last executing test programs: 33.966619249s ago: executing program 2 (id=124): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x46, 0x5865c4db1fe74f7e}}, 0x1c}}, 0x4000000) 33.026288727s ago: executing program 2 (id=126): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)={0x78, 0x1f, 0x200, 0x0, 0x0, "", [@nested={0x66, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d"]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4089, 0xff9}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 32.352678353s ago: executing program 2 (id=129): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)="bbd181b5"}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 30.965873136s ago: executing program 2 (id=133): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1e7, &(0x7f0000000200)="$eJzs201u00AYxvHHcZyUUiifG1ZILGBDAoUNO3oALsCuak1V4QIibFohIa7Bjpv0JlyglWDHCqOZuJEdJs7YwflQ/j+pzavYj99JlLE9CwvA2rph/wcKFNkqTdMv9yW9fiWp/e/+V+c9QACNSfUnBbCuwp+LHgGAxbjYDe19wFkg/fj1ef88+4s87x8udlvDYkNSLt/xzX8N7Ou9tnSey3ezQ069f/k+zD9UMX+lYv/NsfzmlFwwyg8//6MHxbxZJ21JuibpuqRtSeabvinplqP/wVj/u57jB2Zhfn0910K/Sr5Xv7+ZPW+OkviJa2M4PR9l+afuzblTyJlzh06W3/Ec76T8s5r5bpbv7b9PDhzbWzWPC/ho2flf36zzP5R+p+Pz/6V/vl0+/wGUGJycvt1LkvjjwFxsbTF6Z1IR2aKbHaFsZ3N1zL2jkhZmMeLVnaL5YsOxKSr8WpouOv/tgCrbx1y+luEL9ywuZ23zvbaThZ2SAMxJ/9Pxh/7g5PTx0fHeYXwYv9t5/uJy2W3X5f2Jq3MAK654c+4jaHZAAAAAAAAAAAAAAACgstuS7tQJ+j7gBwAAAGBplD8G9K3iw0OR5HjcqqT91hw/KgAAAAAAAAAAAAAAAAAAALDy/gYAAP//R4hAiA==") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 30.059650953s ago: executing program 2 (id=137): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x200414, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0xfd, 0x2c3, &(0x7f0000000440)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x18061, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) preadv(0xffffffffffffffff, &(0x7f0000004d40), 0x0, 0x101, 0x6) 28.945865237s ago: executing program 2 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xb3409000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000200)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = dup(r0) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00') lseek(r6, 0x8020100001, 0x0) 13.686115235s ago: executing program 32 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xb3409000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000200)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = dup(r0) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00') lseek(r6, 0x8020100001, 0x0) 10.429683382s ago: executing program 4 (id=203): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000200), 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 9.335675447s ago: executing program 4 (id=206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x4, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x747}], 0x1, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 8.775079337s ago: executing program 3 (id=208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x8906}, @void, @eth={@empty, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x8, 0x2c, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts]}}}}}}, 0x4a) 7.702680537s ago: executing program 3 (id=211): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000c0, &(0x7f0000000180)={[{}, {@creator={'creator', 0x3d, "d4675f16"}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {}, {@codepage={'codepage', 0x3d, 'cp936'}}]}, 0x11, 0x2b6, &(0x7f0000000200)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) 7.287847999s ago: executing program 1 (id=212): listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) connect$inet(r3, &(0x7f0000001740)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r6, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 7.182587784s ago: executing program 4 (id=213): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 6.570256382s ago: executing program 1 (id=215): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000200), 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 6.210493696s ago: executing program 3 (id=216): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0xfffffffd}, 0x1c) 5.91483488s ago: executing program 0 (id=217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.77613449s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000140), 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) 4.864034319s ago: executing program 4 (id=219): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x200414, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0xfd, 0x2c3, &(0x7f0000000440)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.62633942s ago: executing program 0 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x8906}, @void, @eth={@empty, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x8, 0x2c, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts]}}}}}}, 0x4a) 4.441949778s ago: executing program 3 (id=221): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x202080, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 3.288113383s ago: executing program 3 (id=222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x4, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x747}], 0x1, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 3.136354824s ago: executing program 1 (id=223): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) close(0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7f}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000280)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="8a", 0xfffffffffffffdf7, 0x4005, 0x0, 0xffffffffffffff19) 3.114144722s ago: executing program 4 (id=224): listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) connect$inet(r2, &(0x7f0000001740)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r5, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 3.108621561s ago: executing program 0 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x101, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 1.679818209s ago: executing program 1 (id=226): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)={0x78, 0x1f, 0x200, 0x0, 0x0, "", [@nested={0x66, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d"]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4089, 0xff9}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.673351969s ago: executing program 0 (id=227): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000200), 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 1.668149951s ago: executing program 3 (id=228): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x8, 0x2, &(0x7f00000002c0)={0x6, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1.644598994s ago: executing program 4 (id=229): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b24, 0x0) 654.840899ms ago: executing program 0 (id=230): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010100, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0x6, 0x8, 0x7, 0x0, 0x40000000000000}, {0x7, 0x5f94c303, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x1, 0x32}, 0x2, @in6=@local, 0x1502, 0x4, 0x3, 0x0, 0xc36, 0x101}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0xfffffffd}, 0x1c) 645.289224ms ago: executing program 1 (id=231): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0xa00010, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=0x0, @ANYRES64, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$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") mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000140), 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.223' (ED25519) to the list of known hosts. [ 171.066502][ T5787] cgroup: Unknown subsys name 'net' [ 171.277534][ T5787] cgroup: Unknown subsys name 'cpuset' [ 171.298420][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 177.132794][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 181.519897][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.530613][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.539574][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.548041][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.557732][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.572941][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.582254][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.595151][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.610225][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.610502][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.624353][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.628908][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.632769][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.681025][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.700947][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.750766][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.763361][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.772890][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.782031][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.793372][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.806364][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.841393][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.904375][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.917616][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.958953][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.124644][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 183.325005][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 183.688471][ T5102] Bluetooth: hci0: command tx timeout [ 183.694104][ T5102] Bluetooth: hci2: command tx timeout [ 183.795573][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 183.829041][ T5815] Bluetooth: hci1: command tx timeout [ 183.908803][ T5815] Bluetooth: hci3: command tx timeout [ 183.936337][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 184.068558][ T5815] Bluetooth: hci4: command tx timeout [ 184.249728][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 184.765942][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.773686][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.781557][ T5804] bridge_slave_0: entered allmulticast mode [ 184.791302][ T5804] bridge_slave_0: entered promiscuous mode [ 184.804561][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.812471][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.820253][ T5810] bridge_slave_0: entered allmulticast mode [ 184.829659][ T5810] bridge_slave_0: entered promiscuous mode [ 184.889688][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.897213][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.908077][ T5804] bridge_slave_1: entered allmulticast mode [ 184.917933][ T5804] bridge_slave_1: entered promiscuous mode [ 184.973875][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.982548][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.990405][ T5810] bridge_slave_1: entered allmulticast mode [ 185.000086][ T5810] bridge_slave_1: entered promiscuous mode [ 185.014196][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.021923][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.032302][ T5817] bridge_slave_0: entered allmulticast mode [ 185.042625][ T5817] bridge_slave_0: entered promiscuous mode [ 185.165830][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.174455][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.182063][ T5817] bridge_slave_1: entered allmulticast mode [ 185.190847][ T5817] bridge_slave_1: entered promiscuous mode [ 185.271596][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.279199][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.286760][ T5806] bridge_slave_0: entered allmulticast mode [ 185.296380][ T5806] bridge_slave_0: entered promiscuous mode [ 185.395385][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.405851][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.413829][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.421556][ T5806] bridge_slave_1: entered allmulticast mode [ 185.430946][ T5806] bridge_slave_1: entered promiscuous mode [ 185.451699][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.469764][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.693946][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.711874][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.769291][ T5815] Bluetooth: hci2: command tx timeout [ 185.774938][ T5102] Bluetooth: hci0: command tx timeout [ 185.861347][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.908505][ T5815] Bluetooth: hci1: command tx timeout [ 185.916215][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.923906][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.931485][ T5816] bridge_slave_0: entered allmulticast mode [ 185.940468][ T5816] bridge_slave_0: entered promiscuous mode [ 185.961087][ T5804] team0: Port device team_slave_0 added [ 185.967225][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.974854][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.982535][ T5816] bridge_slave_1: entered allmulticast mode [ 185.992020][ T5816] bridge_slave_1: entered promiscuous mode [ 186.004313][ T5815] Bluetooth: hci3: command tx timeout [ 186.015844][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.104347][ T5810] team0: Port device team_slave_0 added [ 186.116430][ T5804] team0: Port device team_slave_1 added [ 186.130772][ T5810] team0: Port device team_slave_1 added [ 186.145976][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.155475][ T5815] Bluetooth: hci4: command tx timeout [ 186.346539][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.364034][ T5817] team0: Port device team_slave_0 added [ 186.379272][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.451481][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.458665][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.484931][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.535586][ T5817] team0: Port device team_slave_1 added [ 186.543923][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.551166][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.577462][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.598761][ T5806] team0: Port device team_slave_0 added [ 186.606832][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.614047][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.640182][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.711587][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.718915][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.745409][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.764426][ T5806] team0: Port device team_slave_1 added [ 186.794600][ T5816] team0: Port device team_slave_0 added [ 186.847418][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.854642][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.880974][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.966353][ T5816] team0: Port device team_slave_1 added [ 186.974773][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.982688][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.008974][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.027656][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.034856][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.061243][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.121815][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.129538][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.156127][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.214250][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.221764][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.248112][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.349106][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.356163][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.382557][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.451414][ T5804] hsr_slave_0: entered promiscuous mode [ 187.461774][ T5804] hsr_slave_1: entered promiscuous mode [ 187.595706][ T5810] hsr_slave_0: entered promiscuous mode [ 187.604414][ T5810] hsr_slave_1: entered promiscuous mode [ 187.613561][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 187.619567][ T5810] Cannot create hsr debugfs directory [ 187.824998][ T5817] hsr_slave_0: entered promiscuous mode [ 187.829977][ T5815] Bluetooth: hci2: command tx timeout [ 187.835129][ T5817] hsr_slave_1: entered promiscuous mode [ 187.836192][ T5102] Bluetooth: hci0: command tx timeout [ 187.845039][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 187.853390][ T5817] Cannot create hsr debugfs directory [ 187.952451][ T5806] hsr_slave_0: entered promiscuous mode [ 187.961928][ T5806] hsr_slave_1: entered promiscuous mode [ 187.970369][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 187.976232][ T5806] Cannot create hsr debugfs directory [ 187.988587][ T5102] Bluetooth: hci1: command tx timeout [ 188.078991][ T5816] hsr_slave_0: entered promiscuous mode [ 188.089207][ T5816] hsr_slave_1: entered promiscuous mode [ 188.097892][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 188.103989][ T5816] Cannot create hsr debugfs directory [ 188.110822][ T5102] Bluetooth: hci3: command tx timeout [ 188.228510][ T5102] Bluetooth: hci4: command tx timeout [ 189.461826][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.501399][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.521238][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.557119][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.695733][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.726127][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.751892][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.792077][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.847145][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.929097][ T5102] Bluetooth: hci0: command tx timeout [ 189.934705][ T5102] Bluetooth: hci2: command tx timeout [ 189.989710][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.024192][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.045644][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.065885][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.075006][ T5815] Bluetooth: hci1: command tx timeout [ 190.164612][ T5815] Bluetooth: hci3: command tx timeout [ 190.189566][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.275006][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.297669][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.309156][ T5815] Bluetooth: hci4: command tx timeout [ 190.394479][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.473084][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.536246][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.569768][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.040587][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.088093][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.256865][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.337128][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.344749][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.412636][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.431595][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.489228][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.496707][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.570869][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.578431][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.595742][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.603421][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.644699][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.684198][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.855163][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.862774][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.915344][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.956584][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.986604][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.994231][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.043963][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.051744][ T3777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.175532][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.183244][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.342915][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.501080][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.508673][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.604682][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.664421][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.672088][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.024665][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.166627][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.382703][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.586313][ T5806] veth0_vlan: entered promiscuous mode [ 194.615158][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.767175][ T5806] veth1_vlan: entered promiscuous mode [ 194.804892][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.002695][ T5804] veth0_vlan: entered promiscuous mode [ 195.181213][ T5806] veth0_macvtap: entered promiscuous mode [ 195.221262][ T5804] veth1_vlan: entered promiscuous mode [ 195.265283][ T5806] veth1_macvtap: entered promiscuous mode [ 195.371291][ T5817] veth0_vlan: entered promiscuous mode [ 195.508938][ T5817] veth1_vlan: entered promiscuous mode [ 195.529858][ T5816] veth0_vlan: entered promiscuous mode [ 195.563740][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.650461][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.706825][ T5816] veth1_vlan: entered promiscuous mode [ 195.777823][ T5804] veth0_macvtap: entered promiscuous mode [ 195.826471][ T4175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.843449][ T4175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.868448][ T4175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.885123][ T5804] veth1_macvtap: entered promiscuous mode [ 195.906826][ T4175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.016595][ T5817] veth0_macvtap: entered promiscuous mode [ 196.077965][ T5817] veth1_macvtap: entered promiscuous mode [ 196.117612][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.174867][ T5816] veth0_macvtap: entered promiscuous mode [ 196.222041][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.277804][ T5816] veth1_macvtap: entered promiscuous mode [ 196.332290][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.387501][ T1042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.457176][ T1042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.475058][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.548090][ T1042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.568843][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.611410][ T1042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.656214][ T1042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.681924][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.690725][ T1042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.744387][ T1042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.802510][ T1042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.830889][ T1042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.860764][ T1042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.944376][ T1042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.998662][ T1042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.055505][ T5810] veth0_vlan: entered promiscuous mode [ 197.186616][ T5810] veth1_vlan: entered promiscuous mode [ 197.612560][ T5810] veth0_macvtap: entered promiscuous mode [ 197.758047][ T5810] veth1_macvtap: entered promiscuous mode [ 197.941649][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.059246][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.106494][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.176121][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.280969][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.328990][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.523369][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.525493][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.531668][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.548075][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.797746][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.805911][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.847452][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.855889][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.083854][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.092072][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.131303][ T4102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.140325][ T4102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.269433][ T3646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.279177][ T3646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.329659][ T5806] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 203.515815][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.524126][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.746673][ T4473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.759035][ T4473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.920463][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.928723][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.836452][ T6001] loop3: detected capacity change from 0 to 256 [ 205.061297][ T794] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 205.072494][ T6001] exFAT-fs (loop3): error, The cluster chain has a loop [ 205.079920][ T6001] exFAT-fs (loop3): failed to count the number of clusters in root [ 205.088111][ T6001] exFAT-fs (loop3): failed to recognize exfat type [ 205.303660][ T794] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.315657][ T794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.398709][ T794] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.408020][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.414243][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 205.417282][ T794] usb 2-1: SerialNumber: syz [ 205.808552][ T794] usb 2-1: 0:2 : does not exist [ 205.899617][ T794] usb 2-1: 5:0: cannot get min/max values for control 1 (id 5) [ 205.990500][ T794] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 206.079030][ T794] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 206.086993][ T794] usb 2-1: unit 1 not found! [ 206.148974][ T794] usb 2-1: 5:0: cannot get min/max values for control 7 (id 5) [ 206.350136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 206.379331][ T794] usb 2-1: USB disconnect, device number 2 [ 206.586695][ T6020] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 206.954221][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.758730][ T6030] loop1: detected capacity change from 0 to 512 [ 207.877542][ T6030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.012482][ T6030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.124818][ T6030] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.228840][ T30] audit: type=1800 audit(1767974757.805:2): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 208.501974][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.218488][ T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 209.413557][ T794] usb 1-1: Using ep0 maxpacket: 32 [ 209.442983][ T794] usb 1-1: too many configurations: 37, using maximum allowed: 8 [ 209.478416][ T794] usb 1-1: config 0 has no interfaces? [ 209.507320][ T794] usb 1-1: config 0 has no interfaces? [ 209.573882][ T794] usb 1-1: config 0 has no interfaces? [ 209.600372][ T794] usb 1-1: config 0 has no interfaces? [ 209.659290][ T794] usb 1-1: config 0 has no interfaces? [ 209.699609][ T794] usb 1-1: config 0 has no interfaces? [ 209.744249][ T794] usb 1-1: config 0 has no interfaces? [ 209.763663][ T794] usb 1-1: config 0 has no interfaces? [ 209.806233][ T794] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=eb.3a [ 209.815769][ T794] usb 1-1: New USB device strings: Mfr=163, Product=244, SerialNumber=76 [ 209.824919][ T794] usb 1-1: Product: syz [ 209.832391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 209.842513][ T794] usb 1-1: Manufacturer: syz [ 209.847277][ T794] usb 1-1: SerialNumber: syz [ 210.022103][ T794] usb 1-1: config 0 descriptor?? [ 210.270919][ T794] usb 1-1: USB disconnect, device number 2 [ 210.397028][ T6059] loop4: detected capacity change from 0 to 256 [ 211.071884][ T794] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 211.288854][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 211.327379][ T794] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 211.336046][ T794] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.346248][ T794] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.358095][ T794] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.371675][ T794] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.386462][ T794] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.395855][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.515772][ T6068] binder: BINDER_SET_CONTEXT_MGR already set [ 211.522465][ T6068] binder: 6067:6068 ioctl 4018620d 80004a80 returned -16 [ 211.831143][ T794] usb 2-1: GET_CAPABILITIES returned 11 [ 211.837205][ T794] usbtmc 2-1:16.0: can't read capabilities [ 212.072951][ T5859] usb 2-1: USB disconnect, device number 3 [ 215.328700][ T5859] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 215.571405][ T5859] usb 5-1: Using ep0 maxpacket: 8 [ 215.605919][ T5859] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 215.614744][ T5859] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.624993][ T5859] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.635127][ T5859] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.645567][ T5859] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.658978][ T5859] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.673174][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.987410][ T5859] usb 5-1: GET_CAPABILITIES returned 2f [ 215.996101][ T5859] usbtmc 5-1:16.0: can't read capabilities [ 216.219950][ T5859] usb 5-1: USB disconnect, device number 2 [ 216.857665][ T6124] fuse: Unknown parameter 'group_i00000000000000000000' [ 217.216231][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.225377][ T6125] batadv_slave_0: entered promiscuous mode [ 218.215127][ T6144] loop4: detected capacity change from 0 to 64 [ 218.293689][ T6144] ======================================================= [ 218.293689][ T6144] WARNING: The mand mount option has been deprecated and [ 218.293689][ T6144] and is ignored by this kernel. Remove the mand [ 218.293689][ T6144] option from the mount to silence this warning. [ 218.293689][ T6144] ======================================================= [ 219.014164][ T6152] fuse: Unknown parameter 'group_id00000000000000000000' [ 220.310209][ T5859] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 220.517789][ T6173] loop1: detected capacity change from 0 to 512 [ 220.538429][ T5859] usb 5-1: Using ep0 maxpacket: 8 [ 220.562161][ T5859] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 220.565732][ T6173] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 220.571031][ T5859] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.571169][ T5859] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.571307][ T5859] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.571442][ T5859] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.571651][ T5859] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.571786][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.661255][ T6173] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.904517][ T6173] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 220.929408][ T5859] usb 5-1: GET_CAPABILITIES returned f8 [ 220.929757][ T6173] EXT4-fs (loop1): 1 truncate cleaned up [ 220.935393][ T5859] usbtmc 5-1:16.0: can't read capabilities [ 220.943989][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.116372][ T794] usb 5-1: USB disconnect, device number 3 [ 221.522043][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.902630][ T6188] binder: BINDER_SET_CONTEXT_MGR already set [ 221.914738][ T6188] binder: 6187:6188 ioctl 4018620d 80004a80 returned -16 [ 222.001068][ T6190] fuse: Unknown parameter 'group_id00000000000000000000' [ 223.436452][ T6212] loop1: detected capacity change from 0 to 512 [ 223.570727][ T6212] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.774254][ T6212] EXT4-fs (loop1): 1 truncate cleaned up [ 223.783025][ T6212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.922804][ T6215] loop4: detected capacity change from 0 to 2048 [ 224.077940][ T6215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.128891][ T794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 224.251662][ T6224] binder: BINDER_SET_CONTEXT_MGR already set [ 224.257835][ T6224] binder: 6223:6224 ioctl 4018620d 80004a80 returned -16 [ 224.302431][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 224.379025][ T794] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 224.387483][ T794] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.398490][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.408554][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.419044][ T794] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.438836][ T794] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.448124][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.466178][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.498585][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.505215][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.564356][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.981811][ T794] usb 1-1: GET_CAPABILITIES returned 0 [ 224.993526][ T794] usbtmc 1-1:16.0: can't read capabilities [ 225.210106][ T5859] usb 1-1: USB disconnect, device number 3 [ 225.336482][ T6232] fuse: Unknown parameter 'group_id00000000000000000000' [ 226.287520][ T6245] loop3: detected capacity change from 0 to 256 [ 227.069902][ T6253] loop1: detected capacity change from 0 to 512 [ 227.166739][ T6253] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 227.328774][ T6253] EXT4-fs (loop1): 1 truncate cleaned up [ 227.336658][ T6253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.820461][ T6261] binder: BINDER_SET_CONTEXT_MGR already set [ 227.826740][ T6261] binder: 6260:6261 ioctl 4018620d 80004a80 returned -16 [ 227.999875][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.069064][ T5815] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 228.077753][ T5815] Bluetooth: hci4: Injecting HCI hardware error event [ 228.086836][ T5815] Bluetooth: hci4: hardware error 0x00 [ 228.659202][ T6271] fuse: Bad value for 'user_id' [ 228.664285][ T6271] fuse: Bad value for 'user_id' [ 228.812659][ T794] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 229.020241][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 229.070574][ T794] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 229.082814][ T794] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.094221][ T794] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.104279][ T794] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.114612][ T794] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.128068][ T794] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.137395][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.586751][ T794] usb 4-1: usb_control_msg returned -71 [ 229.601671][ T794] usbtmc 4-1:16.0: can't read capabilities [ 229.701123][ T794] usb 4-1: USB disconnect, device number 2 [ 229.800034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 230.058765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 230.070536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 230.166341][ T5815] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 230.211244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 230.891689][ T6291] loop3: detected capacity change from 0 to 256 [ 230.936366][ T6291] exfat: Deprecated parameter 'namecase' [ 230.942808][ T6291] exfat: Deprecated parameter 'utf8' [ 231.042979][ T6290] loop1: detected capacity change from 0 to 512 [ 231.099781][ T6290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 231.176873][ T6291] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 231.247421][ T6290] EXT4-fs (loop1): 1 truncate cleaned up [ 231.255885][ T6290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.609791][ T6300] fuse: Bad value for 'fd' [ 231.859837][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.312887][ T6305] fuse: Bad value for 'user_id' [ 232.317955][ T6305] fuse: Bad value for 'user_id' [ 232.941979][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 233.044869][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 233.172670][ T794] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 233.230092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 233.239532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 233.497259][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 233.539892][ T794] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 233.548710][ T794] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.559140][ T794] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.569175][ T794] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.579425][ T794] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.595421][ T794] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.605529][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.749110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 234.039969][ T794] usb 2-1: usb_control_msg returned -71 [ 234.046159][ T794] usbtmc 2-1:16.0: can't read capabilities [ 234.204865][ T794] usb 2-1: USB disconnect, device number 4 [ 235.441208][ T6332] loop1: detected capacity change from 0 to 512 [ 235.461545][ T6329] loop3: detected capacity change from 0 to 512 [ 235.557738][ T6329] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 235.606699][ T6332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.619958][ T6332] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.723940][ T6329] EXT4-fs (loop3): 1 truncate cleaned up [ 235.732298][ T6329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.998978][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.259485][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.445110][ T6342] fuse: Bad value for 'user_id' [ 236.450604][ T6342] fuse: Bad value for 'user_id' [ 236.755181][ T6344] fuse: Bad value for 'user_id' [ 236.765311][ T6344] fuse: Bad value for 'user_id' [ 236.847215][ T6346] loop2: detected capacity change from 0 to 64 [ 237.500495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 237.873421][ T6356] loop2: detected capacity change from 0 to 128 [ 237.954300][ T6356] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 238.845181][ T6368] loop0: detected capacity change from 0 to 512 [ 238.933796][ T6368] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 239.068646][ T6368] EXT4-fs (loop0): 1 truncate cleaned up [ 239.149536][ T6368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.437828][ T6376] fuse: Bad value for 'fd' [ 239.828808][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.055981][ T6378] fuse: Bad value for 'fd' [ 240.520840][ T6383] fuse: Bad value for 'user_id' [ 240.526180][ T6383] fuse: Bad value for 'user_id' [ 241.427174][ T6386] loop0: detected capacity change from 0 to 256 [ 241.501248][ T6386] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.512243][ T6386] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 241.721425][ T6386] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 241.755124][ T6386] exFAT-fs (loop0): failed to load alloc-bitmap [ 241.761637][ T6386] exFAT-fs (loop0): failed to recognize exfat type [ 242.147821][ T6388] loop3: detected capacity change from 0 to 16 [ 242.261881][ T6388] erofs (device loop3): mounted with root inode @ nid 36. [ 244.446218][ T6403] loop1: detected capacity change from 0 to 512 [ 244.487716][ T6403] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 244.553105][ T6403] EXT4-fs (loop1): 1 truncate cleaned up [ 244.561432][ T6403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.011257][ T6409] fuse: Bad value for 'fd' [ 245.021536][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.505505][ T6413] loop0: detected capacity change from 0 to 2048 [ 246.635038][ T6413] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.946922][ T30] audit: type=1800 audit(1767974796.455:3): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.160" name="file1" dev="loop0" ino=1313 res=0 errno=0 [ 248.521189][ T6434] fuse: Bad value for 'fd' [ 251.628855][ T6461] fuse: Bad value for 'fd' [ 251.685412][ T6462] loop1: detected capacity change from 0 to 1024 [ 251.752501][ T6463] netlink: 'syz.0.183': attribute type 10 has an invalid length. [ 251.760806][ T6463] netlink: 55 bytes leftover after parsing attributes in process `syz.0.183'. [ 252.065820][ T30] audit: type=1800 audit(1767974801.625:4): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.182" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 255.580040][ T6489] fuse: Bad value for 'fd' [ 256.044534][ T5102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.061278][ T5102] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.071049][ T5102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.100735][ T5102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.120555][ T5102] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.283294][ T6497] loop1: detected capacity change from 0 to 64 [ 257.809894][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 258.229608][ T5102] Bluetooth: hci5: command tx timeout [ 258.464315][ T6517] loop0: detected capacity change from 0 to 128 [ 258.613691][ T6517] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.854072][ T6496] chnl_net:caif_netlink_parms(): no params data found [ 259.559402][ T6527] fuse: Bad value for 'fd' [ 260.307185][ T6534] loop3: detected capacity change from 0 to 64 [ 260.314879][ T5102] Bluetooth: hci5: command tx timeout [ 260.768014][ T6538] loop4: detected capacity change from 0 to 256 [ 260.909086][ T6538] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.920652][ T6538] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 261.147391][ T6538] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 261.296907][ T6538] exFAT-fs (loop4): failed to load alloc-bitmap [ 261.303657][ T6538] exFAT-fs (loop4): failed to recognize exfat type [ 261.727833][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.735646][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.743410][ T6496] bridge_slave_0: entered allmulticast mode [ 261.757789][ T6496] bridge_slave_0: entered promiscuous mode [ 261.856406][ T6496] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.863993][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.871835][ T6496] bridge_slave_1: entered allmulticast mode [ 261.880364][ T6496] bridge_slave_1: entered promiscuous mode [ 261.936926][ T6538] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.947848][ T6538] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 261.963649][ T6538] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 261.979105][ T6538] exFAT-fs (loop4): failed to load alloc-bitmap [ 261.985524][ T6538] exFAT-fs (loop4): failed to recognize exfat type [ 262.248981][ T6550] loop1: detected capacity change from 0 to 512 [ 262.395238][ T5102] Bluetooth: hci5: command tx timeout [ 262.412206][ T6550] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.450686][ T6496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.482507][ T6496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.913640][ T6496] team0: Port device team_slave_0 added [ 263.026917][ T6496] team0: Port device team_slave_1 added [ 263.160702][ T6557] loop4: detected capacity change from 0 to 128 [ 263.160679][ T6550] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.218: bad orphan inode 131083 [ 263.229955][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.254459][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.262082][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.291712][ T6496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.423206][ T6557] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.711972][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.719198][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.745450][ T6496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.760554][ T6562] fuse: Invalid rootmode [ 264.472765][ T5102] Bluetooth: hci5: command tx timeout [ 264.544003][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.730932][ T6496] hsr_slave_0: entered promiscuous mode [ 264.740504][ T6496] hsr_slave_1: entered promiscuous mode [ 264.748478][ T6496] debugfs: 'hsr0' already exists in 'hsr' [ 264.754343][ T6496] Cannot create hsr debugfs directory [ 266.906607][ T6496] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.973565][ T5859] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 267.007612][ T6496] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.095790][ T6496] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.178991][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 267.213473][ T6496] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.221220][ T5859] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 267.230572][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.257773][ T5859] usb 4-1: config 0 descriptor?? [ 267.525998][ T5859] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 267.571304][ T5859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.633432][ T5859] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 267.641141][ T5859] usb 4-1: media controller created [ 267.717289][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.782910][ T6584] loop1: detected capacity change from 0 to 2048 [ 267.820172][ T6580] ===================================================== [ 267.827506][ T6580] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 267.835251][ T6580] _copy_to_user+0xcc/0x120 [ 267.840037][ T6580] i2cdev_ioctl_smbus+0x586/0x660 [ 267.845161][ T6580] compat_i2cdev_ioctl+0x48f/0xb40 [ 267.850585][ T6580] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 267.856215][ T6580] ia32_sys_call+0x25d9/0x4340 [ 267.861261][ T6580] __do_fast_syscall_32+0x154/0x320 [ 267.866569][ T6580] do_fast_syscall_32+0x38/0x80 [ 267.871670][ T6580] do_SYSENTER_32+0x1f/0x30 [ 267.876270][ T6580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.882824][ T6580] [ 267.885187][ T6580] Uninit was stored to memory at: [ 267.894936][ T6580] __i2c_smbus_xfer+0x24ce/0x2eb0 [ 267.901226][ T6580] i2c_smbus_xfer+0x2cd/0x460 [ 267.906005][ T6580] i2cdev_ioctl_smbus+0x4a1/0x660 [ 267.911386][ T6580] compat_i2cdev_ioctl+0x48f/0xb40 [ 267.916595][ T6580] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 267.922386][ T6580] ia32_sys_call+0x25d9/0x4340 [ 267.927277][ T6580] __do_fast_syscall_32+0x154/0x320 [ 267.933146][ T6580] do_fast_syscall_32+0x38/0x80 [ 267.938252][ T6580] do_SYSENTER_32+0x1f/0x30 [ 267.942936][ T6580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.949500][ T6580] [ 267.951852][ T6580] Local variable msgbuf1.i created at: [ 267.957337][ T6580] __i2c_smbus_xfer+0x830/0x2eb0 [ 267.962547][ T6580] i2c_smbus_xfer+0x2cd/0x460 [ 267.967372][ T6580] [ 267.970089][ T6580] Byte 0 of 1 is uninitialized [ 267.974890][ T6580] Memory access of size 1 starts at ffff88805080fc76 [ 267.981721][ T6580] Data copied to user address 00000000800002c0 [ 267.987917][ T6580] [ 267.993555][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.3.228 Tainted: G L syzkaller #0 PREEMPT(none) [ 268.008779][ T6580] Tainted: [L]=SOFTLOCKUP [ 268.013206][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.024345][ T6580] ===================================================== [ 268.031458][ T6580] Disabling lock debugging due to kernel taint [ 268.037663][ T6580] Kernel panic - not syncing: kmsan.panic set ... [ 268.044149][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.3.228 Tainted: G B L syzkaller #0 PREEMPT(none) [ 268.055029][ T6580] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 268.060622][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.070802][ T6580] Call Trace: [ 268.074154][ T6580] [ 268.077120][ T6580] __dump_stack+0x26/0x30 [ 268.081542][ T6580] dump_stack_lvl+0x50/0x1c0 [ 268.086223][ T6580] ? dump_stack+0x12/0x25 [ 268.090666][ T6580] dump_stack+0x1e/0x25 [ 268.094970][ T6580] vpanic+0x435/0xd30 [ 268.099155][ T6580] panic+0x15d/0x160 [ 268.103180][ T6580] kmsan_report+0x31c/0x320 [ 268.107791][ T6580] ? kmsan_internal_check_memory+0x1e1/0x230 [ 268.113868][ T6580] ? kmsan_copy_to_user+0xf1/0x190 [ 268.119076][ T6580] ? _copy_to_user+0xcc/0x120 [ 268.123837][ T6580] ? i2cdev_ioctl_smbus+0x586/0x660 [ 268.129155][ T6580] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 268.134593][ T6580] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 268.140438][ T6580] ? ia32_sys_call+0x25d9/0x4340 [ 268.145514][ T6580] ? __do_fast_syscall_32+0x154/0x320 [ 268.151049][ T6580] ? do_fast_syscall_32+0x38/0x80 [ 268.156200][ T6580] ? do_SYSENTER_32+0x1f/0x30 [ 268.160984][ T6580] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.167679][ T6580] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 268.173072][ T6580] ? __i2c_transfer+0x1179/0x3110 [ 268.178212][ T6580] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 268.184671][ T6580] ? kmsan_get_metadata+0xfb/0x160 [ 268.189909][ T6580] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.195941][ T6580] ? __i2c_smbus_xfer+0x1e54/0x2eb0 [ 268.201316][ T6580] ? kmsan_get_metadata+0xfb/0x160 [ 268.206633][ T6580] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.212778][ T6580] kmsan_internal_check_memory+0x1e1/0x230 [ 268.218828][ T6580] kmsan_copy_to_user+0xf1/0x190 [ 268.223979][ T6580] _copy_to_user+0xcc/0x120 [ 268.228695][ T6580] i2cdev_ioctl_smbus+0x586/0x660 [ 268.233977][ T6580] compat_i2cdev_ioctl+0x48f/0xb40 [ 268.239322][ T6580] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 268.245195][ T6580] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 268.250944][ T6580] ? kmsan_get_metadata+0xfb/0x160 [ 268.256267][ T6580] ? kmsan_get_metadata+0xfb/0x160 [ 268.261646][ T6580] ia32_sys_call+0x25d9/0x4340 [ 268.266652][ T6580] __do_fast_syscall_32+0x154/0x320 [ 268.272059][ T6580] do_fast_syscall_32+0x38/0x80 [ 268.277101][ T6580] do_SYSENTER_32+0x1f/0x30 [ 268.281785][ T6580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.288327][ T6580] RIP: 0023:0xf707d539 [ 268.292536][ T6580] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 268.312309][ T6580] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 268.320908][ T6580] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 268.329013][ T6580] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.337654][ T6580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.345741][ T6580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 268.353813][ T6580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.361923][ T6580] [ 268.365562][ T6580] Kernel Offset: disabled [ 268.369944][ T6580] Rebooting in 86400 seconds..