev$mouse(&(0x7f0000000b00), 0xfffffffffffffff9, 0x20280)
syz_open_dev$rtc(&(0x7f0000000e00), 0x3, 0x200001)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0xb, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x630, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff4f5d}]}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000980)=""/143, 0x0, 0x4, '\x00', r6, 0x24, r7, 0x8, &(0x7f0000000b40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xb, 0x6, 0x1}, 0x10, 0x0, r4}, 0x80)

01:56:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r1, 0x505, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x24}}, 0x0)

01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6cc}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  838.895579][T25336] loop3: detected capacity change from 0 to 512
01:56:02 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a0, &(0x7f0000000000))

01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  838.975530][T25336] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:56:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc005)

01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  839.048544][T25336] EXT4-fs (loop3): get root inode failed
01:56:02 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0)

01:56:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000580)={0x14, r1, 0x505}, 0x14}}, 0x0)

[  839.090328][T25336] EXT4-fs (loop3): mount failed
01:56:02 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52", 0x38, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:02 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8943, &(0x7f0000000240)={'gre0\x00', 0x0})

01:56:02 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}})

01:56:02 executing program 5:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
write$cgroup_pressure(r0, 0x0, 0x0)

01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:02 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x0, 0x0, 0x0, 0xbc4}, 0x48)

01:56:02 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc041)

01:56:02 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10)

[  839.236608][T25370] loop3: detected capacity change from 0 to 512
01:56:02 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@base={0x11, 0x0, 0x0, 0x2}, 0x48)

01:56:02 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89e0, 0x0)

01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  839.297429][T25370] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
01:56:02 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0080000100000000000000e24025004000640000072f9078ac1e0001ac"]})

[  839.355089][T25370] EXT4-fs (loop3): get root inode failed
[  839.393995][T25370] EXT4-fs (loop3): mount failed
01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:02 executing program 2:
socketpair(0x2b, 0x1, 0x1, &(0x7f0000000080))

01:56:02 executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b7050000000b00006110200000000000d40500002000000095000000000000009abb1723bf2c203831c9545b21c751ee4024f479cbe4b89f9808836ea5847c95ffc926c2e182c7a3221481f5009edaf5f542a715b99fb3d2a73dd02584a54ee68c70dbfbcdcea76ee541e318cbe84cd4f5381f522e258a4d9aeb9b16feb66bf40fdf73be95633dc5de907f2ffdcc18494f09c327abd3a76fee11357181f05f7ac06d6a9078df8bc21f00cd8ac4109850ce4aa147beacafecd5c7ccdeecb146ca1e7611f8b3adb41b39029c1b9b59fbf1b4a80167ca6b113a1600000000000000000000cdb7fe6d684423596ee2bdad7787936c24c84d4721327a695ed24946de35ff5e000091e0610ac2d72b9b6f453f98e7b5a25941905bd564aac36dbe7d1db9f5561ad6f7c2e79fb80b6949d626024b5fb96e3da0d7113b1c826f49a2cbc18001d315aaf280a8a762689f8c6fee958836002f48815ad19ee99d81c9e3cda430cef4a75e5c4dd14c3cbb6af58e3f3b3f8cbd858532b02995d79ca5dac0fd49aa150f6e212e3f46e4f37f372ee43f136e4d3af6cc4a0ce2379cc1010d8483b82e54feeefa1e89d6a3b74fbb4b619c43984223674b40fbe29ea5752c76a5e6a44d95382a9e04f9a51881aedb6d6242d0fe2e7dcf1f8b22f46c37fb010f8e86c62a4c72327c7eaaf720aff72529429aed45219cb1b6476e53b650927d193b4062c4640de2781643edc5e59280c59332e92b52675af5e39db11b3829d8424fdf33ccdb7f89bfa14f9c2a17f9183cb48222e685f49340891845efdac175d90c116eaa013315165865f9a3785e21b41fd4b5eda7eb5a7462307fe72a3fe53eb02c75867e6eeebfc3037683f66d407fc28c4735a221bb5b78a6f966474a98ceceb20f0d4757b8e81ab14d29bad2b19aa5aff53ee333009688b401064898f58f88226f0e675cc74fbd519e523a7f0e839fe91774f85a65068de244a78687c12e4e6dffb556c8d30b8ee73faaac455701569da7ae1a4e44fdd2cf28965a9f5e09acf476e07e5ea768c558a5622601742b27b91724dde6a0f96d3e53e67db57bbd0d3f2dd8439192dfc71f9e5f289c7f519e8b794fb09b64fb3c1bcd46731051de09510ebd717eb57655d447753fd2ff052a9d6889ddb5a5f68564bd00a5ff58a75805eadb00000000000000006a9af2471aada1ad164502199e0a668ad4daa53e5658f82733b3c7f36fcf3146adf7025dfd79c5a67c27395f5ca5a90d45402e58b42946b5a977a56385f31083a4b65d61ec49"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x38, 0x0, &(0x7f0000000100)="2105dffb93dbbc90f86358e3f251", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

01:56:02 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80108906, 0x0)

01:56:02 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:02 executing program 4:
socketpair(0xf, 0x0, 0x0, &(0x7f0000000280))

01:56:02 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40049409, 0x0)

[  839.555088][T25399] loop3: detected capacity change from 0 to 512
01:56:02 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:02 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)

01:56:02 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x4020940d, 0x0)

[  839.609042][T25399] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  839.644686][T25399] EXT4-fs (loop3): get root inode failed
[  839.702950][T25399] EXT4-fs (loop3): mount failed
01:56:02 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local}, 0x10)

01:56:02 executing program 0:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3f}, 0x0, 0x0, 0x0)

01:56:02 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8970, &(0x7f0000000240)={'vcan0\x00'})

01:56:03 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x9000000, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4b, 0x2, {{0x0, 0x11000000}}}}]}, 0x78}}, 0x0)

01:56:03 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:03 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3803}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:03 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200), &(0x7f0000000240)=0x1)

[  839.860895][T25417] device team0 entered promiscuous mode
[  839.874737][T25417] device team_slave_0 entered promiscuous mode
01:56:03 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:03 executing program 4:
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0xfffffe0d)

01:56:03 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x2, 0x0, 0x6, 0x0, 0x1}, 0x48)

[  839.923138][T25424] loop3: detected capacity change from 0 to 512
[  839.927990][T25417] device team_slave_1 entered promiscuous mode
[  839.941141][T18941] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  839.953863][T18941] Buffer I/O error on dev loop3, logical block 0, async page read
01:56:03 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89b0, &(0x7f0000000240)={'vcan0\x00'})

01:56:03 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x5, 0xcd, 0x1b, @mcast2, @private0, 0x0, 0x40, 0xf3, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @broadcast}}}})

[  840.027276][T25414] device team0 left promiscuous mode
[  840.047848][T18941]  loop3: unable to read partition table
[  840.056914][T25414] device team_slave_0 left promiscuous mode
[  840.109139][T25414] device team_slave_1 left promiscuous mode
[  840.126882][T25424] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  840.150989][T25424] EXT4-fs (loop3): get root inode failed
01:56:03 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)='h', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @random="c9529883d962"}, 0x14)

01:56:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000013c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x24}}, 0x0)

01:56:03 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:03 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8953, 0x0)

[  840.173709][T25424] EXT4-fs (loop3): mount failed
01:56:03 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:03 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x14, &(0x7f00000000c0)=""/244, &(0x7f0000000040)=0xf4)

01:56:03 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4402}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:03 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0xf283, 0x7}, 0x48)

01:56:03 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000140))

01:56:03 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, @short}, 0x14, &(0x7f0000000240)={0x0}}, 0x0)

01:56:03 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:03 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x8}, 0x48)

01:56:03 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x101, 0x3, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48)

01:56:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)

[  840.342048][T25457] loop3: detected capacity change from 0 to 512
01:56:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000980)={'sit0\x00', 0x0})

01:56:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40086602, &(0x7f0000000240)={'gre0\x00', 0x0})

[  840.403615][T25457] EXT4-fs error (device loop3): __ext4_fill_super:5244: inode #2: comm syz-executor.3: iget: root inode unallocated
[  840.480104][T25457] EXT4-fs (loop3): get root inode failed
[  840.488335][T25457] EXT4-fs (loop3): mount failed
01:56:03 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r1, @ANYBLOB="04005b"], 0x28}}, 0x0)

01:56:03 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)='h', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @random="c9529883d962"}, 0x14)

01:56:03 executing program 0:
pselect6(0xaf060000, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

01:56:03 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7707}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:03 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:03 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x101, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)

01:56:03 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r0, &(0x7f0000000040), 0x10)

01:56:03 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78fb}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:03 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000540)={'b', ' *:* ', 'w\x00'}, 0x8)

01:56:03 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="c9529883d962"}, 0x14)

01:56:03 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8946, &(0x7f0000000240)={'vcan0\x00'})

[  840.649912][T25485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  840.675787][T25487] loop3: detected capacity change from 0 to 512
01:56:03 executing program 4:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x10000008})

[  840.722082][T25487] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:04 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8929, &(0x7f0000000240)={'vcan0\x00'})

01:56:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fb}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:04 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000540)={'b', ' *:* ', 'w\x00'}, 0x8)

01:56:04 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x40, 0x0, 0x0)

01:56:04 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0)

01:56:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:04 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000080)='\x00', 0x1)

01:56:04 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)

01:56:04 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x0)

01:56:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8804}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  840.908620][T25508] loop3: detected capacity change from 0 to 512
[  840.934443][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
01:56:04 executing program 5:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  840.960804][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
01:56:04 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'sit0\x00', 0x0})

01:56:04 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @local}, {0x0, @local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}})

01:56:04 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@base={0x11, 0x4, 0x0, 0x2}, 0x48)

[  841.004208][T19045]  loop3: unable to read partition table
01:56:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9901}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:04 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f0000000240)={'gre0\x00', 0x0})

01:56:04 executing program 2:
bpf$MAP_CREATE(0x23, &(0x7f00000000c0), 0x48)

[  841.052498][T25508] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:04 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8923, &(0x7f0000000240)={'gre0\x00', 0x0})

01:56:04 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})

01:56:04 executing program 0:
pipe(&(0x7f0000001840)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000080)=@raw=[@btf_id], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80)

01:56:04 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8990, &(0x7f0000000240)={'vcan0\x00'})

01:56:04 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)='h', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0x6558, r2, 0x1, 0x0, 0x6, @random="c9529883d962"}, 0x14)

01:56:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc06}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:04 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48)

01:56:04 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)

01:56:04 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)

[  841.219264][T25538] loop3: detected capacity change from 0 to 512
[  841.221997][ T2970] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  841.249175][ T2970] Buffer I/O error on dev loop3, logical block 0, async page read
01:56:04 executing program 5:
socketpair(0x1d, 0x0, 0x1, &(0x7f0000000000))

01:56:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd007}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  841.294923][ T2970]  loop3: unable to read partition table
[  841.312919][T25538] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:04 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x801)
ioctl$BLKFRASET(r0, 0x1264, 0x0)

[  841.352372][T25551] device team0 entered promiscuous mode
[  841.362134][T19045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  841.381017][T25551] device team_slave_0 entered promiscuous mode
[  841.387556][T25551] device team_slave_1 entered promiscuous mode
01:56:04 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x80108906, 0x0)

01:56:04 executing program 4:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x1000}]})

01:56:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:04 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r0, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

01:56:04 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1, &(0x7f0000000100)=@raw=[@ldst], &(0x7f0000000140)='GPL\x00', 0x8, 0xba, &(0x7f0000000180)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  841.406284][T19045] Buffer I/O error on dev loop3, logical block 0, async page read
[  841.436472][T25561] loop3: detected capacity change from 0 to 512
[  841.446935][T19045] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
01:56:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000650001002bbd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="00e201000080"], 0x30}}, 0x0)

01:56:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  841.484661][T25550] device team0 left promiscuous mode
[  841.489993][T25550] device team_slave_0 left promiscuous mode
[  841.506428][T19045] Buffer I/O error on dev loop3, logical block 2, async page read
01:56:04 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x0)

01:56:04 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)

01:56:04 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000000)="55d681", 0x3, 0x40010, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

01:56:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6f8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

[  841.538657][T25561] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  841.544375][T25550] device team_slave_1 left promiscuous mode
[  841.574239][T25574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
01:56:04 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000000)="55d681", 0x3, 0x40010, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

01:56:04 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})

01:56:04 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x7}, 0x0)

01:56:04 executing program 4:
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0xff600000)

01:56:04 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf700}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  841.655957][T25581] loop3: detected capacity change from 0 to 512
01:56:04 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0)

01:56:04 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000000)="55d681", 0x3, 0x40010, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

01:56:04 executing program 0:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f0000000140), 0x0)

01:56:04 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8940, &(0x7f0000000240)={'wpan1\x00'})

[  841.729093][T25581] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:05 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000000)="55d681", 0x3, 0x40010, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

01:56:05 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)

01:56:05 executing program 0:
syz_usb_connect$uac1(0x0, 0xbb, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xda, 0x1, 0xfb, 0x57, "1e056a"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x9, "f02c827c21"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x0, 0x7f, 0x6, "df7ae5c99d3d0a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x2, 0x1f, {0x7, 0x25, 0x1, 0x80, 0x9, 0xeee5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x0, 0xfb, "c5c860"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x81, 0x4, 0x9, 0x0, "28b6"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x70, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa}, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000002c0)=@string={0x2}}]})

01:56:05 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8f6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:05 executing program 4:
syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x0, 0x1f, {0x7, 0x25, 0x1, 0x80, 0x0, 0xeee5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000002c0)=@string={0x2}}]})

01:56:05 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

01:56:05 executing program 5:
syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000002c0)=@string={0x2}}]})

01:56:05 executing program 2:
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000000))

[  841.872488][T25607] loop3: detected capacity change from 0 to 512
[  841.905127][T25607] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:05 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb78}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:05 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000012005d53"], 0x1c}}, 0x0)

01:56:05 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:05 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb80}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:05 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13266}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  842.017135][T25625] loop3: detected capacity change from 0 to 512
[  842.026909][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  842.031479][ T2970] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  842.049302][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  842.055459][ T2970] Buffer I/O error on dev loop3, logical block 0, async page read
01:56:05 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x22)

[  842.074371][ T2970]  loop3: unable to read partition table
[  842.083769][T25625] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  842.165116][T20117] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  842.181160][ T3684] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  842.220847][ T3687] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  842.410812][T20117] usb 1-1: Using ep0 maxpacket: 8
[  842.420762][ T3684] usb 5-1: Using ep0 maxpacket: 8
[  842.491011][ T3687] usb 6-1: Using ep0 maxpacket: 8
[  842.531015][T20117] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  842.539899][T20117] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  842.551529][ T3684] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  842.560231][ T3684] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  842.570661][T20117] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  842.579757][ T3684] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  842.610954][T20117] usb 1-1: language id specifier not provided by device, defaulting to English
[  842.611268][ T3687] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  842.620881][ T3684] usb 5-1: language id specifier not provided by device, defaulting to English
[  842.629027][ T3687] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  842.647906][ T3687] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  842.691065][ T3687] usb 6-1: language id specifier not provided by device, defaulting to English
[  842.760966][T20117] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  842.770326][ T3684] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  842.784271][T20117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.792627][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.800640][ T3684] usb 5-1: Product: syz
[  842.805032][T20117] usb 1-1: Product: syz
[  842.809214][T20117] usb 1-1: Manufacturer: syz
[  842.813932][ T3684] usb 5-1: Manufacturer: syz
[  842.818552][ T3684] usb 5-1: SerialNumber: syz
[  842.823296][T20117] usb 1-1: SerialNumber: syz
[  842.830942][ T3687] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  842.840193][ T3687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.849226][ T3687] usb 6-1: Product: syz
[  842.854241][ T3687] usb 6-1: Manufacturer: syz
[  842.859103][ T3687] usb 6-1: SerialNumber: syz
[  843.150983][T20117] usb 1-1: 0:2 : does not exist
[  843.181752][T20117] usb 1-1: USB disconnect, device number 23
[  843.241170][ T3684] usb 5-1: 0:2 : does not exist
[  843.262321][ T3684] usb 5-1: USB disconnect, device number 6
[  843.333772][ T3687] usb 6-1: 0:2 : does not exist
[  843.349651][ T3687] usb 6-1: USB disconnect, device number 42
[  843.380455][T19045] udevd[19045]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
01:56:06 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:06 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0)

01:56:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:06 executing program 4:
symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2209c1, 0xe7a330498cae8d59)

01:56:06 executing program 5:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000200), 0x4)

01:56:06 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000))

01:56:06 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x3, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0)

[  843.624964][T25638] loop3: detected capacity change from 0 to 512
01:56:06 executing program 4:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4680)

01:56:06 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:06 executing program 0:
syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x200)

01:56:06 executing program 5:
timer_create(0x3, &(0x7f0000000280)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000300))

[  843.684173][T25638] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:06 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:06 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:06 executing program 2:
symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00')
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)

01:56:06 executing program 4:
semget$private(0x0, 0x7, 0x8)

01:56:06 executing program 5:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
fstat(r0, &(0x7f00000000c0))

01:56:07 executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual', 0x0, 0x0)
bind$unix(r0, 0x0, 0x0)

01:56:07 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c49a}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:07 executing program 4:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x1818c0, 0x0)

01:56:07 executing program 5:
symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2684c1, 0xe7a330498cae8d62)

[  843.838122][T25660] loop3: detected capacity change from 0 to 512
01:56:07 executing program 2:
symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2686c3, 0xe7a330498cae8d62)

01:56:07 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x48)

01:56:07 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf70000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  843.899194][T25660] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:07 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001", 0x1d, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:07 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fstat(r0, &(0x7f0000000300))

01:56:07 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)

01:56:07 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
recvmmsg$unix(r0, 0x0, 0x0, 0x40000120, &(0x7f0000009300)={0x77359400})

01:56:07 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x120)

01:56:07 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:07 executing program 5:
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001)

[  844.024635][T25679] loop3: detected capacity change from 0 to 512
01:56:07 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x0, 0x0)
getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0)

01:56:07 executing program 4:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/dmi', 0x86000, 0x96)

01:56:07 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0)

[  844.082191][T25679] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:07 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:07 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001", 0x1d, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:07 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00')
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0)

01:56:07 executing program 2:
symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2684c1, 0xe7a330498cae8d67)

01:56:07 executing program 5:
semget$private(0x0, 0x2, 0x789)

01:56:07 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  844.224286][T25702] loop3: detected capacity change from 0 to 512
[  844.301357][T25702] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:08 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)=':%,!-+\x00', 0x0)
fstat(r0, &(0x7f0000000000))

01:56:08 executing program 4:
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x107142, 0x0)

01:56:08 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f00000077c0), 0x200000, 0x0)

01:56:08 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x44000, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)

01:56:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001", 0x1d, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:08 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

01:56:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:08 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000003c0), 0x8)

01:56:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x201}, 0x14}}, 0x0)

[  844.907380][   T27] audit: type=1800 audit(1661651768.089:127): pid=25716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=1170 res=0 errno=0
[  844.917844][T25719] loop3: detected capacity change from 0 to 512
01:56:08 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, &(0x7f0000000380)={'batadv_slave_0\x00'})

01:56:08 executing program 4:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_rdma(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x120008a, 0x0)

01:56:08 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@call]}, &(0x7f0000000000)='GPL\x00', 0x1, 0xba, &(0x7f00000002c0)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x43, 0x0, 0x0)

[  845.038843][T25719] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4b, 0x0, &(0x7f0000000140))

01:56:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={0x28, r1, 0x9, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

01:56:08 executing program 2:
syz_mount_image$nfs4(0x0, &(0x7f0000002100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

01:56:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4045)

01:56:08 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000100)=""/241, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x10}, 0x80)

[  845.203983][T25745] loop3: detected capacity change from 0 to 512
01:56:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={0x30, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x117, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}]}, 0x30}}, 0x0)

01:56:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0x4004556e, 0x0)

01:56:08 executing program 0:
pipe2(&(0x7f0000000000), 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f0000000080))

01:56:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  845.268363][T25745] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:08 executing program 4:
syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380))

01:56:08 executing program 0:
io_setup(0x33, &(0x7f0000000840)=<r0=>0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])

01:56:08 executing program 5:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$FIBMAP(r0, 0xc0045878, 0x0)

01:56:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:08 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x38, &(0x7f0000000080)=@srh, 0x8)

01:56:08 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8903, &(0x7f0000000380)={'batadv_slave_0\x00'})

[  845.383908][T25762] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  845.411880][T25765] loop3: detected capacity change from 0 to 512
01:56:08 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x2, &(0x7f0000000380)=@raw=[@call={0x85, 0x0, 0x0, 0x5e}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  845.443988][T25765] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:08 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000002400)='ns/uts\x00')

01:56:08 executing program 5:
socketpair(0xf, 0x0, 0x4000000, &(0x7f0000000300))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

01:56:08 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc002, &(0x7f0000000040)=@framed={{}, [@generic={0x51}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xba, &(0x7f00000002c0)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000580)=""/200, &(0x7f00000000c0)=0xc8)

01:56:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={0x28, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @val={0xc}}}}, 0x28}}, 0x0)

01:56:08 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0x40045567, &(0x7f0000000040))

01:56:08 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891e, &(0x7f0000000380)={'batadv_slave_0\x00'})

01:56:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000b80)=""/4096, &(0x7f0000000040)=0x1000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={0x24, r2, 0x9, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FTM_RESPONDER={0x4}]}, 0x24}}, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={r3, 0x0, 0x0}, 0x10)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000002c0)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @b})
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000080)='batadv0\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x700, 0x40, 0x3, 0x2, {{0x41, 0x4, 0x0, 0x1, 0x104, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x23, 0xc9, [@private=0xa010100, @loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}]}, @cipso={0x86, 0x3d, 0x3, [{0x2, 0xd, "2696231e7bbededfd6bba6"}, {0x6, 0x3, "e0"}, {0x5, 0x9, "dc7affcae41f01"}, {0x2, 0xd, "be5e182f1d0b725b51ef27"}, {0x0, 0x5, "240e9f"}, {0x7, 0x2}, {0x2, 0x3, "af"}, {0x5, 0x4, '\"G'}, {0x0, 0x3, '6'}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x8a, 0x0, 0x7, [0x5, 0x3f, 0xd4]}, @ssrr={0x89, 0x7, 0xea, [@remote]}, @cipso={0x86, 0x13, 0x3, [{0x2, 0x2}, {0x6, 0xb, "e986eff324fdb9e909"}]}, @timestamp_prespec={0x44, 0x34, 0x67, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x20}}, {@broadcast, 0x11ca207d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x1}, {@multicast1, 0x7}, {@local, 0x1}]}, @generic={0x44, 0xb, "6d2d7ef8f43d79d7d7"}, @timestamp={0x44, 0x8, 0xe0, 0x0, 0xf, [0x97]}, @timestamp={0x44, 0x18, 0xd0, 0x0, 0x3, [0x7, 0x1, 0x7, 0x40000000, 0x4f]}]}}}}})

[  845.620007][T25788] loop3: detected capacity change from 0 to 512
[  845.639256][T25788] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:08 executing program 5:
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
syz_mount_image$nfs4(&(0x7f00000020c0), &(0x7f0000002100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB])

01:56:08 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f465", 0x33, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:08 executing program 4:
r0 = fsopen(&(0x7f0000000840)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

01:56:08 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:08 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100))

01:56:08 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$FIBMAP(r0, 0x1, 0x0)

01:56:09 executing program 5:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002000), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000003940))

01:56:09 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0x4008556c, &(0x7f0000000040))

01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38030000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:09 executing program 0:
socket(0x11, 0x3, 0xfffffffa)

01:56:09 executing program 2:
io_setup(0x33, &(0x7f0000000840)=<r0=>0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xf800, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

[  845.813239][T25807] loop3: detected capacity change from 0 to 512
[  845.843781][T25807] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:09 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)

01:56:09 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$FIBMAP(r0, 0x4020940d, 0x0)

01:56:09 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f465", 0x33, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:09 executing program 0:
r0 = semget$private(0x0, 0x1, 0x0)
semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1)

01:56:09 executing program 5:
memfd_create(&(0x7f0000000080)='.log\x00', 0x2)

01:56:09 executing program 4:
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)

01:56:09 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  845.984766][T25829] loop3: detected capacity change from 0 to 512
[  846.007417][T25829] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:09 executing program 0:
r0 = getpgid(0x0)
rt_tgsigqueueinfo(0x0, r0, 0x1e, &(0x7f00000000c0)={0x0, 0x0, 0x7})

01:56:09 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f465", 0x33, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:09 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x6, 0x0, 0x0)

01:56:09 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x220001, 0x0)
fcntl$dupfd(r0, 0x0, r0)

01:56:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{0x0, 0x0, 0xfffffffffffffffa}, {&(0x7f0000000180)="820fb4390bd16c6913b1bb785d3812", 0xf}], 0x0, &(0x7f00000005c0))

01:56:09 executing program 0:
socket$inet(0x2, 0x5, 0x1ff)

01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44020000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  846.148206][T25846] loop3: detected capacity change from 0 to 512
01:56:09 executing program 5:
pipe2(&(0x7f0000000000), 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r0=>0x0})
select(0x40, &(0x7f0000000040)={0x4}, &(0x7f0000000100)={0x5}, &(0x7f0000000140)={0x8}, &(0x7f00000001c0)={r0})

01:56:09 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x1, 0x9, 0x301}, 0x14}}, 0x0)

[  846.195133][T25851] loop2: detected capacity change from 0 to 16383
[  846.213447][T25846] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:09 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000280)='GPL\x00', 0x1, 0xba, &(0x7f00000002c0)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66320100}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  846.247970][T25851] FAT-fs (loop2): bogus number of FAT structure
[  846.264441][T25851] FAT-fs (loop2): Can't find a valid FAT filesystem
01:56:09 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ff", 0x37, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:09 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'})

01:56:09 executing program 5:
io_setup(0xafb, &(0x7f0000000240))

01:56:09 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x2, &(0x7f0000000380)=@raw=[@call={0x85, 0x0, 0x0, 0x1a}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:09 executing program 2:
syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x800)

[  846.352667][T25863] loop3: detected capacity change from 0 to 512
01:56:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005440)={&(0x7f0000000b40)=@newtaction={0x1ec4, 0x30, 0x0, 0x0, 0x0, {}, [{0x1eb0, 0x1, [@m_csum={0x10c, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0xc1, 0x6, "2d68345e440e08ab6a5bebdbd93eca14e82013ea4b5c5125fe723883e2a576aa5489f70d7239ebb7c46ac774f7b77a013db1a92d904cc4e1c40a0729f4b5e6c7f11ff805c1e1192a6eea08800fbe08e8d13391174fbc0e06a405d036cccefe213918f6d794fb3d66fb62e348e28ddaacf836232030fc2c1ed6399d33b106992006985d7c34052c9b965d76c2329fb4a19ef06f2566f6dbdc3e7ae5018387531408cc81dc866332e09a1f192fb75c0f6886ee366d669149f28952d05da2"}, {0xc}, {0xc}}}, @m_tunnel_key={0xc8, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x8d, 0x6, "d72c1d9cf427ad2257d2dd8bbc2076f20c7bd01b82645ef38cc7beedda2c6644bf364a12928fb82c4090dcc788a551da38e27aca22ffbb87f019f29733d05dd68c58a3f052d9087945f7d576891e9de7a7aa4f82010f5acbfa347dcded2809cbc640e241401cac02bc2b7c299ca0ea650977e9ded494421c94a941edd9fc47506e2958e4ebcef5c6d8"}, {0xc}, {0xc}}}, @m_mpls={0x94, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0x5d, 0x6, "77ddf6b11a5a2dd9a3dd6b0997b2090af737e0ae876279b8305198cd5be371d4c71165ffce10ee361c562d00155318d56f858bf7c1c20a73f46ced6d2cbad6682454652439d8c4a3ff0d1dee8157367a9f6dffebf7ffdac641"}, {0xc}, {0xc}}}, @m_ipt={0x10ec, 0x0, 0x0, 0x0, {{0x8}, {0x1038, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x1029, 0x6, {0x0, 'filter\x00', 0x0, 0x0, "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"}}]}, {0x8d, 0x6, "fdb471336537d1389f90dfc23ed3f03af21b72a4ca6749e4e4daa4d7be67c7b8932bc4ccba4a90d79f0d053c91320133b6a4ec3c5474216a8155753761d16506bccababf4c30378e0419b2a40948846fb7052d195ad522f7d03febf989622aac17a85cc3ede9d66dc788befc87a478d29b6c96a06dc524c6fa5c07cbd2fd439cbb679fcd3a4ffeabef"}, {0xc}, {0xc}}}, @m_tunnel_key={0xe4, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xa9, 0x6, "47f6d25624e05b04d3be2b1e45697bc1ea3f138649756b9d3e89d91f423337c394f52aa5eda609ecd7203786606a8e254f388047af2d58e16995ccf1bb42038df8168f0e19aa74cc633075fa68282929e71e9634ea639da57e7bde4eb26e4426bebe15e8c268034a94a9824988cc84f523fb3553dd7ba84f3f933b70880ed80e7635f735261950959e9bcc63a2b1367f753a4a6a105af0f38ad7c36e1c04bd7f62a66069ef"}, {0xc}, {0xc}}}, @m_simple={0xac, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x8, 0x3, 'uid>'}, @TCA_DEF_DATA={0x7, 0x3, '.*\x00'}]}, {0x55, 0x6, "0e06a352a218c1499c3f39e05e879fae9d7645bb178fc86f0336aab2b2b4de028f77ad1adfe88d7e46d1b043b242fb1b000d58e8cd359ffe9ed05d3252672301ceced07ff545c7b13d6f47bed698db52a4"}, {0xc}, {0xc}}}, @m_connmark={0x9c8, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x995, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x1ec4}}, 0x0)

01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:09 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)

01:56:09 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, &(0x7f0000000380)={'batadv_slave_0\x00'})

[  846.400561][T25863] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:09 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8930, &(0x7f0000000380)={'batadv_slave_0\x00'})

01:56:09 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, 0x0}, 0x80)

01:56:09 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc06855c8, &(0x7f0000000040))

01:56:09 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ff", 0x37, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77070000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:09 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x1, 0xba, &(0x7f00000002c0)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000300))

01:56:09 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x4a, 0x0, 0x0)

01:56:09 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x6}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  846.556324][T25889] loop3: detected capacity change from 0 to 512
01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78fb0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:09 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040), 0x10)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10)

01:56:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0x4008556c, 0x0)

[  846.612499][T25895] loop4: detected capacity change from 0 to 16
[  846.638025][T25895]  loop4: unable to read partition table
01:56:09 executing program 2:
r0 = getpgid(0x0)
process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/216, 0xd8}], 0x1, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/210, 0xd2}, {&(0x7f00000004c0)=""/128, 0x80}, {0x0}], 0x3, 0x0)

[  846.660726][T25889] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801001ee}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:09 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000380)=@raw=[@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @call, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  846.689728][T25895] loop4: partition table beyond EOD, truncated
[  846.712924][T25895] FAT-fs (loop4): bogus number of reserved sectors
01:56:09 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ff", 0x37, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:09 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100), 0x8)

01:56:09 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f0000000140))

01:56:09 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xa, 0x2, &(0x7f0000000380)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:09 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801001f7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

[  846.745744][T25895] FAT-fs (loop4): Can't find a valid FAT filesystem
01:56:10 executing program 5:
pipe2(&(0x7f0000000000), 0x0)
select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x8}, &(0x7f00000001c0))

01:56:10 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x2, &(0x7f0000000380)=@raw=[@call={0x85, 0x2}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:10 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fb0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup2(r2, r0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000))
dup2(r2, r4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0})
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000001180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@weak_binder, @ptr={0x73622a85, 0x0, &(0x7f0000000100)=""/169, 0xa9}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

[  846.843145][T25919] loop3: detected capacity change from 0 to 512
[  846.857304][T25919] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:10 executing program 5:
syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0)

01:56:10 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88040000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:10 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'sit0\x00', 0x0})

[  846.898694][T25924] binder: 25923:25924 ioctl c0306201 20001480 returned -14
01:56:10 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000000680)="0300000000000000000000000000000052d094e6131e8c3a0b8d512409f029104052340136f655db6bed5db2f924ce3b1f844d2718491c52dc", 0x39, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00))

01:56:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={0x28, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @val={0xc}}}}, 0x28}}, 0x0)

[  846.949183][T25924] ------------[ cut here ]------------
[  846.983784][T25924] WARNING: CPU: 1 PID: 25924 at include/linux/mmap_lock.h:155 find_vma+0xf8/0x270
01:56:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_LABELS={0x4}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x30}}, 0x0)

01:56:10 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xff50)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x2bcf)
recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/164, 0xa4}], 0x4, &(0x7f00000005c0)=""/193, 0xc1}, 0xa6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99010000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0)

01:56:10 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x48)

[  847.007241][T25936] loop3: detected capacity change from 0 to 512
[  847.019119][T25924] Modules linked in:
[  847.044012][T25924] CPU: 1 PID: 25924 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-00248-ge022620b5d05 #0
01:56:10 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x7)

01:56:10 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x48}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:56:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0)

[  847.044955][ T2970] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  847.093461][T25924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[  847.122644][ T2970] Buffer I/O error on dev loop3, logical block 0, async page read
[  847.145239][ T2970]  loop3: unable to read partition table
[  847.149796][T25924] RIP: 0010:find_vma+0xf8/0x270
[  847.166411][T25936] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  847.174548][T25924] Code: 49 8d bc 24 28 01 00 00 be ff ff ff ff e8 30 2f c8 07 31 ff 89 c3 89 c6 e8 25 d5 c4 ff 85 db 0f 85 61 ff ff ff e8 58 d8 c4 ff <0f> 0b e9 55 ff ff ff e8 4c d8 c4 ff 4c 89 e7 e8 04 32 fb ff 0f 0b
[  847.201101][T25924] RSP: 0018:ffffc9000b02f530 EFLAGS: 00010212
[  847.207422][T25924] RAX: 000000000000234d RBX: 0000000000000000 RCX: ffffc9000d166000
[  847.215795][T25924] RDX: 0000000000040000 RSI: ffffffff81b732a8 RDI: 0000000000000005
[  847.224445][T25924] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000
[  847.233177][T25924] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888020afb800
[  847.242396][T25924] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000058
[  847.259247][T25924] FS:  00007f6f1d40c700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[  847.278818][T25924] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  847.285979][T25924] CR2: 00007f46f8f98000 CR3: 00000000202d1000 CR4: 0000000000350ee0
[  847.294927][T25924] Call Trace:
[  847.298678][T25924]  <TASK>
[  847.302020][T25924]  binder_alloc_new_buf+0xd6/0x18b0
[  847.307498][T25924]  binder_transaction+0x242e/0x9a80
[  847.314004][T25924]  ? is_bpf_text_address+0x77/0x170
[  847.319564][T25924]  ? __lock_acquire+0x166e/0x56d0
[  847.325251][T25924]  ? binder_deferred_func+0x1150/0x1150
[  847.331294][T25924]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  847.337575][T25924]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  847.344174][T25924]  ? arch_stack_walk+0x93/0xe0
[  847.349800][T25924]  ? find_held_lock+0x2d/0x110
[  847.355254][T25924]  ? __might_fault+0xd1/0x170
[  847.360265][T25924]  ? lock_downgrade+0x6e0/0x6e0
[  847.367013][T25924]  binder_thread_write+0x8a9/0x3220
[  847.372893][T25924]  ? binder_transaction+0x9a80/0x9a80
[  847.378549][T25924]  ? find_held_lock+0x2d/0x110
[  847.383861][T25924]  ? binder_debug+0xb2/0x160
[  847.388742][T25924]  ? __traceiter_binder_return+0xa0/0xa0
[  847.395034][T25924]  ? lock_downgrade+0x6e0/0x6e0
[  847.400101][T25924]  binder_ioctl+0x3470/0x6d00
[  847.408630][T25924]  ? tomoyo_path_number_perm+0x24e/0x590
[  847.414826][T25924]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  847.421225][T25924]  ? __sanitizer_cov_trace_switch+0x50/0x90
[  847.427409][T25924]  ? binder_thread_write+0x3220/0x3220
[  847.433544][T25924]  ? do_vfs_ioctl+0x132/0x15c0
[  847.438472][T25924]  ? vfs_fileattr_set+0xbe0/0xbe0
[  847.444198][T25924]  ? __ct_user_exit+0xff/0x150
[  847.449256][T25924]  ? __fget_files+0x26a/0x440
[  847.454541][T25924]  ? bpf_lsm_file_ioctl+0x5/0x10
[  847.459798][T25924]  ? binder_thread_write+0x3220/0x3220
[  847.465886][T25924]  __x64_sys_ioctl+0x193/0x200
[  847.472323][T25924]  do_syscall_64+0x35/0xb0
[  847.477016][T25924]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  847.483676][T25924] RIP: 0033:0x7f6f1c289279
[  847.488200][T25924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  847.508663][T25924] RSP: 002b:00007f6f1d40c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  847.517571][T25924] RAX: ffffffffffffffda RBX: 00007f6f1c39bf80 RCX: 00007f6f1c289279
[  847.526173][T25924] RDX: 0000000020000680 RSI: 00000000c0306201 RDI: 0000000000000004
[  847.534938][T25924] RBP: 00007f6f1c2e3189 R08: 0000000000000000 R09: 0000000000000000
[  847.543459][T25924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  847.552846][T25924] R13: 00007ffe91457c8f R14: 00007f6f1d40c300 R15: 0000000000022000
[  847.566865][T25924]  </TASK>
[  847.570154][T25924] Kernel panic - not syncing: panic_on_warn set ...
[  847.576759][T25924] CPU: 1 PID: 25924 Comm: syz-executor.0 Not tainted 6.0.0-rc2-syzkaller-00248-ge022620b5d05 #0
[  847.587283][T25924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[  847.597462][T25924] Call Trace:
[  847.600772][T25924]  <TASK>
[  847.603989][T25924]  dump_stack_lvl+0xcd/0x134
[  847.608614][T25924]  panic+0x2c8/0x627
[  847.612557][T25924]  ? panic_print_sys_info.part.0+0x10b/0x10b
[  847.618573][T25924]  ? __warn.cold+0x248/0x2c4
[  847.623192][T25924]  ? find_vma+0xf8/0x270
[  847.627451][T25924]  __warn.cold+0x259/0x2c4
[  847.631981][T25924]  ? find_vma+0xf8/0x270
[  847.636248][T25924]  report_bug+0x1bc/0x210
[  847.640613][T25924]  handle_bug+0x3c/0x60
[  847.644800][T25924]  exc_invalid_op+0x14/0x40
[  847.649330][T25924]  asm_exc_invalid_op+0x16/0x20
[  847.654203][T25924] RIP: 0010:find_vma+0xf8/0x270
[  847.659172][T25924] Code: 49 8d bc 24 28 01 00 00 be ff ff ff ff e8 30 2f c8 07 31 ff 89 c3 89 c6 e8 25 d5 c4 ff 85 db 0f 85 61 ff ff ff e8 58 d8 c4 ff <0f> 0b e9 55 ff ff ff e8 4c d8 c4 ff 4c 89 e7 e8 04 32 fb ff 0f 0b
[  847.678981][T25924] RSP: 0018:ffffc9000b02f530 EFLAGS: 00010212
[  847.685162][T25924] RAX: 000000000000234d RBX: 0000000000000000 RCX: ffffc9000d166000
[  847.693237][T25924] RDX: 0000000000040000 RSI: ffffffff81b732a8 RDI: 0000000000000005
[  847.701227][T25924] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000
[  847.709397][T25924] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888020afb800
[  847.717397][T25924] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000058
[  847.725401][T25924]  ? find_vma+0xf8/0x270
[  847.729684][T25924]  binder_alloc_new_buf+0xd6/0x18b0
[  847.734929][T25924]  binder_transaction+0x242e/0x9a80
[  847.740173][T25924]  ? is_bpf_text_address+0x77/0x170
[  847.745486][T25924]  ? __lock_acquire+0x166e/0x56d0
[  847.750518][T25924]  ? binder_deferred_func+0x1150/0x1150
[  847.756087][T25924]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  847.762093][T25924]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  847.768108][T25924]  ? arch_stack_walk+0x93/0xe0
[  847.772900][T25924]  ? find_held_lock+0x2d/0x110
[  847.777686][T25924]  ? __might_fault+0xd1/0x170
[  847.782395][T25924]  ? lock_downgrade+0x6e0/0x6e0
[  847.787550][T25924]  binder_thread_write+0x8a9/0x3220
[  847.792881][T25924]  ? binder_transaction+0x9a80/0x9a80
[  847.798289][T25924]  ? find_held_lock+0x2d/0x110
[  847.803074][T25924]  ? binder_debug+0xb2/0x160
[  847.807691][T25924]  ? __traceiter_binder_return+0xa0/0xa0
[  847.813362][T25924]  ? lock_downgrade+0x6e0/0x6e0
[  847.818259][T25924]  binder_ioctl+0x3470/0x6d00
[  847.823140][T25924]  ? tomoyo_path_number_perm+0x24e/0x590
[  847.828799][T25924]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  847.834729][T25924]  ? __sanitizer_cov_trace_switch+0x50/0x90
[  847.840664][T25924]  ? binder_thread_write+0x3220/0x3220
[  847.846141][T25924]  ? do_vfs_ioctl+0x132/0x15c0
[  847.850930][T25924]  ? vfs_fileattr_set+0xbe0/0xbe0
[  847.855992][T25924]  ? __ct_user_exit+0xff/0x150
[  847.861248][T25924]  ? __fget_files+0x26a/0x440
[  847.865973][T25924]  ? bpf_lsm_file_ioctl+0x5/0x10
[  847.870928][T25924]  ? binder_thread_write+0x3220/0x3220
[  847.876405][T25924]  __x64_sys_ioctl+0x193/0x200
[  847.881192][T25924]  do_syscall_64+0x35/0xb0
[  847.885631][T25924]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  847.891548][T25924] RIP: 0033:0x7f6f1c289279
[  847.895981][T25924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  847.915701][T25924] RSP: 002b:00007f6f1d40c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  847.924136][T25924] RAX: ffffffffffffffda RBX: 00007f6f1c39bf80 RCX: 00007f6f1c289279
[  847.932122][T25924] RDX: 0000000020000680 RSI: 00000000c0306201 RDI: 0000000000000004
[  847.940115][T25924] RBP: 00007f6f1c2e3189 R08: 0000000000000000 R09: 0000000000000000
[  847.948102][T25924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  847.956088][T25924] R13: 00007ffe91457c8f R14: 00007f6f1d40c300 R15: 0000000000022000
[  847.964089][T25924]  </TASK>
[  847.967387][T25924] Kernel Offset: disabled
[  847.971908][T25924] Rebooting in 86400 seconds..