last executing test programs:

16.392816913s ago: executing program 2 (id=494):
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000280)={0x3, 'veth1_to_hsr\x00', {0x7}, 0x2})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c)
close(r0)

15.334239235s ago: executing program 2 (id=496):
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x9b, &(0x7f0000000380)={0x0, 0xa53a, 0x0, 0x0, 0x22c}, &(0x7f0000000280), &(0x7f00000001c0), &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
unlinkat(0xffffffffffffffff, 0x0, 0x200)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb, 0x0, 0xfffffffffffffffa}}}, 0xb8}}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8], 0x1, 0x1df, &(0x7f00000002c0)="$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")
sendmsg$inet(0xffffffffffffffff, 0x0, 0x804)

14.281561806s ago: executing program 3 (id=499):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0)

11.664151427s ago: executing program 0 (id=503):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10.446243881s ago: executing program 0 (id=505):
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000280)={0x3, 'veth1_to_hsr\x00', {0x7}, 0x2})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c)
close(r0)

10.424486671s ago: executing program 2 (id=506):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
shmget(0x0, 0x2000, 0x64, &(0x7f0000ffc000/0x2000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x4, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000780), 0x0}, 0x20)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x21, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x8})

10.027301755s ago: executing program 3 (id=508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x8040)

9.61147768s ago: executing program 3 (id=511):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x81)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r4}, 0x38)

9.58246724s ago: executing program 2 (id=512):
r0 = socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
chdir(&(0x7f0000000000)='./file0\x00')
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f00000001c0)={{0x7d3117e6, 0x1}, {0x3, 0x67fb}, 0x681})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4)
r5 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0})

8.798123129s ago: executing program 0 (id=513):
syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x2, &(0x7f00000004c0)={[], [{@dont_hash}, {@appraise_type}]}, 0x1, 0x7a7, &(0x7f00000011c0)="$eJzs3ctrXFUYAPDvTpKmSauJIGhdBQQNlE5Mja2Ci4oLESwUdG0bJtNQM8mUzKQ0IYsWEdwIKi6EuunaR9259bHV/8KFtFRNi7UuJHLn0UybmXTSJjOV+f3gZs65j5z73XMf5865zA2gZ42lfzIRByLi4yRipDY+iYiBSqo/4lh1vltrq7l0SGJ9/e0/kso8N9dWc9GwTGpfLfN0RPz4QcTBzOZyS8src9OFQn6xlp8oz5+dKC2vHDozPz2bn80vHJmcmjp89KWjR3Yu1r9+Wdl/7ZM3nv/m2D/vP3Xlo5+SOBb7a9Ma49gpYzFW2yYD6Sa8y+s7XViXJe3O2GRfoHvS6uirHuVxIEair5JqYaiTawYA7JZ1AKAHJdoAANBj6t8D3FxbzdWH7n4j0VnXX4uIvdX46/2b1Sn9tT67vZV+0OGbyV09I0lEjO5A+WMR8cV3736VDlGrhzb70vSkAQ/lwsWIODU6tvn8n2x6ZqGVvhbjX9hqofXBysfYPaN77foD3fR92v55OeLS7Y02YHVK5k77J5q0fwabHLsP4v7Hf+bqDhTTUtr+e7Xh2bZbDfFXXRxNz2+Z2+vxWKXNN5CcPlPIp+e2xyNiPAYG0/xkZd7mLbfxG//eaFV+Y/vvz0/f+zItP/3cmCNztX/w7mVmpsvTDx14zfWLEc/0N4s/uVP/SYv274k2y3jzlQ8vtZqWxp/GWx82x7+71i9HPNe0/jfqMtny+cSJyu4wUd8pmvj218+HW5XfWP/pkJZfvxfohLT+h7eOfzRpfF6ztP0yfr488kOrafePv/n+vyd5p5LeUxt3frpcXpyM2JO8tXn84Y1l6/n6/Gn84882P/6rxTbf/9N7wlNtxt9/7fevHzz+3ZXGP7Ot+t9+4sqtuVZNxDbrf6qSGq+Naef81+4KPsy2AwAAAAAAAAAAAAAAAAAAAAAAAIB2ZSJifySZ7J10JpPNVt/h/WQMZwrFUvng6eLSwkxU3pU9GgOZ+k9djjT8Hupk7ffw6/nD9+RfjIgnIuKzwaFKPpsrFma6HTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1Oxr8f7/1G+D3V47AGDX7O32CgAAHef6DwC9Z3vX/6FdWw8AoHPc/wNA72n7+n9qd9cDAOgc9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsshPHj6fD+t9rq7k0P3NueWmueO7QTL40l51fymVzxcWz2dlicbaQz+aK89Wlks3/6EL1o1Asnp2KhaXzE+V8qTxRWl45OV9cWiifPDM/PZs/mR/oaHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0J7S8srcdKGQX5TYMjFUT/RFRNtL9de28qMSxc4l+tvfCNtM9D0aAfZ8ovEsMdSdkxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8B/AQAA//9+FCmr")
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file0\x00', 0x1200, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="b669f5d445082f011ac7", 0xa}], 0x1}, 0x4048081)
connect$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x1, {0x0, 0x1, 0x1}}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x1, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

7.87987288s ago: executing program 1 (id=514):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$nl_route_sched(r0, 0x0, 0x8000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.049370511s ago: executing program 3 (id=515):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0xafc, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x9bc, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x61, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e4"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x18c, 0x4, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x4, 'raw\x00', 0x7, 0x4, "4070d816b2e2b86206153d2099337b573c937fa2ca34882b17113ed3c465520b806c3d96367add9babdeb611d80920dbbac392f8caf0b228c5a13589c930e501809c55c053b1ff"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0xa1, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x3a0, 0x11, 0x0, 0x0, {{0x8}, {0x2c0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x10e, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "f0f8f66d602b6783655db39e1cc948a0421e5d1393f4cd635a25e30c1719f35655ebc220059a6505e7e8de74849c425e9217e4cc351477cb2a445b66dd468c00d32929d5f3c2ea9992c262f0d79d8d361d1556aa1b2e21c4f045af07d8fce62f3493ce450ef47273cf7908ed5026fd1b3a1cab1153f7eb0951daf2fe6068caa1c0009c82e29554c3e1e140318de7fe69d9f0ddfdf3e804596a90bd3292606e9c5e6bffa8eada25e7a7a23c72de1fe7524021e6d1598794e26d97e911adedaa05aabcc10c14d11c93b0573a89b82b3dc20539d38bc5cbcbeb2b05ec5b2ec752f0d774c4c8"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe9, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb966f1087ad5ff211"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x64, 0x1, [@m_ipt={0x60, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x35, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d81"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}, {0x90, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x60, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x40, 'security\x00', 0x5}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x30, 0x1, [@m_ipt={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xafc}, 0x1, 0x0, 0x0, 0x8004}, 0x880)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.031468911s ago: executing program 1 (id=516):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8180000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

6.013001421s ago: executing program 0 (id=517):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0)

5.895647313s ago: executing program 2 (id=518):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"})
ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b"])
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"})
getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESHEX=r3], 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028005001600000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x8040)
memfd_secret(0x0)
ppoll(0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0)

5.25181513s ago: executing program 3 (id=519):
syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x2, &(0x7f00000004c0)={[], [{@dont_hash}, {@appraise_type}]}, 0x1, 0x7a7, &(0x7f00000011c0)="$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")
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file0\x00', 0x1200, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="b669f5d445082f011ac7", 0xa}], 0x1}, 0x4048081)
connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x1, {0x0, 0x1, 0x1}}, 0x18)

4.522623088s ago: executing program 1 (id=520):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a"], 0x50}}, 0x8040)

3.591294109s ago: executing program 1 (id=521):
r0 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x200000000000000)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xfdffffffffffffff)

3.586070249s ago: executing program 3 (id=522):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400)
r6 = dup(r4)
inotify_rm_watch(r6, r5)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10)
r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1})
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa8aaaaa00bb08804500001c000000"], 0x0)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="4500005800000000002f9078000000e0e000c800b48065580000000010000800000086c3080088be000000001000000088f7ffff00000000080022eb00000000200000000200000000000000000000000800655800000000eec28beb3340611bc803979560fe2fd0e2351cd24b0335eb6ffcbc6f166b11215ae40f7266ef7ed01368eb7fc1a620f9aedd92d5fae6177f6f3eea52c10e38436e5f470b920ee987ea53c89b0b354cf618f2a862dd99ec2fb79ae6d309a6a5eee9e40c4e8ce108d040678ec72d81b36b5f25be63f5d4f855"], 0x0)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180a0000000000000000000000000000850000006600000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

3.388927031s ago: executing program 1 (id=523):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x81)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r4}, 0x38)

3.244374413s ago: executing program 0 (id=524):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$nl_route_sched(r0, 0x0, 0x8000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.73496937s ago: executing program 0 (id=525):
syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x2, &(0x7f00000004c0)={[], [{@dont_hash}, {@appraise_type}]}, 0x1, 0x7a7, &(0x7f00000011c0)="$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")
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file0\x00', 0x1200, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="b669f5d445082f011ac7", 0xa}], 0x1}, 0x4048081)

729.366291ms ago: executing program 2 (id=526):
r0 = socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f00000001c0)={{0x7d3117e6, 0x1}, {0x3, 0x67fb}, 0x681})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4)
r5 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0})

0s ago: executing program 1 (id=527):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0xafc, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x9bc, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x61, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e4"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x18c, 0x4, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x4, 'raw\x00', 0x7, 0x4, "4070d816b2e2b86206153d2099337b573c937fa2ca34882b17113ed3c465520b806c3d96367add9babdeb611d80920dbbac392f8caf0b228c5a13589c930e501809c55c053b1ff"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0xa1, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x3a0, 0x11, 0x0, 0x0, {{0x8}, {0x2c0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x10e, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "f0f8f66d602b6783655db39e1cc948a0421e5d1393f4cd635a25e30c1719f35655ebc220059a6505e7e8de74849c425e9217e4cc351477cb2a445b66dd468c00d32929d5f3c2ea9992c262f0d79d8d361d1556aa1b2e21c4f045af07d8fce62f3493ce450ef47273cf7908ed5026fd1b3a1cab1153f7eb0951daf2fe6068caa1c0009c82e29554c3e1e140318de7fe69d9f0ddfdf3e804596a90bd3292606e9c5e6bffa8eada25e7a7a23c72de1fe7524021e6d1598794e26d97e911adedaa05aabcc10c14d11c93b0573a89b82b3dc20539d38bc5cbcbeb2b05ec5b2ec752f0d774c4c8"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe9, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb966f1087ad5ff211"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x64, 0x1, [@m_ipt={0x60, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x35, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d81"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}, {0x90, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x60, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x40, 'security\x00', 0x5}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x30, 0x1, [@m_ipt={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xafc}, 0x1, 0x0, 0x0, 0x8004}, 0x880)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts.
[   80.222568][ T5762] cgroup: Unknown subsys name 'net'
[   80.362029][ T5762] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.990527][ T5762] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.621676][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.629855][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.638380][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.646669][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.654471][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.663268][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.688295][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.715476][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.730603][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.734330][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.742873][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.752242][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.757687][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.767136][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   83.775477][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.778137][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.790906][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.795780][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   83.801249][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.805380][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   83.816452][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.822983][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   83.832841][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.834327][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.290894][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   84.403715][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   84.459981][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   84.505336][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   84.564165][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.572086][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.579576][ T5775] bridge_slave_0: entered allmulticast mode
[   84.586788][ T5775] bridge_slave_0: entered promiscuous mode
[   84.597745][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.604967][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.612161][ T5775] bridge_slave_1: entered allmulticast mode
[   84.619484][ T5775] bridge_slave_1: entered promiscuous mode
[   84.749599][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.756903][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.764575][ T5773] bridge_slave_0: entered allmulticast mode
[   84.772050][ T5773] bridge_slave_0: entered promiscuous mode
[   84.785137][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.792325][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.799647][ T5776] bridge_slave_0: entered allmulticast mode
[   84.807234][ T5776] bridge_slave_0: entered promiscuous mode
[   84.815901][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.823071][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.830558][ T5776] bridge_slave_1: entered allmulticast mode
[   84.838066][ T5776] bridge_slave_1: entered promiscuous mode
[   84.848312][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.858058][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.868670][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.875988][ T5773] bridge_slave_1: entered allmulticast mode
[   84.883070][ T5773] bridge_slave_1: entered promiscuous mode
[   84.927528][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.989980][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.997315][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.004755][ T5774] bridge_slave_0: entered allmulticast mode
[   85.011784][ T5774] bridge_slave_0: entered promiscuous mode
[   85.022979][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.035495][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.051433][ T5775] team0: Port device team_slave_0 added
[   85.062090][ T5775] team0: Port device team_slave_1 added
[   85.071788][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.082310][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.089803][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.097744][ T5774] bridge_slave_1: entered allmulticast mode
[   85.105232][ T5774] bridge_slave_1: entered promiscuous mode
[   85.148462][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.207943][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.230309][ T5773] team0: Port device team_slave_0 added
[   85.237502][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.247908][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.276949][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.292172][ T5776] team0: Port device team_slave_0 added
[   85.300914][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.321174][ T5773] team0: Port device team_slave_1 added
[   85.339221][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.346441][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.375093][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.395385][ T5776] team0: Port device team_slave_1 added
[   85.439694][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.447505][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.478697][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.521532][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.529042][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.555269][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.567477][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.576054][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.602439][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.615923][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.622930][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.649256][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.663482][ T5774] team0: Port device team_slave_0 added
[   85.696770][ T5774] team0: Port device team_slave_1 added
[   85.711876][ T5775] hsr_slave_0: entered promiscuous mode
[   85.718521][ T5775] hsr_slave_1: entered promiscuous mode
[   85.778547][ T5776] hsr_slave_0: entered promiscuous mode
[   85.785235][ T5776] hsr_slave_1: entered promiscuous mode
[   85.791348][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.799377][ T5776] Cannot create hsr debugfs directory
[   85.839684][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.846808][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.873106][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.895612][ T5773] hsr_slave_0: entered promiscuous mode
[   85.902110][ T5773] hsr_slave_1: entered promiscuous mode
[   85.909091][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.917519][ T5773] Cannot create hsr debugfs directory
[   85.934878][ T5787] Bluetooth: hci2: command tx timeout
[   85.940112][   T51] Bluetooth: hci1: command tx timeout
[   85.940719][ T5787] Bluetooth: hci3: command tx timeout
[   85.946726][   T51] Bluetooth: hci0: command tx timeout
[   85.959856][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.967152][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.993232][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.076303][ T5774] hsr_slave_0: entered promiscuous mode
[   86.083142][ T5774] hsr_slave_1: entered promiscuous mode
[   86.091180][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.098931][ T5774] Cannot create hsr debugfs directory
[   86.494148][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.512788][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.525303][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.536654][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.604717][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.621506][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.642827][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.656682][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.732854][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.756429][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.769992][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.780479][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.895077][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.907012][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.935250][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.947857][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.065746][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.117057][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.157049][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.210295][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   87.226385][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   87.251005][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   87.281196][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.288682][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.326882][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.334106][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.356140][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.363300][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.395649][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.402857][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.419824][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.427091][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.467905][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.475230][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.592907][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.746929][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   87.838653][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.845932][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.880292][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.887543][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.014458][ T5786] Bluetooth: hci1: command tx timeout
[   88.019128][ T5787] Bluetooth: hci2: command tx timeout
[   88.025188][ T5786] Bluetooth: hci0: command tx timeout
[   88.030942][   T51] Bluetooth: hci3: command tx timeout
[   88.250559][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.300772][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.332030][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.392518][ T5773] veth0_vlan: entered promiscuous mode
[   88.469896][ T5776] veth0_vlan: entered promiscuous mode
[   88.479663][ T5775] veth0_vlan: entered promiscuous mode
[   88.491428][ T5773] veth1_vlan: entered promiscuous mode
[   88.514315][ T5776] veth1_vlan: entered promiscuous mode
[   88.529581][ T5775] veth1_vlan: entered promiscuous mode
[   88.561076][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.622449][ T5773] veth0_macvtap: entered promiscuous mode
[   88.642831][ T5776] veth0_macvtap: entered promiscuous mode
[   88.659333][ T5773] veth1_macvtap: entered promiscuous mode
[   88.668252][ T5776] veth1_macvtap: entered promiscuous mode
[   88.707738][ T5775] veth0_macvtap: entered promiscuous mode
[   88.738151][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.755541][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.766978][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.778377][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.792019][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.802014][ T5774] veth0_vlan: entered promiscuous mode
[   88.812524][ T5775] veth1_macvtap: entered promiscuous mode
[   88.835676][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.846277][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.858822][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.872517][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.883277][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.892377][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.901373][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.919083][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.928266][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.938123][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.947036][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.961779][ T5774] veth1_vlan: entered promiscuous mode
[   89.028188][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.042384][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.060510][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.071129][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.083437][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.129299][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.141829][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.152184][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.162928][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.176024][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.223331][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.226801][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.235314][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.250188][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.257934][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.260189][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.340362][ T5774] veth0_macvtap: entered promiscuous mode
[   89.357325][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.371853][ T5774] veth1_macvtap: entered promiscuous mode
[   89.385454][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.469807][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.481021][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.489593][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.504695][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.517383][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.527252][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.537670][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.556815][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.567333][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.578199][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.589754][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.605367][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.641400][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.652413][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.663159][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.673091][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.687560][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.705685][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.756605][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.772456][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.782539][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.791914][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.811525][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.856450][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.930696][ T5840] syz.2.3[5840]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   89.986778][ T5840] loop2: detected capacity change from 0 to 512
[   90.023220][ T5842] loop1: detected capacity change from 0 to 512
[   90.045985][ T5840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   90.068721][ T5842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   90.086340][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.102175][   T51] Bluetooth: hci2: command tx timeout
[   90.110479][   T51] Bluetooth: hci3: command tx timeout
[   90.116100][ T5786] Bluetooth: hci0: command tx timeout
[   90.116675][ T5787] Bluetooth: hci1: command tx timeout
[   90.157673][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.177027][ T5840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.191437][ T5842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.210076][ T5840] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.221268][ T5842] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.344008][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.520016][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.958243][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.014534][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.020377][ T5859] loop3: detected capacity change from 0 to 1024
[   92.079174][ T5859] EXT4-fs: Ignoring removed orlov option
[   92.111588][ T5859] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   92.224147][ T5787] Bluetooth: hci3: command tx timeout
[   92.229646][ T5787] Bluetooth: hci0: command tx timeout
[   92.235686][ T5787] Bluetooth: hci2: command tx timeout
[   92.241134][ T5787] Bluetooth: hci1: command tx timeout
[   92.253398][  T787] cfg80211: failed to load regulatory.db
[   92.285932][ T5859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.342251][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.421096][ T5859] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET)
[   92.454740][ T5863] loop0: detected capacity change from 0 to 1024
[   92.503179][ T5863] EXT4-fs: Ignoring removed orlov option
[   92.616392][ T5863] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   92.712220][ T5863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.785432][ T5869] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure
[   92.882057][ T5865] loop2: detected capacity change from 0 to 1024
[   92.905475][ T5869] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   92.919187][ T5869] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.4: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   92.973574][ T5869] EXT4-fs (loop3): Remounting filesystem read-only
[   93.128376][ T5865] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.458304][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.469141][ T5865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.996160][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.546365][ T5887] syz_tun: entered allmulticast mode
[   95.765620][ T5882] syz_tun: left allmulticast mode
[   96.727437][ T5897] loop3: detected capacity change from 0 to 8
[   97.344324][ T5899] Bluetooth: MGMT ver 1.22
[   97.370273][ T5899] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[   97.399622][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.472899][ T5907] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   98.472899][ T5907] The task syz.2.15 (5907) triggered the difference, watch for misbehavior.
[   98.879431][ T5914] loop3: detected capacity change from 0 to 1024
[   98.894577][ T5914] EXT4-fs: Ignoring removed nomblk_io_submit option
[   98.951871][ T5914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.504378][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.590877][ T5924] loop0: detected capacity change from 0 to 1024
[   99.602956][ T5924] EXT4-fs: Ignoring removed orlov option
[   99.617048][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.643822][ T5924] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   99.708652][ T5924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.019249][ T5936] loop2: detected capacity change from 0 to 256
[  101.228215][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.351898][ T5954] loop1: detected capacity change from 0 to 512
[  102.368700][ T5954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.431273][ T5954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.474414][ T5954] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.956936][ T5962] loop3: detected capacity change from 0 to 512
[  102.980965][ T5962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  103.033311][ T5962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.157961][ T5962] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.536598][ T5969] loop0: detected capacity change from 0 to 8
[  104.267051][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.388441][ T5974] loop3: detected capacity change from 0 to 1024
[  104.414084][ T5974] EXT4-fs: Ignoring removed orlov option
[  104.427676][ T5974] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  104.464673][ T5974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.635937][ T5981] autofs4:pid:5981:autofs_fill_super: called with bogus options
[  104.757078][ T5983] loop0: detected capacity change from 0 to 256
[  105.973411][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.233639][    C0] sched: RT throttling activated
[  108.375668][ T6005] loop0: detected capacity change from 0 to 512
[  108.425978][ T6005] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  108.508838][ T6005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.583113][ T6005] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.996859][ T6015] autofs4:pid:6015:autofs_fill_super: called with bogus options
[  109.133209][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.172684][ T6019] loop3: detected capacity change from 0 to 256
[  110.369539][ T6031] Zero length message leads to an empty skb
[  111.964397][ T6045] autofs4:pid:6045:autofs_fill_super: called with bogus options
[  112.133979][ T6047] loop0: detected capacity change from 0 to 512
[  112.195615][ T6047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  112.550355][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.650428][ T6047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.863860][ T6047] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.281252][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.482196][ T6063] loop1: detected capacity change from 0 to 256
[  116.296581][ T6085] loop3: detected capacity change from 0 to 512
[  116.324422][ T6085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  116.439079][ T6085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.553931][ T6085] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.774111][    T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  117.015628][    T8] usb 1-1: Using ep0 maxpacket: 16
[  117.034924][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.060100][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  117.084068][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  117.107217][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  117.127331][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.158583][    T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  117.170273][    T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  117.201797][    T8] usb 1-1: Manufacturer: syz
[  117.263112][    T8] usb 1-1: config 0 descriptor??
[  117.324180][ T6105] loop1: detected capacity change from 0 to 512
[  117.343402][ T6105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.382132][ T6105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.473599][ T6105] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.643839][    T8] rc_core: IR keymap rc-hauppauge not found
[  117.670952][    T8] Registered IR keymap rc-empty
[  117.709800][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  117.795003][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  118.534320][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.231111][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  119.773449][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5
[  119.896441][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  119.973864][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  120.013957][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  120.055657][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  120.095640][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  120.154799][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  120.194991][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  120.234140][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  120.282063][ T6132] loop1: detected capacity change from 0 to 1024
[  120.288725][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  120.298025][ T6132] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.425738][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  120.517249][    T8] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  120.570753][ T6132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.604825][    T8] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  120.668829][ T6138] loop0: detected capacity change from 0 to 256
[  120.713508][    T8] usb 1-1: USB disconnect, device number 2
[  121.935973][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.537471][ T5778] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  122.783884][ T5778] usb 3-1: Using ep0 maxpacket: 16
[  122.798787][ T5778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.820468][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  122.847707][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  122.873913][ T5778] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  122.894091][ T5778] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.915364][ T5778] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  122.933710][ T5778] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  122.941803][ T5778] usb 3-1: Manufacturer: syz
[  122.960303][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.988833][ T5778] usb 3-1: config 0 descriptor??
[  123.304601][ T5778] rc_core: IR keymap rc-hauppauge not found
[  123.310681][ T5778] Registered IR keymap rc-empty
[  123.341118][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  123.413898][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  123.488158][ T5778] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  123.716828][ T5778] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6
[  123.778395][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  123.854406][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  123.878026][ T6175] loop3: detected capacity change from 0 to 1024
[  123.900086][ T6175] EXT4-fs: Ignoring removed nomblk_io_submit option
[  123.914276][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  123.964010][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  123.998085][ T6175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.031491][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  124.100739][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  124.768260][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  124.814350][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  124.894362][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  124.948806][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  124.991941][ T6185] loop1: detected capacity change from 0 to 1024
[  125.015675][ T5778] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  125.039714][ T6187] loop0: detected capacity change from 0 to 256
[  125.050178][ T6185] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.104878][ T5778] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  125.264335][ T5778] usb 3-1: USB disconnect, device number 2
[  125.317132][ T6185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.215086][ T6194] loop2: detected capacity change from 0 to 512
[  126.254231][ T6194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  126.304190][ T6194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.501465][ T6194] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.839909][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.733482][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.111096][ T6214] loop0: detected capacity change from 0 to 256
[  128.610890][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.053802][ T5822] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  129.423854][ T5822] usb 2-1: Using ep0 maxpacket: 16
[  129.435742][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.551620][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  129.565014][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  129.576208][ T5822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  129.588097][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  129.622667][ T6229] usb usb5: usbfs: process 6229 (syz.2.105) did not claim interface 0 before use
[  129.645460][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'.
[  129.654639][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'.
[  129.923264][ T5822] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  130.172519][ T5822] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  130.204128][ T5822] usb 2-1: Manufacturer: syz
[  130.322863][ T5822] usb 2-1: config 0 descriptor??
[  130.620397][ T6242] loop0: detected capacity change from 0 to 256
[  130.915130][ T5822] rc_core: IR keymap rc-hauppauge not found
[  130.968037][ T5822] Registered IR keymap rc-empty
[  131.080661][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.219700][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.285021][ T5822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  131.521049][ T5822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  131.774499][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.814080][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  132.306077][ T6256] loop0: detected capacity change from 0 to 256
[  132.763787][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  132.993862][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  133.000565][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  133.011548][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.043969][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.074415][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.108866][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.153757][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.193761][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.233772][ T5822] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.275325][ T5822] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  133.292567][ T5822] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  133.322667][ T5822] usb 2-1: USB disconnect, device number 2
[  135.791682][ T6291] loop0: detected capacity change from 0 to 512
[  135.829047][ T6291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  135.924111][ T6291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.005363][ T6291] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.523724][ T5822] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  136.863727][ T5822] usb 3-1: Using ep0 maxpacket: 16
[  136.871311][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.881864][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  136.893118][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  137.639623][ T5822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  137.649756][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  137.725738][ T5822] usb 3-1: string descriptor 0 read error: -71
[  137.732039][ T5822] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  137.780405][ T5822] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  137.809675][ T5822] usb 3-1: config 0 descriptor??
[  137.824724][ T5822] usb 3-1: can't set config #0, error -71
[  137.840818][ T5822] usb 3-1: USB disconnect, device number 3
[  139.261209][ T6325] loop3: detected capacity change from 0 to 256
[  142.043819][ T5778] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  142.253686][ T5778] usb 3-1: Using ep0 maxpacket: 16
[  142.264605][ T5778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.289289][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  142.320383][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  142.346768][ T5778] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  142.376450][ T5778] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  142.416552][ T5778] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  142.439132][ T5778] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  142.658088][ T5778] usb 3-1: Manufacturer: syz
[  142.674909][ T5778] usb 3-1: config 0 descriptor??
[  143.843715][ T5778] rc_core: IR keymap rc-hauppauge not found
[  143.849807][ T5778] Registered IR keymap rc-empty
[  143.874238][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  143.904210][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  143.974093][ T5778] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  144.098358][ T5778] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8
[  144.426557][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  144.483093][    C0] rc rc0: IR event FIFO is full!
[  144.488232][    C0] rc rc0: IR event FIFO is full!
[  144.493214][    C0] rc rc0: IR event FIFO is full!
[  144.499306][    C0] rc rc0: IR event FIFO is full!
[  144.504311][    C0] rc rc0: IR event FIFO is full!
[  144.509305][    C0] rc rc0: IR event FIFO is full!
[  144.514282][    C0] rc rc0: IR event FIFO is full!
[  144.519277][    C0] rc rc0: IR event FIFO is full!
[  144.524284][    C0] rc rc0: IR event FIFO is full!
[  144.529259][    C0] rc rc0: IR event FIFO is full!
[  144.534232][    C0] rc rc0: IR event FIFO is full!
[  144.544479][    C0] rc rc0: IR event FIFO is full!
[  144.549499][    C0] rc rc0: IR event FIFO is full!
[  144.554473][    C0] rc rc0: IR event FIFO is full!
[  144.559441][    C0] rc rc0: IR event FIFO is full!
[  144.564428][    C0] rc rc0: IR event FIFO is full!
[  144.569403][    C0] rc rc0: IR event FIFO is full!
[  144.574889][    C0] rc rc0: IR event FIFO is full!
[  144.579965][    C0] rc rc0: IR event FIFO is full!
[  144.584958][    C0] rc rc0: IR event FIFO is full!
[  144.589959][    C0] rc rc0: IR event FIFO is full!
[  144.594961][    C0] rc rc0: IR event FIFO is full!
[  144.599964][    C0] rc rc0: IR event FIFO is full!
[  144.604961][    C0] rc rc0: IR event FIFO is full!
[  144.610215][    C0] rc rc0: IR event FIFO is full!
[  144.615206][    C0] rc rc0: IR event FIFO is full!
[  144.620183][    C0] rc rc0: IR event FIFO is full!
[  144.625153][    C0] rc rc0: IR event FIFO is full!
[  144.630763][    C0] rc rc0: IR event FIFO is full!
[  144.635761][    C0] rc rc0: IR event FIFO is full!
[  144.644548][    C0] rc rc0: IR event FIFO is full!
[  144.649546][    C0] rc rc0: IR event FIFO is full!
[  144.654526][    C0] rc rc0: IR event FIFO is full!
[  144.659503][    C0] rc rc0: IR event FIFO is full!
[  144.664483][    C0] rc rc0: IR event FIFO is full!
[  144.669453][    C0] rc rc0: IR event FIFO is full!
[  144.674431][    C0] rc rc0: IR event FIFO is full!
[  144.679395][    C0] rc rc0: IR event FIFO is full!
[  144.684372][    C0] rc rc0: IR event FIFO is full!
[  144.689791][    C0] rc rc0: IR event FIFO is full!
[  144.694787][    C0] rc rc0: IR event FIFO is full!
[  144.700019][    C0] rc rc0: IR event FIFO is full!
[  144.705024][    C0] rc rc0: IR event FIFO is full!
[  144.709999][    C0] rc rc0: IR event FIFO is full!
[  144.715006][    C0] rc rc0: IR event FIFO is full!
[  144.720011][    C0] rc rc0: IR event FIFO is full!
[  144.896553][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  144.934388][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  144.993945][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  145.214078][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  145.243855][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  145.747641][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  145.794653][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.013884][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.074475][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.125636][ T5778] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  146.170314][ T6372] loop3: detected capacity change from 0 to 256
[  146.187997][ T5778] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  146.270357][ T5778] usb 3-1: USB disconnect, device number 4
[  146.789916][ T6376] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  147.463046][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.267305][  T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  150.194059][  T787] usb 1-1: Using ep0 maxpacket: 16
[  150.218706][  T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.230387][ T6402] binder: 6401:6402 ioctl c0306201 200000000380 returned -14
[  150.238988][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  150.269082][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  150.291043][  T787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  150.313895][  T787] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  150.362679][  T787] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  150.383753][  T787] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  150.419705][  T787] usb 1-1: Manufacturer: syz
[  150.756443][  T787] usb 1-1: config 0 descriptor??
[  150.762997][  T787] usb 1-1: can't set config #0, error -71
[  150.771557][  T787] usb 1-1: USB disconnect, device number 3
[  152.408518][ T6428] loop3: detected capacity change from 0 to 256
[  155.203748][ T5778] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  155.539583][ T6449] loop1: detected capacity change from 0 to 256
[  155.784642][ T5778] usb 3-1: Using ep0 maxpacket: 16
[  155.792174][ T5778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.833493][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  155.858669][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  155.875520][ T5778] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  155.889367][ T5778] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.919394][ T5778] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  155.946228][ T5778] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  155.961284][ T5778] usb 3-1: Manufacturer: syz
[  155.990242][ T5778] usb 3-1: config 0 descriptor??
[  157.124892][ T5778] rc_core: IR keymap rc-hauppauge not found
[  157.152836][ T5778] Registered IR keymap rc-empty
[  158.620804][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  158.703834][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  158.905528][ T5778] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  159.000476][ T6471] loop3: detected capacity change from 0 to 256
[  159.009484][ T5778] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9
[  159.131468][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  159.375096][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  159.423761][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  159.493755][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  159.573905][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  160.274296][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  160.313442][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  160.361480][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  160.444667][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  160.503261][ T5778] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  160.595546][ T5778] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  160.643720][ T5778] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  160.732411][ T5778] usb 3-1: USB disconnect, device number 5
[  165.343964][  T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  165.594004][  T788] usb 1-1: Using ep0 maxpacket: 16
[  165.643373][  T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.789713][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  165.925708][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  165.964592][  T788] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  166.014006][  T788] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.113919][  T788] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  166.139467][  T788] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  166.199184][  T788] usb 1-1: Manufacturer: syz
[  166.237129][  T788] usb 1-1: config 0 descriptor??
[  166.704427][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'.
[  168.374080][  T788] rc_core: IR keymap rc-hauppauge not found
[  169.142247][  T788] Registered IR keymap rc-empty
[  169.147876][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  169.189187][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  169.234736][  T788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  169.295754][  T788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10
[  169.412790][ T6536] loop2: detected capacity change from 0 to 256
[  169.593352][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  169.977224][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  170.457600][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  170.502711][ T6544] loop0: detected capacity change from 0 to 2048
[  170.509299][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  170.563847][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  170.648033][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  170.703775][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  170.932299][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  170.967635][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  171.018789][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  171.096912][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'.
[  171.535442][  T788] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  171.552301][  T788] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  171.593094][  T788] usb 1-1: USB disconnect, device number 4
[  173.040379][ T6564] loop0: detected capacity change from 0 to 512
[  173.143062][ T6564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.206451][ T6564] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  173.381051][ T6566] loop1: detected capacity change from 0 to 8192
[  173.404271][ T6566] =======================================================
[  173.404271][ T6566] WARNING: The mand mount option has been deprecated and
[  173.404271][ T6566]          and is ignored by this kernel. Remove the mand
[  173.404271][ T6566]          option from the mount to silence this warning.
[  173.404271][ T6566] =======================================================
[  174.639621][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.196065][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  175.393823][ T5820] usb 4-1: Using ep0 maxpacket: 16
[  175.476128][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.772476][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  175.826312][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  176.098796][ T5820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  177.161708][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.176540][ T5820] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  177.186042][ T5820] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  177.194457][ T5820] usb 4-1: Manufacturer: syz
[  177.248044][ T5820] usb 4-1: config 0 descriptor??
[  177.475942][ T6595] loop1: detected capacity change from 0 to 8
[  177.793551][ T6600] loop2: detected capacity change from 0 to 1024
[  177.803872][ T5820] rc_core: IR keymap rc-hauppauge not found
[  177.805454][ T6600] EXT4-fs: Ignoring removed nomblk_io_submit option
[  177.827582][ T5820] Registered IR keymap rc-empty
[  177.848680][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  177.895445][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  178.074547][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  178.145927][ T6600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.165882][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11
[  178.256380][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  178.637091][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  179.073776][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  179.106191][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  179.257066][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  179.299029][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  179.336308][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.364521][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  179.424306][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  179.463132][ T6613] syzkaller0: entered promiscuous mode
[  179.478447][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  179.541307][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  179.583142][ T5820] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  179.609520][ T5820] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  179.691099][ T5820] usb 4-1: USB disconnect, device number 2
[  179.996069][ T6617] syzkaller0: entered promiscuous mode
[  180.001642][ T6617] syzkaller0: entered allmulticast mode
[  180.215902][ T6625] loop1: detected capacity change from 0 to 256
[  182.140318][ T6639] loop0: detected capacity change from 0 to 256
[  183.063894][  T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  183.194021][ T6650] syzkaller0: entered promiscuous mode
[  183.651686][  T788] usb 4-1: Using ep0 maxpacket: 16
[  183.674929][  T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.728538][  T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.769142][  T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  183.817918][  T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  183.877167][  T788] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.941382][  T788] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  183.965306][  T788] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  184.007562][  T788] usb 4-1: Manufacturer: syz
[  184.035486][  T788] usb 4-1: config 0 descriptor??
[  184.241645][ T6659] loop2: detected capacity change from 0 to 1024
[  184.575559][ T6659] EXT4-fs: Ignoring removed orlov option
[  186.461017][ T6659] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  186.524347][  T788] rc_core: IR keymap rc-hauppauge not found
[  186.568555][  T788] Registered IR keymap rc-empty
[  186.580510][ T6659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.614036][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  186.684497][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  186.710034][ T6659] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.233: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  186.734107][ T6659] EXT4-fs (loop2): Remounting filesystem read-only
[  186.768648][  T788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  186.779179][ T6672] loop3: detected capacity change from 0 to 256
[  186.788771][ T6671] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  187.107843][  T788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12
[  187.136188][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.557916][ T6677] loop1: detected capacity change from 0 to 8
[  187.584738][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.617374][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.665544][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.843739][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.892531][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.954315][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  188.014972][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  188.039475][ T6684] loop1: detected capacity change from 0 to 256
[  188.063701][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  188.072557][ T6686] syzkaller0: entered promiscuous mode
[  188.113779][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  188.153974][  T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  188.220926][  T788] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  188.245267][  T788] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  188.289241][  T788] usb 4-1: USB disconnect, device number 3
[  190.019009][ T6703] loop2: detected capacity change from 0 to 1024
[  190.048106][ T6703] EXT4-fs: Ignoring removed nomblk_io_submit option
[  190.276823][ T5820] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  190.288292][ T6703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.503974][ T5820] usb 4-1: Using ep0 maxpacket: 16
[  190.531048][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.560957][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  190.589902][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  190.600228][ T5820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  190.888753][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.071629][ T6718] loop1: detected capacity change from 0 to 8
[  191.323813][ T5820] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  191.343919][ T5820] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  191.352687][ T5820] usb 4-1: Manufacturer: syz
[  191.362530][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.374374][ T5820] usb 4-1: config 0 descriptor??
[  191.483233][ T6721] loop0: detected capacity change from 0 to 256
[  191.816924][ T5820] rc_core: IR keymap rc-hauppauge not found
[  191.845212][ T5820] Registered IR keymap rc-empty
[  191.883228][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  191.984159][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  192.252129][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  192.349637][ T6731] loop1: detected capacity change from 0 to 1024
[  192.367725][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13
[  192.407047][ T6731] EXT4-fs: Ignoring removed orlov option
[  192.468612][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  192.476785][ T6731] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  192.489386][ T6733] syzkaller0: entered promiscuous mode
[  192.553378][ T6731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.574731][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  192.642531][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  192.693901][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  192.783883][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  192.899881][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  193.622591][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.819197][ T6745] loop2: detected capacity change from 0 to 256
[  194.083820][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.119149][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'.
[  194.134904][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.173676][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'.
[  194.175659][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.240323][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  194.290313][ T6753] loop1: detected capacity change from 0 to 1024
[  194.305111][ T5820] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  194.324724][ T6753] EXT4-fs: Ignoring removed nomblk_io_submit option
[  194.343768][ T5820] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  194.371762][ T6753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.405046][ T5820] usb 4-1: USB disconnect, device number 4
[  194.424195][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  194.430536][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  195.510316][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'.
[  195.519354][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'.
[  196.091224][ T6761] loop0: detected capacity change from 0 to 8
[  196.185813][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.462967][ T6775] loop0: detected capacity change from 0 to 1024
[  196.479131][ T6775] EXT4-fs: Ignoring removed orlov option
[  196.486354][ T6775] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  196.505856][ T6774] syzkaller0: entered promiscuous mode
[  196.522135][ T6775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.823951][ T5820] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  196.944220][ T6785] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.264: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  196.977947][ T6785] EXT4-fs (loop0): Remounting filesystem read-only
[  197.029681][ T5820] usb 4-1: Using ep0 maxpacket: 16
[  197.115972][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.162876][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  197.825061][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  197.836714][ T5820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  197.846798][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.861533][ T5820] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  197.870933][ T5820] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  197.879232][ T5820] usb 4-1: Manufacturer: syz
[  197.887623][ T5820] usb 4-1: config 0 descriptor??
[  198.213736][ T5820] rc_core: IR keymap rc-hauppauge not found
[  198.219868][ T5820] Registered IR keymap rc-empty
[  198.229731][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.275685][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.314670][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  198.343210][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14
[  198.383014][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.440484][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.473832][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.523857][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.564369][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.606684][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.644593][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.652138][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[  198.661838][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'.
[  198.683762][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.714847][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.773782][ T5820] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  198.814240][ T5820] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  198.833553][ T5820] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  198.847740][ T5820] usb 4-1: USB disconnect, device number 5
[  198.894379][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.042551][ T6801] loop0: detected capacity change from 0 to 512
[  199.063990][ T6801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  199.151076][ T6801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.164072][ T6801] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.243310][ T6806] loop1: detected capacity change from 0 to 1024
[  199.257955][ T6806] EXT4-fs: Ignoring removed nomblk_io_submit option
[  199.290595][ T6806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.724304][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'.
[  199.733737][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'.
[  200.652903][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.910176][ T6823] loop2: detected capacity change from 0 to 256
[  201.784261][ T6827] loop3: detected capacity change from 0 to 256
[  202.773488][ T6835] loop1: detected capacity change from 0 to 1024
[  202.802929][ T6835] EXT4-fs: Ignoring removed orlov option
[  202.868427][ T6835] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  202.915114][ T6835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.328159][ T6844] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.279: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  203.349652][ T6844] EXT4-fs (loop1): Remounting filesystem read-only
[  204.331533][ T6854] loop2: detected capacity change from 0 to 1024
[  204.379380][ T6854] EXT4-fs: Ignoring removed nomblk_io_submit option
[  204.664986][ T6854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.998192][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.296681][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.033713][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  208.039900][ T5783] Bluetooth: hci0: command 0x0406 tx timeout
[  208.046103][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  208.052156][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  208.273069][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.328127][ T6880] loop1: detected capacity change from 0 to 256
[  208.781132][ T6887] loop2: detected capacity change from 0 to 1024
[  208.792559][ T6887] EXT4-fs: Ignoring removed nomblk_io_submit option
[  208.829050][ T6887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.869788][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.250905][ T6904] loop0: detected capacity change from 0 to 1024
[  210.288791][ T6904] EXT4-fs: Ignoring removed orlov option
[  210.368547][ T6904] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  210.456809][ T6904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.525249][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.682626][ T6916] loop1: detected capacity change from 0 to 512
[  211.707989][ T6916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  211.789526][ T6916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.823716][ T6916] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.091030][ T6940] loop0: detected capacity change from 0 to 256
[  214.303208][ T6942] loop3: detected capacity change from 0 to 1024
[  214.335524][ T6942] EXT4-fs: Ignoring removed orlov option
[  214.380191][ T6942] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  214.455276][ T6942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.367719][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.614123][ T6957] loop3: detected capacity change from 0 to 256
[  218.601507][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.754141][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'.
[  218.763417][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'.
[  218.793698][ T6991] loop0: detected capacity change from 0 to 256
[  219.730555][ T7000] loop2: detected capacity change from 0 to 256
[  220.674169][ T5820] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  220.993886][ T5820] usb 1-1: Using ep0 maxpacket: 16
[  221.210493][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.392035][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  221.640913][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  221.683350][ T5820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  221.731433][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.787163][ T5820] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  221.816985][ T5820] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  221.861129][ T5820] usb 1-1: Manufacturer: syz
[  221.899636][ T5820] usb 1-1: config 0 descriptor??
[  222.142125][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'.
[  222.172388][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.332'.
[  222.315372][ T5820] rc_core: IR keymap rc-hauppauge not found
[  222.321358][ T5820] Registered IR keymap rc-empty
[  222.348285][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.396014][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.447815][ T7028] kvm: kvm [7027]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200
[  222.448076][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  222.481690][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15
[  222.500911][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.534042][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.569329][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.603865][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.654043][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.714643][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.754057][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.793721][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.824629][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.863786][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.941961][ T5820] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  222.998332][ T5820] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  223.060278][ T5820] usb 1-1: USB disconnect, device number 5
[  223.068436][ T7039] loop3: detected capacity change from 0 to 1024
[  223.138086][ T7039] EXT4-fs: Ignoring removed nomblk_io_submit option
[  223.271754][ T7039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.326442][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.443419][ T7059] loop3: detected capacity change from 0 to 256
[  226.969909][ T7080] loop0: detected capacity change from 0 to 256
[  229.288129][ T7102] loop1: detected capacity change from 0 to 256
[  231.751229][ T7133] loop2: detected capacity change from 0 to 1024
[  231.760003][ T7136] loop1: detected capacity change from 0 to 256
[  231.786995][ T7138] loop3: detected capacity change from 0 to 8
[  231.794237][ T7133] EXT4-fs: Ignoring removed nomblk_io_submit option
[  231.867614][ T7133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.909610][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.904912][ T7153] loop0: detected capacity change from 0 to 1024
[  233.933262][ T7153] EXT4-fs: Ignoring removed orlov option
[  233.955099][ T7153] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  234.030526][ T7153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.337196][ T7164] loop3: detected capacity change from 0 to 512
[  234.350108][ T7164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  234.531628][ T7164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.546605][ T7167] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.369: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  234.569886][ T7167] EXT4-fs (loop0): Remounting filesystem read-only
[  234.577047][ T7164] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.211290][ T7176] loop1: detected capacity change from 0 to 1024
[  235.245150][ T7176] EXT4-fs: Ignoring removed nomblk_io_submit option
[  235.692600][ T7176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.612891][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.039864][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.836540][ T7208] loop0: detected capacity change from 0 to 256
[  239.351180][ T7220] loop2: detected capacity change from 0 to 1024
[  239.406007][ T7220] EXT4-fs: Ignoring removed orlov option
[  239.418759][ T7222] loop0: detected capacity change from 0 to 1024
[  239.484701][ T7222] EXT4-fs: Ignoring removed nomblk_io_submit option
[  239.707471][ T7220] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  239.761309][ T7222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.850596][ T7220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.480668][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.402745][ T7240] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.388: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  241.440795][ T7240] EXT4-fs (loop2): Remounting filesystem read-only
[  243.894321][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.961705][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.142851][ T7256] loop3: detected capacity change from 0 to 256
[  245.385249][ T7269] loop1: detected capacity change from 0 to 1024
[  245.439009][ T7269] EXT4-fs: Ignoring removed nomblk_io_submit option
[  245.606783][ T7269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.375396][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.616952][ T7298] tty tty25: ldisc open failed (-12), clearing slot 24
[  249.246021][ T7303] loop1: detected capacity change from 0 to 1024
[  249.648309][ T7303] EXT4-fs: Ignoring removed orlov option
[  249.675381][ T7303] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  250.018712][ T7303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.309478][ T7316] loop0: detected capacity change from 0 to 1024
[  250.320458][ T7315] loop2: detected capacity change from 0 to 256
[  250.348778][ T7316] EXT4-fs: Ignoring removed nomblk_io_submit option
[  250.435312][ T7316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.016393][ T7323] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.406: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  251.040734][ T7323] EXT4-fs (loop1): Remounting filesystem read-only
[  251.227010][ T7323] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  251.277825][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.533423][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.476149][ T7349] loop3: detected capacity change from 0 to 8
[  255.929218][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  255.936112][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  256.233201][ T7359] loop2: detected capacity change from 0 to 1024
[  256.307900][ T7359] EXT4-fs: Ignoring removed nomblk_io_submit option
[  256.442438][ T7359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.165704][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.651670][ T7374] loop1: detected capacity change from 0 to 256
[  257.869957][ T7379] loop2: detected capacity change from 0 to 256
[  261.256895][ T7401] loop1: detected capacity change from 0 to 1024
[  261.294562][ T7401] EXT4-fs: Ignoring removed nomblk_io_submit option
[  261.344383][ T7401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.165850][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.401360][ T7417] kvm: kvm [7416]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200
[  264.649940][ T7440] loop3: detected capacity change from 0 to 256
[  264.845332][ T7443] loop0: detected capacity change from 0 to 1024
[  264.864003][ T7443] EXT4-fs: Ignoring removed nomblk_io_submit option
[  265.135105][ T7443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.753749][ T5777] Bluetooth: hci0: unexpected event for opcode 0x200c
[  266.308021][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.061531][ T7482] loop0: detected capacity change from 0 to 512
[  268.093893][ T7482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  268.143272][ T7482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.224113][ T7482] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.458391][ T7489] loop1: detected capacity change from 0 to 1024
[  268.506041][ T7489] EXT4-fs: Ignoring removed nomblk_io_submit option
[  269.249292][ T7489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.275927][   T28] audit: type=1800 audit(1778333506.641:2): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.456" name="file1" dev="loop0" ino=15 res=0 errno=0
[  270.207151][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.718254][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.760963][ T7501] loop2: detected capacity change from 0 to 8
[  273.265044][ T7524] loop3: detected capacity change from 0 to 1024
[  273.305976][ T7524] EXT4-fs: Ignoring removed nomblk_io_submit option
[  273.767149][ T7524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.785455][ T7529] loop2: detected capacity change from 0 to 512
[  273.844002][ T7529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  274.085219][ T7529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.123163][ T7529] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.878465][ T7540] syz.2.470 (7540) used greatest stack depth: 20496 bytes left
[  274.932104][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.967027][ T7542] loop0: detected capacity change from 0 to 256
[  276.294117][ T7546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.474'.
[  276.435301][ T7553] loop3: detected capacity change from 0 to 1024
[  276.442791][ T7553] EXT4-fs: Ignoring removed orlov option
[  276.692810][ T7546] bond1: entered promiscuous mode
[  276.698367][ T7553] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  277.470360][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.614024][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.664290][ T5777] Bluetooth: hci0: unexpected event for opcode 0x200c
[  278.837251][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.106745][ T7579] loop3: detected capacity change from 0 to 1024
[  279.137062][ T7579] EXT4-fs: Ignoring removed nomblk_io_submit option
[  279.179544][ T7580] loop2: detected capacity change from 0 to 256
[  279.228084][ T7579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.006007][ T7589] loop1: detected capacity change from 0 to 8
[  280.071811][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.869822][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'.
[  282.605910][ T7600] bond1: entered promiscuous mode
[  284.562672][ T7619] loop3: detected capacity change from 0 to 1024
[  284.577557][ T7620] loop0: detected capacity change from 0 to 1024
[  284.606791][ T7619] EXT4-fs: Ignoring removed nomblk_io_submit option
[  284.642502][ T7620] EXT4-fs: Ignoring removed orlov option
[  284.736854][ T7620] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  284.855209][ T7620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.886962][ T7619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.708639][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.753457][ T7635] loop1: detected capacity change from 0 to 256
[  285.828507][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.997098][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.497'.
[  286.624626][ T7638] bond1: entered promiscuous mode
[  287.978806][ T7655] loop2: detected capacity change from 0 to 8
[  289.455141][ T7661] loop1: detected capacity change from 0 to 2048
[  290.813959][ T7676] loop2: detected capacity change from 0 to 1024
[  290.842369][ T7676] EXT4-fs: Ignoring removed nomblk_io_submit option
[  291.000731][ T7676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.211543][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.508'.
[  291.357857][ T7686] bond2: entered promiscuous mode
[  291.488667][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.629757][ T7701] loop2: detected capacity change from 0 to 1024
[  292.675737][ T7701] EXT4-fs: Ignoring removed orlov option
[  292.718658][ T7700] loop0: detected capacity change from 0 to 2048
[  292.726558][ T7701] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  292.857562][ T7701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.222866][ T5766] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  293.502358][ T7707] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  294.470209][ T7706] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.512: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  294.551672][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'.
[  295.035091][ T7706] EXT4-fs (loop2): Remounting filesystem read-only
[  295.205503][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.255061][ T7723] loop1: detected capacity change from 0 to 1024
[  295.357786][ T7723] EXT4-fs: Ignoring removed orlov option
[  295.552071][ T7723] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  295.599927][ T7723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.232686][ T7740] loop3: detected capacity change from 0 to 2048
[  296.535154][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.552013][ T5767] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  296.560417][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[  296.570590][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  297.084234][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'.
[  297.129071][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'.
[  297.767189][ T7752] loop1: detected capacity change from 0 to 512
[  297.857783][ T7752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  297.912282][ T7752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.958974][ T7752] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.507886][   T28] audit: type=1800 audit(1778333536.901:3): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.523" name="file1" dev="loop1" ino=15 res=0 errno=0
[  299.782021][ T7769] loop0: detected capacity change from 0 to 2048
[  300.552750][ T7771] loop2: detected capacity change from 0 to 1024
[  300.596814][ T7771] EXT4-fs: Ignoring removed orlov option
[  300.650710][ T7771] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  300.741464][ T7771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.058634][ T5767] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  301.118542][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.536864][ T7778] ==================================================================
[  301.545000][ T7778] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370
[  301.552705][ T7778] Read of size 8 at addr ffff888143697c18 by task syz.2.526/7778
[  301.560453][ T7778] 
[  301.562819][ T7778] CPU: 0 PID: 7778 Comm: syz.2.526 Not tainted syzkaller #0
[  301.570140][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  301.580242][ T7778] Call Trace:
[  301.583553][ T7778]  <TASK>
[  301.586524][ T7778]  dump_stack_lvl+0x18c/0x250
[  301.591302][ T7778]  ? __lock_acquire+0x7d40/0x7d40
[  301.596409][ T7778]  ? show_regs_print_info+0x20/0x20
[  301.601662][ T7778]  ? load_image+0x420/0x420
[  301.606224][ T7778]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  301.611755][ T7778]  ? __virt_addr_valid+0x18c/0x540
[  301.616913][ T7778]  ? __virt_addr_valid+0x469/0x540
[  301.622064][ T7778]  print_report+0xa8/0x210
[  301.626528][ T7778]  ? dvb_device_open+0xca/0x370
[  301.631421][ T7778]  kasan_report+0x117/0x150
[  301.635960][ T7778]  ? chrdev_open+0x3e3/0x6a0
[  301.640596][ T7778]  ? dvb_device_open+0xca/0x370
[  301.645508][ T7778]  dvb_device_open+0xca/0x370
[  301.650227][ T7778]  ? do_raw_spin_unlock+0x121/0x230
[  301.655471][ T7778]  chrdev_open+0x5cc/0x6a0
[  301.659935][ T7778]  ? cd_forget+0x160/0x160
[  301.664403][ T7778]  ? fsnotify_perm+0x3ed/0x5e0
[  301.669211][ T7778]  ? cd_forget+0x160/0x160
[  301.673669][ T7778]  do_dentry_open+0x8c6/0x1500
[  301.678482][ T7778]  path_openat+0x27f1/0x3230
[  301.683150][ T7778]  ? do_sys_openat2+0xda/0x1d0
[  301.687954][ T7778]  ? verify_lock_unused+0x140/0x140
[  301.693203][ T7778]  ? do_filp_open+0x430/0x430
[  301.697923][ T7778]  ? __virt_addr_valid+0x18c/0x540
[  301.703099][ T7778]  do_filp_open+0x1f5/0x430
[  301.707642][ T7778]  ? vfs_tmpfile+0x490/0x490
[  301.712294][ T7778]  ? _raw_spin_unlock+0x28/0x40
[  301.717180][ T7778]  ? alloc_fd+0x58f/0x630
[  301.721558][ T7778]  do_sys_openat2+0x134/0x1d0
[  301.726371][ T7778]  ? do_sys_open+0xe0/0xe0
[  301.730834][ T7778]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  301.736874][ T7778]  ? lock_chain_count+0x20/0x20
[  301.741776][ T7778]  __x64_sys_openat+0x139/0x160
[  301.746684][ T7778]  do_syscall_64+0x55/0xa0
[  301.751139][ T7778]  ? clear_bhb_loop+0x40/0x90
[  301.755884][ T7778]  ? clear_bhb_loop+0x40/0x90
[  301.760595][ T7778]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  301.766637][ T7778] RIP: 0033:0x7fb3bd95d60e
[  301.771112][ T7778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  301.790763][ T7778] RSP: 002b:00007fb3be8bcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  301.799227][ T7778] RAX: ffffffffffffffda RBX: 00007fb3be8bd6c0 RCX: 00007fb3bd95d60e
[  301.807232][ T7778] RDX: 0000000000000002 RSI: 00007fb3be8bcc00 RDI: ffffffffffffff9c
[  301.815236][ T7778] RBP: 00007fb3be8bcc00 R08: 0000000000000000 R09: 0000000000000000
[  301.823332][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  301.831362][ T7778] R13: 00007fb3bdc16308 R14: 00007fb3bdc16270 R15: 00007ffe58b86f18
[  301.839381][ T7778]  </TASK>
[  301.842424][ T7778] 
[  301.844783][ T7778] Allocated by task 1:
[  301.848876][ T7778]  kasan_set_track+0x4e/0x70
[  301.853505][ T7778]  __kasan_kmalloc+0x8f/0xa0
[  301.858137][ T7778]  dvb_register_device+0x2fd/0x2210
[  301.863376][ T7778]  dvb_register_frontend+0x649/0x930
[  301.868706][ T7778]  vidtv_bridge_probe+0x9ab/0xf80
[  301.873770][ T7778]  platform_probe+0x13b/0x1c0
[  301.878518][ T7778]  really_probe+0x25b/0xb20
[  301.883069][ T7778]  __driver_probe_device+0x18c/0x330
[  301.888380][ T7778]  driver_probe_device+0x4f/0x420
[  301.893443][ T7778]  __driver_attach+0x44e/0x6e0
[  301.898240][ T7778]  bus_for_each_dev+0x235/0x2b0
[  301.903136][ T7778]  bus_add_driver+0x340/0x630
[  301.907857][ T7778]  driver_register+0x23a/0x310
[  301.912653][ T7778]  vidtv_bridge_init+0x3d/0x70
[  301.917450][ T7778]  do_one_initcall+0x242/0x790
[  301.922249][ T7778]  do_initcall_level+0x137/0x1f0
[  301.927218][ T7778]  do_initcalls+0x69/0xd0
[  301.931601][ T7778]  kernel_init_freeable+0x3ed/0x580
[  301.936837][ T7778]  kernel_init+0x1d/0x1c0
[  301.941207][ T7778]  ret_from_fork+0x48/0x80
[  301.945654][ T7778]  ret_from_fork_asm+0x11/0x20
[  301.950448][ T7778] 
[  301.952794][ T7778] Freed by task 7707:
[  301.956794][ T7778]  kasan_set_track+0x4e/0x70
[  301.961426][ T7778]  kasan_save_free_info+0x2e/0x50
[  301.966491][ T7778]  ____kasan_slab_free+0x126/0x1e0
[  301.971633][ T7778]  slab_free_freelist_hook+0x130/0x1a0
[  301.977122][ T7778]  __kmem_cache_free+0xba/0x1e0
[  301.982020][ T7778]  dvb_device_open+0x2ee/0x370
[  301.986822][ T7778]  chrdev_open+0x5cc/0x6a0
[  301.991267][ T7778]  do_dentry_open+0x8c6/0x1500
[  301.996060][ T7778]  path_openat+0x27f1/0x3230
[  302.000677][ T7778]  do_filp_open+0x1f5/0x430
[  302.005204][ T7778]  do_sys_openat2+0x134/0x1d0
[  302.009950][ T7778]  __x64_sys_openat+0x139/0x160
[  302.014845][ T7778]  do_syscall_64+0x55/0xa0
[  302.019294][ T7778]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  302.025245][ T7778] 
[  302.027615][ T7778] The buggy address belongs to the object at ffff888143697c00
[  302.027615][ T7778]  which belongs to the cache kmalloc-256 of size 256
[  302.041701][ T7778] The buggy address is located 24 bytes inside of
[  302.041701][ T7778]  freed 256-byte region [ffff888143697c00, ffff888143697d00)
[  302.055442][ T7778] 
[  302.057797][ T7778] The buggy address belongs to the physical page:
[  302.064242][ T7778] page:ffffea00050da580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x143696
[  302.074520][ T7778] head:ffffea00050da580 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  302.083498][ T7778] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff)
[  302.091611][ T7778] page_type: 0xffffffff()
[  302.095977][ T7778] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000
[  302.104596][ T7778] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  302.113206][ T7778] page dumped because: kasan: bad access detected
[  302.119659][ T7778] page_owner tracks the page as allocated
[  302.125394][ T7778] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16398721172, free_ts 0
[  302.145140][ T7778]  post_alloc_hook+0x1c1/0x200
[  302.149952][ T7778]  get_page_from_freelist+0x1951/0x19e0
[  302.155547][ T7778]  __alloc_pages+0x1f0/0x460
[  302.160167][ T7778]  alloc_page_interleave+0x24/0x1e0
[  302.165390][ T7778]  alloc_slab_page+0x5d/0x160
[  302.170097][ T7778]  new_slab+0x87/0x2d0
[  302.174208][ T7778]  ___slab_alloc+0xc5d/0x12f0
[  302.178930][ T7778]  __kmem_cache_alloc_node+0x19e/0x250
[  302.184431][ T7778]  kmalloc_trace+0x2a/0xe0
[  302.188887][ T7778]  bus_add_driver+0x162/0x630
[  302.193607][ T7778]  driver_register+0x23a/0x310
[  302.198411][ T7778]  usb_register_driver+0x206/0x3d0
[  302.203566][ T7778]  do_one_initcall+0x242/0x790
[  302.208369][ T7778]  do_initcall_level+0x137/0x1f0
[  302.213345][ T7778]  do_initcalls+0x69/0xd0
[  302.217734][ T7778]  kernel_init_freeable+0x3ed/0x580
[  302.222970][ T7778] page_owner free stack trace missing
[  302.228367][ T7778] 
[  302.230710][ T7778] Memory state around the buggy address:
[  302.236367][ T7778]  ffff888143697b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  302.244472][ T7778]  ffff888143697b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  302.252599][ T7778] >ffff888143697c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.260694][ T7778]                             ^
[  302.265571][ T7778]  ffff888143697c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.273658][ T7778]  ffff888143697d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  302.281748][ T7778] ==================================================================
[  302.291706][ T7778] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  302.298937][ T7778] CPU: 0 PID: 7778 Comm: syz.2.526 Not tainted syzkaller #0
[  302.306258][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  302.316355][ T7778] Call Trace:
[  302.319678][ T7778]  <TASK>
[  302.322735][ T7778]  dump_stack_lvl+0x18c/0x250
[  302.327483][ T7778]  ? show_regs_print_info+0x20/0x20
[  302.332729][ T7778]  ? load_image+0x420/0x420
[  302.337280][ T7778]  panic+0x2dc/0x730
[  302.341242][ T7778]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  302.347452][ T7778]  ? bpf_jit_dump+0xd0/0xd0
[  302.352013][ T7778]  ? _raw_spin_unlock_irqrestore+0xc0/0x120
[  302.357951][ T7778]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  302.363886][ T7778]  ? _raw_spin_unlock+0x40/0x40
[  302.368770][ T7778]  ? dvb_device_open+0xca/0x370
[  302.373663][ T7778]  check_panic_on_warn+0x84/0xa0
[  302.378648][ T7778]  ? dvb_device_open+0xca/0x370
[  302.383549][ T7778]  end_report+0x6f/0x130
[  302.387835][ T7778]  kasan_report+0x128/0x150
[  302.392392][ T7778]  ? chrdev_open+0x3e3/0x6a0
[  302.397024][ T7778]  ? dvb_device_open+0xca/0x370
[  302.401929][ T7778]  dvb_device_open+0xca/0x370
[  302.406643][ T7778]  ? do_raw_spin_unlock+0x121/0x230
[  302.411880][ T7778]  chrdev_open+0x5cc/0x6a0
[  302.416323][ T7778]  ? cd_forget+0x160/0x160
[  302.420768][ T7778]  ? fsnotify_perm+0x3ed/0x5e0
[  302.425564][ T7778]  ? cd_forget+0x160/0x160
[  302.430008][ T7778]  do_dentry_open+0x8c6/0x1500
[  302.434813][ T7778]  path_openat+0x27f1/0x3230
[  302.439425][ T7778]  ? do_sys_openat2+0xda/0x1d0
[  302.444211][ T7778]  ? verify_lock_unused+0x140/0x140
[  302.449431][ T7778]  ? do_filp_open+0x430/0x430
[  302.454125][ T7778]  ? __virt_addr_valid+0x18c/0x540
[  302.459269][ T7778]  do_filp_open+0x1f5/0x430
[  302.463794][ T7778]  ? vfs_tmpfile+0x490/0x490
[  302.468407][ T7778]  ? _raw_spin_unlock+0x28/0x40
[  302.473282][ T7778]  ? alloc_fd+0x58f/0x630
[  302.477647][ T7778]  do_sys_openat2+0x134/0x1d0
[  302.482349][ T7778]  ? do_sys_open+0xe0/0xe0
[  302.486788][ T7778]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  302.492799][ T7778]  ? lock_chain_count+0x20/0x20
[  302.497678][ T7778]  __x64_sys_openat+0x139/0x160
[  302.502571][ T7778]  do_syscall_64+0x55/0xa0
[  302.507012][ T7778]  ? clear_bhb_loop+0x40/0x90
[  302.511714][ T7778]  ? clear_bhb_loop+0x40/0x90
[  302.516420][ T7778]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  302.522335][ T7778] RIP: 0033:0x7fb3bd95d60e
[  302.526774][ T7778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  302.546403][ T7778] RSP: 002b:00007fb3be8bcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  302.554856][ T7778] RAX: ffffffffffffffda RBX: 00007fb3be8bd6c0 RCX: 00007fb3bd95d60e
[  302.562842][ T7778] RDX: 0000000000000002 RSI: 00007fb3be8bcc00 RDI: ffffffffffffff9c
[  302.570861][ T7778] RBP: 00007fb3be8bcc00 R08: 0000000000000000 R09: 0000000000000000
[  302.578876][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  302.586881][ T7778] R13: 00007fb3bdc16308 R14: 00007fb3bdc16270 R15: 00007ffe58b86f18
[  302.594878][ T7778]  </TASK>
[  302.598519][ T7778] Kernel Offset: disabled
[  302.602861][ T7778] Rebooting in 86400 seconds..