last executing test programs: 7.280776569s ago: executing program 0 (id=1436): open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) 7.157033981s ago: executing program 0 (id=1437): r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) poll(&(0x7f0000000140)=[{r2, 0x245fc6872d8da9f4}], 0x1, 0x800000) syz_open_pts(0xffffffffffffffff, 0x0) poll(&(0x7f00000004c0)=[{r1, 0x2}], 0x1, 0x2) 6.221233935s ago: executing program 0 (id=1458): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 5.306537878s ago: executing program 0 (id=1474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000a80)=[{&(0x7f00000004c0)="b89b1bde2101cbf9a54517da8d21297603e5b3660dce3d7349fbf9b5be62886a066859593c3a3ade8cb9825b3ec5582c8857aaa8df25bb93e2edb284beb778fbacdc57dbc9991e6f969e66d5d76433edac83d72b00cbefb199114957864b7f66d4aae898c4b1e1ab89549fd1791fbd2499a93c124164b5fac8261ad07c26de3c3af8294a0fa355def08833fbfe94487bcfc185daa461edea3166088a40898515937804df2a40243b71964415af4cbdee188394ef267e100a14858b9a0d8f04b0a9161442f03ebe9e19449f5c69404ff28bc30f2ec7a68ed7a77bb6ac32db6bc9eded53ab25e43ee3a1593804bc892d9c69", 0xf1}, {&(0x7f00000005c0)="c0ac46aeebeb20cd5025601105087c98a57cb52e07ebf5d6c6d95a5faf3e25c99a85dadf88713bb83b3a5fce417c946982a058d07993ecf0ad5fb9c1aa99ca97c4268b4fb5441a49c47e81b0adca", 0x4e}, {&(0x7f0000000640)="2fefae3a044e0cddb9d2d8b789877a9de0ec4659065dc39124bb83f9126a0bb7fc06b1d0a2bc0208dc271d1c7f3ce016786169434b1e09db0ef6a019afef8cd5da1e8f3a6d1e889b81c384ff9b66f1d4dfa381f8ca1946103cd2b147c7359badc8", 0x61}, {&(0x7f00000006c0)="4fb48fae5a5c243e8dba8c06aa0910a76b53c5138bfa53cef95ddad3c07ca01d5f79683b5f76dee4de414091c64428e3e9cc278b2ec01c7f3894f747e1628614604abc746a5ced0b8ff3142936c0fc45c4cd4af924e9ca0c851f0f15fbfbe93d229af3403d6b", 0x66}, {&(0x7f0000000b00)="5631a872552f94d060d3df630a169d06abd2dc2a3e2ad2ea3ee3315a3cf158af355ee9f66cab4bd1e39c8e4353fb0fa06a8d79c22e691a88c82cf34e96ca2d941ab2b3038404c63abb840816ab8b73d267a87c69d9928c70e0eae5bb9abe68ac7878daf46f50acc9587b6591462e8576d8791a5157ed22c5a65dce343a7ff8c358ceb1916e007decf2dc40137d706057772f8af34e3920", 0x97}, {&(0x7f0000000880)="ab442a7f351ff236669d7ae7c7afa63ada2dc031ce26257e3de8559365473ccce5d0b093fd0a0c9f3e89bb44c73730f58f1a9bb0d70e2851e3e6a434b117e4cbbbd4aa8fdd0413395834cb93ec1deb8a46f97fef65106e1d554e7131928ad97d96b712014ea175458d2606106fc8bca78245ed15a28fda466f67106f74342cca132e5595daac3473796a01e5a5899771bf9c2429dfac5a5b4227d90d0483d59f25bbdfbdaf5eef2a3abf701a543b55185254609cd3aa2cbf2f68328cefbc10815e62765ac9999b012e56496203c8281c244489db3bfd16fa1832c5e9e499ba05da1e52f1c74f0d9d9fa6a10c313d0e6a", 0xf0}, {&(0x7f0000000980)="e74900fab9fea03fa805ccf8d09612ec34f9e7d2150f773aa8407d21311466c724919f2baa326d4e4b8a84b2af16024bddb00a063cf79e5198de835118dadc71c942ec97e17a5d19f6b2e5c0cb77539e9b4c3dfffd3087689cffca5df4088d85f25712a0c102a6ea32", 0x69}], 0x7) 5.006746946s ago: executing program 0 (id=1481): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x3, 0x0) r3 = dup(r1) dup2(r3, r2) connect$unix(r2, &(0x7f0000000000), 0x10) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x2}, 0xc) 4.459594946s ago: executing program 0 (id=1489): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000001200), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) 4.178355901s ago: executing program 4 (id=1494): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0xfff, 0x8003, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) accept(r0, 0x0, 0x0) 3.997005907s ago: executing program 4 (id=1496): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) 3.977324199s ago: executing program 3 (id=1497): r0 = msgget$private(0x0, 0x80) msgsnd(r0, &(0x7f00000003c0)={0x412ab4e260424bd3, "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"}, 0x808, 0x800) 3.85714106s ago: executing program 4 (id=1499): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000b80)={[{@dioread_nolock}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@orlov}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nojournal_checksum}]}, 0xfe, 0x43a, &(0x7f00000001c0)="$eJzs289vFFUcAPDvzLag/GpFREHQKhobf7S0oHLwotHEgyYmesBjbQtBFmpoTYQ0Wo3BoyHxbjya+Bd40otRTyZe9W5IiDYmoKea2Z0pu0u39Mcui8znkwy8t/N23/vum7fz9r1uAKU1lP2TROyIiN8iYqCebS4wVP/v2uL85D+L85NJLC29+WdSK3d1cX6yKFo8b3ueGU4j0k+TvJJms+cvnJ6oVqfP5fnRuTPvjc6ev/DMqTMTJ6dPTp8dP3bs6JGx558bf7YjcWZxXd3/4cyBfa++fen1yeOX3vnpm6y9ew/WzzfG0SlDWeB/LdW0nnu805X12M6GdNLXw4awLpWIyLqrvzb+B6IS1ztvIF75pKeNA7oquzdtbX96YQm4gyXR6xYAvVHc6LPvv8Vxi6Yet4UrL9a/AGVxX8uP+pm+SPMy/V2sfygiji/8+2V2RJfWIQAAGn2XzX+eXmn+l8behnK78j2UwYi4JyJ2R8S9EbEnIu6LqJW9PyIeWGf9rVtDN85/0ssbCmyNsvnfC/neVvP8r5j9xWAlz+2sxd+fnDhVnT6cvyfD0b81y4+tUsf3L//6ebtzjfO/7MjqL+aCeTsu97Us0E1NzE10alJ65eOI/X0rxZ8s7wQkEbEvIvav76V3FYlTT359oF2hm8e/ig7sMy19FfFEvf8XoiX+QrL6/uToXVGdPjxaXBU3+vmXi2+0q39T8XdA1v/bmq//lhIDfyeN+7Wz66/j4u+ftf1Os9Hrf0vyVm3Pekv+2AcTc3PnxiK2JK/V8k2Pj19/bpEvymfxDx9aefzvzp+Txf9gRGQX8cGIeCgiHs7b/khEPBoRh1aJ/8eXHnt34/F3Vxb/1Iqff8vX/2Bz/68/UTn9w7ft6l9b/x+tpYbzR2qffzex1gZu5r0DAACA/4s0InZEko4sp9N0ZKT+N/x7YltanZmde+rEzPtnp+q/ERiM/rRY6RpoWA8dSxbyV6znx/O14uL8kXzd+IvK3bX8yORMdarHsUPZbW8z/jN/VHrdOqDr/F4Lyqt1/Kc9agdw67n/Q3kZ/1Bexj+U10rj/6OWvL0AuDO5/0N5Gf9QXsY/lJfxD6W0md/1S5Q5Eelt0QyJLiV6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQGf8FAAD//yWS7pw=") sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000028bd7000fedbdf252700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900009000002c0000000a000600505050505050000015002a002503000d002503010a000105858c1698050000000a0006007893d4ff28dd000006003600000400000a00060008021100000100000a000600ffffff"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0xfd, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.761072119s ago: executing program 3 (id=1500): open(&(0x7f0000000180)='./file0\x00', 0x75f493fec6515f78, 0x0) setreuid(0xee00, 0xffffffffffffffff) r0 = getuid() chown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) r1 = getuid() setreuid(0xee00, r1) execve(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) 3.580862475s ago: executing program 3 (id=1503): openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x77, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x14bb, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff], 0x0, 0x10202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.249999765s ago: executing program 2 (id=1505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000a80)=[{&(0x7f00000004c0)="b89b1bde2101cbf9a54517da8d21297603e5b3660dce3d7349fbf9b5be62886a066859593c3a3ade8cb9825b3ec5582c8857aaa8df25bb93e2edb284beb778fbacdc57dbc9991e6f969e66d5d76433edac83d72b00cbefb199114957864b7f66d4aae898c4b1e1ab89549fd1791fbd2499a93c124164b5fac8261ad07c26de3c3af8294a0fa355def08833fbfe94487bcfc185daa461edea3166088a40898515937804df2a40243b71964415af4cbdee188394ef267e100a14858b9a0d8f04b0a9161442f03ebe9e19449f5c69404ff28bc30f2ec7a68ed7a77bb6ac32db6bc9eded53ab25e43ee3a1593804bc892d9c69", 0xf1}, {&(0x7f00000005c0)="c0ac46aeebeb20cd5025601105087c98a57cb52e07ebf5d6c6d95a5faf3e25c99a85dadf88713bb83b3a5fce417c946982a058d07993ecf0ad5fb9c1aa99ca97c4268b4fb5441a49c47e81b0adca", 0x4e}, {&(0x7f0000000640)="2fefae3a044e0cddb9d2d8b789877a9de0ec4659065dc39124bb83f9126a0bb7fc06b1d0a2bc0208dc271d1c7f3ce016786169434b1e09db0ef6a019afef8cd5da1e8f3a6d1e889b81c384ff9b66f1d4dfa381f8ca1946103cd2b147c7359badc8", 0x61}, {&(0x7f00000006c0)="4fb48fae5a5c243e8dba8c06aa0910a76b53c5138bfa53cef95ddad3c07ca01d5f79683b5f76dee4de414091c64428e3e9cc278b2ec01c7f3894f747e1628614604abc746a5ced0b8ff3142936c0fc45c4cd4af924e9ca0c851f0f15fbfbe93d229af3403d6b", 0x66}, {&(0x7f0000000b00)="5631a872552f94d060d3df630a169d06abd2dc2a3e2ad2ea3ee3315a3cf158af355ee9f66cab4bd1e39c8e4353fb0fa06a8d79c22e691a88c82cf34e96ca2d941ab2b3038404c63abb840816ab8b73d267a87c69d9928c70e0eae5bb9abe68ac7878daf46f50acc9587b6591462e8576d8791a5157ed22c5a65dce343a7ff8c358ceb1916e007decf2dc40137d706057772f8af34e3920", 0x97}, {&(0x7f0000000980)="e74900fab9fea03fa805ccf8d09612ec34f9e7d2150f773aa8407d21311466c724919f2baa326d4e4b8a84b2af16024bddb00a063cf79e5198de835118dadc71c942ec97e17a5d19f6b2e5c0cb77539e9b4c3dfffd3087689cffca5df4088d85f25712a0c102a6ea32e3", 0x6a}], 0x6) 3.050606213s ago: executing program 3 (id=1507): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2.97362774s ago: executing program 1 (id=1508): r0 = socket(0x2, 0x3, 0x3) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000600), 0x0) 2.924238545s ago: executing program 2 (id=1509): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') 2.713018554s ago: executing program 1 (id=1510): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x26, &(0x7f0000000000), 0x0) 1.928669885s ago: executing program 2 (id=1511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) 1.581383407s ago: executing program 1 (id=1512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x158}}, 0x0) 1.2164192s ago: executing program 1 (id=1513): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000022e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b001808003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000f40)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 899.788779ms ago: executing program 1 (id=1514): r0 = semget(0x0, 0x1, 0x81) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semop(r0, 0x0, 0x0) 882.05211ms ago: executing program 4 (id=1515): writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000240)="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", 0x401}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000600), &(0x7f0000000640)=0x4) 620.915244ms ago: executing program 1 (id=1516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params]}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/34, 0x4}, 0x20) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448dd, 0x0) 606.893465ms ago: executing program 2 (id=1517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) 536.293822ms ago: executing program 3 (id=1518): openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x77, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x14bb, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff], 0x0, 0x10202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 341.967879ms ago: executing program 2 (id=1519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000a80)=[{&(0x7f00000004c0)="b89b1bde2101cbf9a54517da8d21297603e5b3660dce3d7349fbf9b5be62886a066859593c3a3ade8cb9825b3ec5582c8857aaa8df25bb93e2edb284beb778fbacdc57dbc9991e6f969e66d5d76433edac83d72b00cbefb199114957864b7f66d4aae898c4b1e1ab89549fd1791fbd2499a93c124164b5fac8261ad07c26de3c3af8294a0fa355def08833fbfe94487bcfc185daa461edea3166088a40898515937804df2a40243b71964415af4cbdee188394ef267e100a14858b9a0d8f04b0a9161442f03ebe9e19449f5c69404ff28bc30f2ec7a68ed7a77bb6ac32db6bc9eded53ab25e43ee3a1593804bc892d9c69", 0xf1}, {&(0x7f00000005c0)="c0ac46aeebeb20cd5025601105087c98a57cb52e07ebf5d6c6d95a5faf3e25c99a85dadf88713bb83b3a5fce417c946982a058d07993ecf0ad5fb9c1aa99ca97c4268b4fb5441a49c47e81b0adca", 0x4e}, {&(0x7f0000000640)="2fefae3a044e0cddb9d2d8b789877a9de0ec4659065dc39124bb83f9126a0bb7fc06b1d0a2bc0208dc271d1c7f3ce016786169434b1e09db0ef6a019afef8cd5da1e8f3a6d1e889b81c384ff9b66f1d4dfa381f8ca1946103cd2b147c7359badc8", 0x61}, {&(0x7f00000006c0)="4fb48fae5a5c243e8dba8c06aa0910a76b53c5138bfa53cef95ddad3c07ca01d5f79683b5f76dee4de414091c64428e3e9cc278b2ec01c7f3894f747e1628614604abc746a5ced0b8ff3142936c0fc45c4cd4af924e9ca0c851f0f15fbfbe93d229af3403d6b", 0x66}, {&(0x7f0000000b00)="5631a872552f94d060d3df630a169d06abd2dc2a3e2ad2ea3ee3315a3cf158af355ee9f66cab4bd1e39c8e4353fb0fa06a8d79c22e691a88c82cf34e96ca2d941ab2b3038404c63abb840816ab8b73d267a87c69d9928c70e0eae5bb9abe68ac7878daf46f50acc9587b6591462e8576d8791a5157ed22c5a65dce343a7ff8c358ceb1916e007decf2dc40137d706057772f8af34e3920", 0x97}, {&(0x7f0000000980)="e74900fab9fea03fa805ccf8d09612ec34f9e7d2150f773aa8407d21311466c724919f2baa326d4e4b8a84b2af16024bddb00a063cf79e5198de835118dadc71c942ec97e17a5d19f6b2e5c0cb77539e9b4c3dfffd3087689cffca5df4088d85f25712a0c102a6ea32e3", 0x6a}], 0x6) 280.673515ms ago: executing program 4 (id=1520): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000029"], 0x3e}, 0x0) 76.851503ms ago: executing program 4 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}], {0x95, 0x0, 0x5a5}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 62.960755ms ago: executing program 3 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @random}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) 0s ago: executing program 2 (id=1523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c01330080000000ffffffffffff080211000000f7ab87594b3f00000000000000000100ddab8b7668a21729e4ad77e366ae9e66d671f8bb54784e373e2223fde04977364b86c8cdcafe8390438142ae7889f37bbd41e50a26612ce77fcf71400d7c1e0a34b043fbb4ca6b6e5ecb7c8169982fe3f1261537a3b4467e0db0ca915ec1964c56db466602eed1b321bfab5c5b2ab6d6e1ffff58b596e2cfca04801aae25adb2b4b53aa135a66ae836452cff03af5ed4b78b2f98cb570d7c4f266d0396d7725da4b37cefc58749a97b5c215b6add6995e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b27336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a10"], 0x158}}, 0x0) kernel console output (not intermixed with test programs): 193.218225][ T6134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 193.226922][ T6134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 193.235647][ T6134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 193.244262][ T6134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 193.244294][ T6134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 193.271725][ T26] audit: type=1800 audit(1731031095.792:163): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.608" name="file1" dev="loop0" ino=1048617 res=0 errno=0 [ 193.377719][ T6145] loop3: detected capacity change from 0 to 512 [ 193.494046][ T6145] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.613: invalid indirect mapped block 256 (level 2) [ 193.548840][ T4256] Bluetooth: hci4: link tx timeout [ 193.554221][ T4256] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.594977][ T6145] EXT4-fs (loop3): 2 truncates cleaned up [ 193.641827][ T6145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.461305][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.476644][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.972533][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 195.118715][ T4262] Bluetooth: hci4: link tx timeout [ 195.124485][ T4262] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.145900][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 195.797271][ T6192] loop0: detected capacity change from 0 to 256 [ 195.836296][ T6192] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.862473][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.871246][ T6192] FAT-fs (loop0): Filesystem has been set read-only [ 195.878323][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.887004][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.895691][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.904625][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.913460][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.922950][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.958052][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.966767][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.975444][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.984396][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 195.993043][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.001740][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.010753][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.019499][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.028209][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.037143][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.045782][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.055711][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.064686][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.073320][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.081989][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.091066][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.099705][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.110862][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.119833][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.128479][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.137151][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.146091][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.154863][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.163546][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.172487][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.181086][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.189740][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.198645][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.207321][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.215908][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.224532][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.233114][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.242030][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.251493][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.261114][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.269711][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.278395][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.286995][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.295620][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.304282][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.313046][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.321642][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.330891][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.339524][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.348235][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.356981][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.365600][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.374233][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.382881][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.391441][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.400276][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.408960][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.417735][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.426375][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.435670][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.444293][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.452901][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.461675][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.470222][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.478858][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.487542][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.496176][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.504775][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.513526][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.522281][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.531440][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.540586][ T6192] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 196.587750][ T26] audit: type=1800 audit(1731031099.102:164): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.626" name="file1" dev="loop0" ino=1048618 res=0 errno=0 [ 196.632269][ T4250] Bluetooth: hci2: command 0x0406 tx timeout [ 196.638398][ T4250] Bluetooth: hci1: command 0x0406 tx timeout [ 196.646868][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 196.721770][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 197.378147][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 197.569551][ T6230] overlayfs: missing 'lowerdir' [ 197.955419][ T4250] Bluetooth: hci4: link tx timeout [ 197.960607][ T4250] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.969650][ T4250] Bluetooth: hci4: link tx timeout [ 197.974936][ T4250] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.998403][ T6204] loop4: detected capacity change from 0 to 40427 [ 198.007316][ T6204] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 198.015397][ T6204] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 198.254141][ T6204] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.372572][ T6260] loop2: detected capacity change from 0 to 256 [ 198.481229][ T6260] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.609908][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 198.648502][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.657579][ T6260] FAT-fs (loop2): Filesystem has been set read-only [ 198.664643][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.673309][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.682848][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.692124][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.700748][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.709454][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.718542][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.727191][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.735854][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.744818][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.753475][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.762170][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.771100][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.779749][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.788428][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.797391][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.806036][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.814848][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.823801][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.832460][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.841217][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.849868][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.858783][ T6260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 198.907758][ T26] audit: type=1800 audit(1731031101.412:165): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.642" name="file1" dev="loop2" ino=1048619 res=0 errno=0 [ 198.955163][ T6204] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 198.975092][ T6204] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 199.376732][ T6276] overlayfs: missing 'lowerdir' [ 200.161937][ T6274] loop3: detected capacity change from 0 to 40427 [ 200.181724][ T6274] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 200.216471][ T6274] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 200.390076][ T6274] F2FS-fs (loop3): Found nat_bits in checkpoint [ 200.614608][ T6309] xt_hashlimit: size too large, truncated to 1048576 [ 200.640265][ T6274] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 200.662223][ T6274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.096054][ T6320] loop1: detected capacity change from 0 to 256 [ 201.174824][ T6320] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.300066][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.308910][ T6320] FAT-fs (loop1): Filesystem has been set read-only [ 201.371714][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.380419][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.389167][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.398224][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.406919][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.415627][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.424558][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.433187][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.441877][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.450754][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.484420][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.493197][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.502170][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.510800][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.519481][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.528450][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.537131][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.545799][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.554770][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.563404][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.572315][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.581181][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.591016][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.602157][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.611046][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.619731][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.628447][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.637173][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.645779][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.654398][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.663040][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.671636][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.680184][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.688847][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.697439][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.706495][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.715761][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.724372][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.733042][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.741656][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.750190][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.758774][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.767406][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.775975][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.784556][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.793317][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.802119][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.810768][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.819859][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.828744][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.837452][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.846436][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.855207][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.865156][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.873972][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.882680][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.891553][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.900324][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.909120][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.917926][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.926761][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.935460][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.944189][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.953079][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.963089][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.971915][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.980649][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.989442][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.998115][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 202.006943][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 202.015624][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 202.024525][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 202.033334][ T6320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 202.106552][ T26] audit: type=1800 audit(1731031104.592:166): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.658" name="file1" dev="loop1" ino=1048620 res=0 errno=0 [ 202.731854][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 203.068077][ T6338] overlayfs: missing 'workdir' [ 204.435112][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 204.773949][ T6379] overlayfs: missing 'workdir' [ 205.657746][ T6395] loop4: detected capacity change from 0 to 512 [ 205.874587][ T6395] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.682: invalid indirect mapped block 256 (level 2) [ 206.650806][ T6395] EXT4-fs (loop4): 2 truncates cleaned up [ 206.665995][ T6395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 206.871270][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 206.988233][ T6410] overlayfs: missing 'workdir' [ 207.269657][ T6381] loop1: detected capacity change from 0 to 40427 [ 207.335911][ T6381] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 207.371939][ T6381] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 207.620524][ T6381] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.927932][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 207.949252][ T6381] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 207.964508][ T6381] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.849063][ T6437] 9pnet_fd: Insufficient options for proto=fd [ 209.920828][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 210.217970][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'. [ 210.291124][ T6461] bridge6: port 1(bridge_slave_1) entered blocking state [ 210.319701][ T6461] bridge6: port 1(bridge_slave_1) entered disabled state [ 210.348454][ T6461] device bridge_slave_1 entered promiscuous mode [ 210.578249][ T6473] 9pnet_fd: Insufficient options for proto=fd [ 211.542870][ T6479] input: syz0 as /devices/virtual/input/input13 [ 211.730395][ T6487] overlayfs: statfs failed on './file0' [ 211.782763][ T6491] overlayfs: statfs failed on './file0' [ 211.817254][ T6492] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.847652][ T6451] loop0: detected capacity change from 0 to 40427 [ 211.855546][ T6492] overlayfs: filesystem on './bus' not supported as upperdir [ 211.873290][ T6451] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 211.876999][ T4293] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 211.888708][ T6451] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 211.940868][ T6451] F2FS-fs (loop0): Found nat_bits in checkpoint [ 212.015661][ T6451] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 212.027653][ T6451] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 212.223242][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 212.471922][ T4293] usb 4-1: Using ep0 maxpacket: 8 [ 212.683235][ T4293] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 212.815084][ T4293] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.825851][ T27] usb 2-1: no configurations [ 212.835010][ T27] usb 2-1: can't read configurations, error -22 [ 213.001708][ T4293] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.044010][ T4293] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.054478][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 213.077013][ T4250] Bluetooth: hci4: link tx timeout [ 213.082252][ T4250] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.098691][ T4293] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.117963][ T4293] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.128966][ T6509] loop4: detected capacity change from 0 to 512 [ 213.153198][ T6509] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.717: casefold flag without casefold feature [ 213.158108][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.181788][ T6509] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.717: couldn't read orphan inode 15 (err -117) [ 213.211909][ T6509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.248500][ T26] audit: type=1800 audit(1731031115.792:167): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.717" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 213.319208][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 213.371791][ T27] usb 2-1: no configurations [ 213.376454][ T27] usb 2-1: can't read configurations, error -22 [ 213.388458][ T27] usb usb2-port1: attempt power cycle [ 213.451916][ T4293] usb 4-1: usb_control_msg returned -71 [ 213.459906][ T4293] usbtmc 4-1:16.0: can't read capabilities [ 213.496611][ T4293] usb 4-1: USB disconnect, device number 9 [ 214.521800][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.682027][ T27] usb 2-1: no configurations [ 214.693096][ T27] usb 2-1: can't read configurations, error -22 [ 214.720962][ T6529] overlayfs: statfs failed on './file0' [ 214.731022][ T6529] overlayfs: statfs failed on './file0' [ 214.780874][ T6531] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.787991][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 214.830534][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 214.840880][ T6534] overlayfs: filesystem on './bus' not supported as upperdir [ 214.853045][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 215.131810][ T27] usb 2-1: device not accepting address 7, error -71 [ 215.139876][ T27] usb usb2-port1: unable to enumerate USB device [ 215.151067][ T6546] loop4: detected capacity change from 0 to 512 [ 215.253011][ T6546] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.731: casefold flag without casefold feature [ 215.285211][ T6546] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.731: couldn't read orphan inode 15 (err -117) [ 215.346538][ T6546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.402441][ T26] audit: type=1800 audit(1731031117.952:168): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.731" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 215.481926][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 216.318119][ T6559] loop3: detected capacity change from 0 to 512 [ 216.393944][ T6559] EXT4-fs: Ignoring removed orlov option [ 216.469233][ T6559] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.486135][ T6559] EXT4-fs (loop3): Test dummy encryption mode enabled [ 216.531627][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 216.550887][ T6559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 216.559892][ T6559] System zones: 1-12 [ 216.580418][ T6559] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.735: casefold flag without casefold feature [ 216.732937][ T6559] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.735: couldn't read orphan inode 15 (err -117) [ 216.791855][ T6559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 216.806514][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 216.826673][ T6559] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.735: Directory hole found for htree leaf block 0 [ 216.894374][ T6559] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.735: Directory hole found for htree leaf block 0 [ 216.941990][ T27] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 216.950238][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.970256][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.980701][ T4333] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 216.988827][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.999806][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.014467][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.025447][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.031320][ T6574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.057911][ T6572] overlayfs: statfs failed on './file0' [ 217.079167][ T6574] overlayfs: filesystem on './bus' not supported as upperdir [ 217.090217][ T6572] overlayfs: statfs failed on './file0' [ 217.291825][ T27] usb 1-1: usb_control_msg returned -71 [ 217.297472][ T27] usbtmc 1-1:16.0: can't read capabilities [ 217.346173][ T27] usb 1-1: USB disconnect, device number 5 [ 217.374590][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 217.412980][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 217.451791][ T4333] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 217.459693][ T4333] usb 5-1: can't read configurations, error -61 [ 217.562623][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 217.611677][ T4333] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 218.861840][ T4333] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 218.873930][ T4333] usb 5-1: can't read configurations, error -61 [ 218.887075][ T4333] usb usb5-port1: attempt power cycle [ 219.021097][ T6608] overlayfs: filesystem on './bus' not supported as upperdir [ 219.159415][ T6611] overlayfs: filesystem on './bus' not supported as upperdir [ 219.311792][ T4333] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.344065][ T6617] loop3: detected capacity change from 0 to 512 [ 219.362565][ T6617] EXT4-fs: Ignoring removed orlov option [ 219.391930][ T6617] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.403898][ T6617] EXT4-fs (loop3): Test dummy encryption mode enabled [ 219.583374][ T6617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 219.608311][ T6617] System zones: 1-12 [ 219.758589][ T4333] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 219.895778][ T4333] usb 5-1: can't read configurations, error -61 [ 220.152657][ T6617] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.756: casefold flag without casefold feature [ 220.231591][ T4333] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.302632][ T6617] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.756: couldn't read orphan inode 15 (err -117) [ 220.361687][ T4333] usb 5-1: device descriptor read/8, error -71 [ 220.431707][ T6617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 220.453929][ T6617] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.756: Directory hole found for htree leaf block 0 [ 220.478736][ T6617] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.756: Directory hole found for htree leaf block 0 [ 220.502425][ T4333] usb usb5-port1: unable to enumerate USB device [ 220.525834][ T6630] input: syz0 as /devices/virtual/input/input14 [ 220.904352][ T2183] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 221.182544][ T2183] usb 3-1: Using ep0 maxpacket: 8 [ 221.361937][ T2183] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 221.391049][ T2183] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.470584][ T2183] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.498900][ T2183] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.519454][ T2183] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.578186][ T2183] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 221.587926][ T2183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.861904][ T2183] usb 3-1: usb_control_msg returned -71 [ 221.867606][ T2183] usbtmc 3-1:16.0: can't read capabilities [ 221.923988][ T2183] usb 3-1: USB disconnect, device number 3 [ 222.027906][ T6650] overlayfs: filesystem on './bus' not supported as upperdir [ 222.040565][ T6649] overlayfs: statfs failed on './file0' [ 222.062047][ T6649] overlayfs: statfs failed on './file0' [ 222.205126][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 222.471852][ T951] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 223.647197][ T951] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 223.670477][ T951] usb 2-1: can't read configurations, error -61 [ 223.853252][ T951] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 223.877766][ T6683] overlayfs: statfs failed on './file0' [ 223.900572][ T6683] overlayfs: statfs failed on './file0' [ 223.943894][ T6686] overlayfs: filesystem on './bus' not supported as upperdir [ 223.999460][ T6689] loop2: detected capacity change from 0 to 512 [ 224.036193][ T6689] EXT4-fs: Ignoring removed orlov option [ 224.067804][ T6689] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.110566][ T6689] EXT4-fs (loop2): Test dummy encryption mode enabled [ 224.118429][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'. [ 224.186925][ T6689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 224.200134][ T6689] System zones: 1-12 [ 224.209451][ T6689] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.782: casefold flag without casefold feature [ 224.224024][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.784'. [ 224.259236][ T6694] bridge2: port 1(bridge_slave_1) entered blocking state [ 224.266836][ T6694] bridge2: port 1(bridge_slave_1) entered disabled state [ 224.276985][ T951] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 224.291508][ T6689] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.782: couldn't read orphan inode 15 (err -117) [ 224.308850][ T951] usb 2-1: can't read configurations, error -61 [ 224.326061][ T6694] device bridge_slave_1 entered promiscuous mode [ 224.333779][ T6689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 224.338834][ T951] usb usb2-port1: attempt power cycle [ 224.617404][ T6689] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.782: Directory hole found for htree leaf block 0 [ 225.067950][ T6689] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.782: Directory hole found for htree leaf block 0 [ 226.086836][ T6728] overlayfs: statfs failed on './file0' [ 226.139423][ T6728] overlayfs: statfs failed on './file0' [ 226.308237][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'. [ 226.313327][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 226.360783][ T6735] device bridge_slave_1 left promiscuous mode [ 226.383194][ T6735] bridge6: port 1(bridge_slave_1) entered disabled state [ 226.421089][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 226.655955][ T6746] device team0 entered promiscuous mode [ 226.671720][ T6746] device team_slave_0 entered promiscuous mode [ 226.689451][ T6746] device team_slave_1 entered promiscuous mode [ 226.719592][ T6746] device team0 left promiscuous mode [ 226.761670][ T6746] device team_slave_0 left promiscuous mode [ 226.772017][ T6746] device team_slave_1 left promiscuous mode [ 227.366069][ T26] audit: type=1326 audit(1731031129.912:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.411442][ T26] audit: type=1326 audit(1731031129.912:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.470866][ T26] audit: type=1326 audit(1731031129.942:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.519638][ T26] audit: type=1326 audit(1731031129.942:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.554340][ T26] audit: type=1326 audit(1731031129.942:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.568281][ T6739] loop0: detected capacity change from 0 to 40427 [ 227.589517][ T26] audit: type=1326 audit(1731031129.942:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.621123][ T26] audit: type=1326 audit(1731031129.942:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.649614][ T26] audit: type=1326 audit(1731031129.942:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.674363][ T6739] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 227.679811][ T26] audit: type=1326 audit(1731031129.942:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.701593][ T6739] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 227.706528][ T26] audit: type=1326 audit(1731031129.942:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 227.783347][ T6739] F2FS-fs (loop0): Found nat_bits in checkpoint [ 227.886871][ T6739] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 227.897963][ T6739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 228.954741][ T6790] device team0 entered promiscuous mode [ 228.960354][ T6790] device team_slave_0 entered promiscuous mode [ 228.986791][ T6790] device team_slave_1 entered promiscuous mode [ 229.041563][ T6790] device team0 left promiscuous mode [ 229.052475][ T6790] device team_slave_0 left promiscuous mode [ 229.074955][ T6790] device team_slave_1 left promiscuous mode [ 229.634769][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 229.872646][ T6817] kvm: pic: non byte read [ 229.882100][ T6817] kvm: pic: level sensitive irq not supported [ 229.882173][ T6817] kvm: pic: non byte read [ 229.918722][ T6817] kvm: pic: level sensitive irq not supported [ 229.918802][ T6817] kvm: pic: non byte read [ 230.560161][ T6836] device team0 entered promiscuous mode [ 230.601220][ T6836] device team_slave_0 entered promiscuous mode [ 230.651865][ T6836] device team_slave_1 entered promiscuous mode [ 230.691850][ T6836] device team0 left promiscuous mode [ 230.697261][ T6836] device team_slave_0 left promiscuous mode [ 230.704404][ T6836] device team_slave_1 left promiscuous mode [ 231.058067][ T6822] loop0: detected capacity change from 0 to 40427 [ 231.103029][ T6822] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 231.131461][ T6822] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 231.199191][ T6822] F2FS-fs (loop0): Found nat_bits in checkpoint [ 231.216795][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 231.348761][ T6822] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 231.377086][ T6822] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 231.461607][ T951] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.181751][ T951] usb 5-1: Using ep0 maxpacket: 8 [ 232.243532][ T6871] loop1: detected capacity change from 0 to 256 [ 232.299003][ T6871] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.318859][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.328315][ T6847] FAT-fs (loop1): Filesystem has been set read-only [ 232.353878][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.362105][ T951] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 232.367732][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.382102][ T951] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.398211][ T951] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.415480][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.436262][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.450646][ T951] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.459063][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.481160][ T951] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.498406][ T951] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.509212][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.517641][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.547464][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.577493][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.610992][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.630291][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.641761][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.660832][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.679475][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.721668][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.743340][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.762076][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.781696][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.801249][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.816804][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.834013][ T951] usb 5-1: GET_CAPABILITIES returned 0 [ 232.839682][ T951] usbtmc 5-1:16.0: can't read capabilities [ 232.851630][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.870441][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.900915][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.940918][ T6847] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 232.970323][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 232.970337][ T26] audit: type=1800 audit(1731031135.512:217): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.836" name="file1" dev="loop1" ino=1048621 res=0 errno=0 [ 233.037658][ T951] usb 5-1: USB disconnect, device number 11 [ 233.310978][ T6889] loop3: detected capacity change from 0 to 512 [ 233.367475][ T6889] EXT4-fs: Ignoring removed orlov option [ 233.424770][ T6889] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.437879][ T6889] EXT4-fs (loop3): Test dummy encryption mode enabled [ 233.882001][ T6889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 234.083550][ T6889] System zones: 1-12 [ 234.139599][ T6889] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.847: casefold flag without casefold feature [ 234.241868][ T6889] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.847: couldn't read orphan inode 15 (err -117) [ 234.308663][ T6889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.354205][ T6875] loop2: detected capacity change from 0 to 40427 [ 234.386574][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 234.396250][ T6875] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 234.413212][ T6888] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.847: Directory hole found for htree leaf block 0 [ 234.437041][ T6875] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 234.485551][ T6888] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.847: Directory hole found for htree leaf block 0 [ 234.535443][ T6875] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.695004][ T6875] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 234.721622][ T6875] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 235.120928][ T6912] syz.2.843: attempt to access beyond end of device [ 235.120928][ T6912] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 235.165018][ T6912] syz.2.843: attempt to access beyond end of device [ 235.165018][ T6912] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 235.564205][ T6914] overlayfs: statfs failed on './file0' [ 235.610485][ T6914] overlayfs: statfs failed on './file0' [ 236.040387][ T6899] loop0: detected capacity change from 0 to 40427 [ 236.078806][ T6899] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 236.104335][ T6899] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 236.163984][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 236.227003][ T6899] F2FS-fs (loop0): Found nat_bits in checkpoint [ 236.576154][ T6899] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 236.587929][ T6899] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 236.789492][ T6936] loop1: detected capacity change from 0 to 256 [ 237.095578][ T6936] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.538489][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 237.775352][ T6936] FAT-fs (loop1): Filesystem has been set read-only [ 238.242405][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.346370][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.361824][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.442895][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.451486][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.518373][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.573695][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.604861][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.635544][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.643685][ T6958] overlayfs: statfs failed on './file0' [ 238.664995][ T6958] overlayfs: statfs failed on './file0' [ 238.709980][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.740767][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.797355][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.852081][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.860703][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.991839][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 239.046670][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 239.121656][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 239.121766][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 239.164854][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 239.205775][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 239.245178][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 239.299537][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 239.339058][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 239.380473][ T6936] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 239.450207][ T26] audit: type=1800 audit(1731031141.992:218): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.859" name="file1" dev="loop1" ino=1048622 res=0 errno=0 [ 240.400779][ T6956] loop3: detected capacity change from 0 to 40427 [ 240.498605][ T6956] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 240.604397][ T6956] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 240.648620][ T6956] F2FS-fs (loop3): Found nat_bits in checkpoint [ 240.838825][ T6956] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 240.855784][ T6956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 241.470128][ T7003] overlayfs: statfs failed on './file0' [ 241.540821][ T7004] overlayfs: statfs failed on './file0' [ 241.607673][ T7006] device bridge_slave_1 left promiscuous mode [ 241.657330][ T7006] bridge2: port 1(bridge_slave_1) entered disabled state [ 241.891711][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 241.973691][ T7016] loop1: detected capacity change from 0 to 512 [ 242.043606][ T7016] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.886: invalid indirect mapped block 256 (level 2) [ 242.066809][ T7016] EXT4-fs (loop1): 2 truncates cleaned up [ 242.077608][ T7016] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 243.017585][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 243.246577][ T7042] loop1: detected capacity change from 0 to 512 [ 243.322320][ T7042] EXT4-fs: Ignoring removed orlov option [ 243.367238][ T7042] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 243.432590][ T7042] EXT4-fs (loop1): Test dummy encryption mode enabled [ 243.489511][ T7042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 243.511944][ T7042] System zones: 1-12 [ 243.517664][ T7042] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.892: casefold flag without casefold feature [ 243.533682][ T7042] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.892: couldn't read orphan inode 15 (err -117) [ 243.547382][ T7042] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 243.573121][ T7042] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.892: Directory hole found for htree leaf block 0 [ 243.600944][ T7042] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.892: Directory hole found for htree leaf block 0 [ 243.894621][ T7053] fuse: Unknown parameter 'user_i00000000000000000000' [ 244.744289][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 244.946912][ T7072] loop2: detected capacity change from 0 to 512 [ 245.023534][ T7072] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.903: invalid indirect mapped block 256 (level 2) [ 245.032270][ T7051] loop3: detected capacity change from 0 to 40427 [ 245.052439][ T7051] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 245.060224][ T7051] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 245.132938][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 245.151809][ T7051] F2FS-fs (loop3): Found nat_bits in checkpoint [ 245.160372][ T7081] fuse: Unknown parameter 'user_id00000000000000000000' [ 245.168975][ T7072] EXT4-fs (loop2): 2 truncates cleaned up [ 245.191844][ T7072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 245.442189][ T7051] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 245.603581][ T7051] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 245.631930][ T4250] Bluetooth: hci4: link tx timeout [ 245.638048][ T4250] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 245.649509][ T4250] Bluetooth: hci4: link tx timeout [ 245.656196][ T4250] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 246.097484][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 246.201236][ T7093] syz.3.894: attempt to access beyond end of device [ 246.201236][ T7093] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 246.246258][ T7093] syz.3.894: attempt to access beyond end of device [ 246.246258][ T7093] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 247.626156][ T7106] overlayfs: statfs failed on './file0' [ 247.649435][ T7106] overlayfs: statfs failed on './file0' [ 247.752028][ T4256] Bluetooth: hci4: command 0x0406 tx timeout [ 247.892181][ T7110] loop4: detected capacity change from 0 to 512 [ 247.899177][ T7110] EXT4-fs: Ignoring removed orlov option [ 247.926804][ T7110] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.963261][ T7110] EXT4-fs (loop4): Test dummy encryption mode enabled [ 248.009337][ T7118] fuse: Unknown parameter 'user_id00000000000000000000' [ 248.020701][ T7110] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 248.041919][ T7110] System zones: 1-12 [ 248.152902][ T7110] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.916: casefold flag without casefold feature [ 248.188883][ T7110] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.916: couldn't read orphan inode 15 (err -117) [ 248.231808][ T7110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 248.258221][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 248.294085][ T7126] device bridge_slave_1 left promiscuous mode [ 248.311643][ T7110] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.916: Directory hole found for htree leaf block 0 [ 248.320590][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.392493][ T7110] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.916: Directory hole found for htree leaf block 0 [ 249.647825][ T7145] loop1: detected capacity change from 0 to 256 [ 249.882673][ T7145] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.965100][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.018298][ T7145] FAT-fs (loop1): Filesystem has been set read-only [ 250.029247][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.050995][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.075544][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.125823][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.149082][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.166890][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.192460][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 250.195320][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.330054][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.381683][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.390457][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.407743][ T7158] overlayfs: statfs failed on './file0' [ 250.428917][ T7132] loop0: detected capacity change from 0 to 40427 [ 250.431281][ T7158] overlayfs: statfs failed on './file0' [ 250.470622][ T7132] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 250.496788][ T7132] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 250.510400][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.571758][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.635643][ T7132] F2FS-fs (loop0): Found nat_bits in checkpoint [ 250.642030][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.642089][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.706241][ T7168] fuse: Unknown parameter 'user_id00000000000000000000' [ 250.734008][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.772947][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.823983][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.847000][ T7132] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 250.862655][ T7132] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 250.907432][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 250.954199][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 251.014967][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 251.131713][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 251.201719][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 251.210478][ T7145] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 251.220267][ T26] audit: type=1800 audit(1731031153.762:219): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.923" name="file1" dev="loop1" ino=1048623 res=0 errno=0 [ 251.386772][ T7181] syz.0.922: attempt to access beyond end of device [ 251.386772][ T7181] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 251.420675][ T7181] syz.0.922: attempt to access beyond end of device [ 251.420675][ T7181] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 251.691370][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 252.435330][ T7199] fuse: Bad value for 'fd' [ 252.442553][ T7195] overlayfs: statfs failed on './file0' [ 252.472258][ T7195] overlayfs: statfs failed on './file0' [ 252.860541][ T7210] loop0: detected capacity change from 0 to 512 [ 252.933312][ T7210] EXT4-fs: Ignoring removed orlov option [ 252.980301][ T7210] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.041451][ T7210] EXT4-fs (loop0): Test dummy encryption mode enabled [ 253.066429][ T7210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 253.080387][ T7210] System zones: 1-12 [ 253.090311][ T7210] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.938: casefold flag without casefold feature [ 253.103595][ T7210] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.938: couldn't read orphan inode 15 (err -117) [ 253.324576][ T7210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 253.951627][ T7210] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.938: Directory hole found for htree leaf block 0 [ 254.073558][ T7210] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.938: Directory hole found for htree leaf block 0 [ 254.235210][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 254.860950][ T7240] overlayfs: statfs failed on './file0' [ 254.911270][ T7240] overlayfs: statfs failed on './file0' [ 255.012253][ T7213] loop2: detected capacity change from 0 to 40427 [ 255.053725][ T7213] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 255.070884][ T7213] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 255.091967][ T7213] F2FS-fs (loop2): Found nat_bits in checkpoint [ 255.215444][ T7213] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 255.228157][ T7213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.476554][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 255.585395][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.602262][ T7257] syz.2.949: attempt to access beyond end of device [ 255.602262][ T7257] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 255.643282][ T7257] syz.2.949: attempt to access beyond end of device [ 255.643282][ T7257] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 255.672353][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.305072][ T4296] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 256.595609][ T4296] usb 1-1: Using ep0 maxpacket: 8 [ 256.747644][ T4296] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 256.764211][ T4296] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.774802][ T4296] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.785183][ T4296] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.795530][ T4296] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.808783][ T4296] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.817993][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.113739][ T4296] usb 1-1: GET_CAPABILITIES returned 0 [ 257.120086][ T4296] usbtmc 1-1:16.0: can't read capabilities [ 257.328112][ T4296] usb 1-1: USB disconnect, device number 6 [ 258.054127][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 258.076217][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 258.412529][ T7283] overlayfs: statfs failed on './file0' [ 258.430526][ T7283] overlayfs: statfs failed on './file0' [ 258.636204][ T7297] loop0: detected capacity change from 0 to 512 [ 258.648814][ T7297] EXT4-fs: Ignoring removed orlov option [ 258.675046][ T7297] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.704621][ T7297] EXT4-fs (loop0): Test dummy encryption mode enabled [ 258.721310][ T7297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 258.749080][ T7297] System zones: 1-12 [ 258.759040][ T7297] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.974: casefold flag without casefold feature [ 258.778968][ T7297] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.974: couldn't read orphan inode 15 (err -117) [ 258.806292][ T7297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 258.860603][ T7297] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.974: Directory hole found for htree leaf block 0 [ 258.961097][ T7297] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.974: Directory hole found for htree leaf block 0 [ 259.153957][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 259.899409][ T951] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 260.144124][ T951] usb 3-1: Using ep0 maxpacket: 8 [ 260.284197][ T951] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 260.293232][ T951] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.305532][ T951] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.316308][ T951] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.328132][ T951] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.342587][ T951] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.359197][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.641868][ T951] usb 3-1: GET_CAPABILITIES returned 0 [ 260.647432][ T951] usbtmc 3-1:16.0: can't read capabilities [ 260.856606][ T27] usb 3-1: USB disconnect, device number 4 [ 261.683880][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 261.685573][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 261.936941][ T7330] overlayfs: statfs failed on './file0' [ 261.979467][ T7336] overlayfs: statfs failed on './file0' [ 262.269550][ T26] audit: type=1326 audit(1731031164.782:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 262.334185][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 262.642595][ T26] audit: type=1326 audit(1731031164.782:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 262.724749][ T26] audit: type=1326 audit(1731031164.782:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 262.784675][ T26] audit: type=1326 audit(1731031164.782:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 262.870575][ T26] audit: type=1326 audit(1731031164.792:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 262.948182][ T26] audit: type=1326 audit(1731031164.792:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 262.992113][ T26] audit: type=1326 audit(1731031164.792:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 263.053782][ T26] audit: type=1326 audit(1731031164.792:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 263.145410][ T26] audit: type=1326 audit(1731031164.792:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 263.153205][ T7360] loop3: detected capacity change from 0 to 512 [ 263.240096][ T26] audit: type=1326 audit(1731031164.792:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x7ffc0000 [ 263.262799][ T951] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 263.300341][ T7360] EXT4-fs: Ignoring removed orlov option [ 263.324165][ T7360] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.352394][ T7360] EXT4-fs (loop3): Test dummy encryption mode enabled [ 263.390006][ T7360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 263.413363][ T7360] System zones: 1-12 [ 263.450002][ T7360] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.994: casefold flag without casefold feature [ 263.468678][ T7360] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.994: couldn't read orphan inode 15 (err -117) [ 263.482888][ T7360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 263.502013][ T951] usb 5-1: Using ep0 maxpacket: 8 [ 263.557572][ T7360] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.994: Directory hole found for htree leaf block 0 [ 263.579423][ T7360] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.994: Directory hole found for htree leaf block 0 [ 263.623336][ T951] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 263.632466][ T951] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.642651][ T951] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.652561][ T951] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.664335][ T951] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.677579][ T951] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 263.686800][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.981791][ T951] usb 5-1: GET_CAPABILITIES returned 0 [ 263.987648][ T951] usbtmc 5-1:16.0: can't read capabilities [ 264.189901][ T951] usb 5-1: USB disconnect, device number 12 [ 266.340354][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 266.759320][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 266.780821][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 268.354879][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 268.354897][ T26] audit: type=1326 audit(1731031170.902:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.1014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x0 [ 268.661107][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 269.027979][ T7447] loop2: detected capacity change from 0 to 512 [ 269.100440][ T7447] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1021: invalid indirect mapped block 256 (level 2) [ 269.146357][ T7447] EXT4-fs (loop2): 2 truncates cleaned up [ 269.161864][ T7447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 270.070881][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 270.428645][ T7459] overlayfs: statfs failed on './file0' [ 270.488281][ T7459] overlayfs: statfs failed on './file0' [ 272.940855][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 272.950309][ T7477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 272.966338][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 273.071027][ T26] audit: type=1326 audit(1731031175.612:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.1.1032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7da897e719 code=0x0 [ 273.174611][ T7489] loop3: detected capacity change from 0 to 512 [ 273.196432][ T7489] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1034: invalid indirect mapped block 256 (level 2) [ 273.210917][ T7489] EXT4-fs (loop3): 2 truncates cleaned up [ 273.217316][ T7489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 273.431739][ T2183] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 273.691753][ T2183] usb 3-1: Using ep0 maxpacket: 8 [ 273.811926][ T2183] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 273.824510][ T2183] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.923918][ T2183] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.960136][ T2183] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.971401][ T2183] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.987257][ T2183] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.002770][ T2183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.306070][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 274.442151][ T2183] usb 3-1: GET_CAPABILITIES returned 0 [ 274.494327][ T2183] usbtmc 3-1:16.0: can't read capabilities [ 274.701038][ T2183] usb 3-1: USB disconnect, device number 5 [ 275.230061][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1043'. [ 275.663840][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 275.915987][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 276.158958][ T7539] loop4: detected capacity change from 0 to 512 [ 276.228513][ T7539] EXT4-fs: Ignoring removed orlov option [ 276.264811][ T7539] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.304215][ T7543] loop2: detected capacity change from 0 to 512 [ 276.306531][ T7539] EXT4-fs (loop4): Test dummy encryption mode enabled [ 276.378622][ T7539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 276.407730][ T7539] System zones: 1-12 [ 276.420579][ T7539] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1046: casefold flag without casefold feature [ 276.434572][ T7539] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1046: couldn't read orphan inode 15 (err -117) [ 276.455903][ T7539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 276.559825][ T7543] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1049: invalid indirect mapped block 256 (level 2) [ 276.617379][ T7539] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1046: Directory hole found for htree leaf block 0 [ 276.638157][ T7543] EXT4-fs (loop2): 2 truncates cleaned up [ 276.645352][ T7543] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 276.658265][ T7539] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1046: Directory hole found for htree leaf block 0 [ 277.560875][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 279.111647][ T4291] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 279.289194][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 279.353476][ T4291] usb 3-1: Using ep0 maxpacket: 8 [ 279.485533][ T4291] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 279.497960][ T4291] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.516725][ T4291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.529248][ T4291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.545413][ T4291] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.560326][ T4291] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 279.577613][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.341867][ T4291] usb 3-1: usb_control_msg returned -71 [ 280.347622][ T4291] usbtmc 3-1:16.0: can't read capabilities [ 280.377277][ T4291] usb 3-1: USB disconnect, device number 6 [ 280.902989][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1057'. [ 280.944252][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 280.989876][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 281.640875][ T7612] loop2: detected capacity change from 0 to 512 [ 281.758083][ T7612] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1070: invalid indirect mapped block 256 (level 2) [ 282.535033][ T7612] EXT4-fs (loop2): 2 truncates cleaned up [ 282.568587][ T7612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 282.700087][ T7631] overlayfs: failed to resolve './file0': -2 [ 282.801753][ T7635] overlayfs: failed to resolve './file0': -2 [ 282.820744][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 283.437642][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 283.565656][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1076'. [ 283.598898][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 283.631921][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 285.034441][ T7678] overlayfs: failed to resolve './file0': -2 [ 285.488189][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 285.508031][ T7695] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1094'. [ 285.861693][ T4293] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 285.870624][ T7673] loop0: detected capacity change from 0 to 40427 [ 285.890169][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 285.904608][ T7673] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 285.919676][ T7705] loop3: detected capacity change from 0 to 512 [ 285.921599][ T7673] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 285.970629][ T7705] EXT4-fs: Ignoring removed orlov option [ 286.002926][ T7673] F2FS-fs (loop0): Found nat_bits in checkpoint [ 286.008963][ T7705] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 286.023208][ T7705] EXT4-fs (loop3): Test dummy encryption mode enabled [ 286.129636][ T7673] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 286.143994][ T7673] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 286.239911][ T7705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 286.248575][ T7705] System zones: 1-12 [ 286.618949][ T7717] syz.0.1085: attempt to access beyond end of device [ 286.618949][ T7717] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 286.762210][ T7717] syz.0.1085: attempt to access beyond end of device [ 286.762210][ T7717] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 287.590828][ T7705] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1097: casefold flag without casefold feature [ 287.621820][ T4293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.641588][ T4293] usb 2-1: config 0 has no interfaces? [ 287.658282][ T7705] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1097: couldn't read orphan inode 15 (err -117) [ 287.694260][ T4293] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.724304][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.745024][ T7705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 287.810957][ T4293] usb 2-1: config 0 descriptor?? [ 287.831576][ T7705] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1097: Directory hole found for htree leaf block 0 [ 287.912521][ T7705] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1097: Directory hole found for htree leaf block 0 [ 289.289662][ T7735] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1106'. [ 289.510837][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 289.698395][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 289.842368][ T7750] loop3: detected capacity change from 0 to 256 [ 289.849677][ T7750] exfat: Deprecated parameter 'utf8' [ 289.894174][ T7750] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 290.920224][ T2183] usb 2-1: USB disconnect, device number 11 [ 291.714117][ T26] audit: type=1326 audit(1731031194.252:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 291.776243][ T7766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1115'. [ 291.870834][ T26] audit: type=1326 audit(1731031194.252:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 291.968822][ T26] audit: type=1326 audit(1731031194.252:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 292.081381][ T26] audit: type=1326 audit(1731031194.252:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 292.157763][ T26] audit: type=1326 audit(1731031194.252:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 292.229441][ T26] audit: type=1326 audit(1731031194.252:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 292.298704][ T7774] 9pnet_fd: Insufficient options for proto=fd [ 292.353186][ T7779] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1119'. [ 292.370441][ T7777] loop4: detected capacity change from 0 to 256 [ 292.382919][ T7777] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 292.397322][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.400648][ T7774] overlayfs: filesystem on './bus' not supported as upperdir [ 292.406186][ T7777] FAT-fs (loop4): Filesystem has been set read-only [ 292.420407][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.429114][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.429133][ T26] audit: type=1326 audit(1731031194.252:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 292.437730][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.468778][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.477401][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.486436][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.495135][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.503752][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.512431][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.521041][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.529680][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.538353][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.547148][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.555790][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.564399][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.573155][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.582274][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.590882][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.599592][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.608196][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.617134][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.625775][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.634426][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.643699][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.652398][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.660999][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.669635][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.675917][ T26] audit: type=1326 audit(1731031194.252:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 292.678276][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.709572][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.718241][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.726908][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.735532][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.744154][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.752844][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.761404][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.770072][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.778823][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.787862][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.796626][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.805452][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.814067][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.822701][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.831398][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.833280][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'. [ 292.839995][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.857528][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.866185][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.874789][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.883420][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.892082][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.900644][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.908061][ T26] audit: type=1326 audit(1731031194.252:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 292.909239][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.940645][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.949274][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.957894][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.966556][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.975188][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.983815][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.992471][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 292.994577][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 293.001005][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.018533][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.027195][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.035889][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.044530][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.053214][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.061826][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.070375][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.079040][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.087650][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.096284][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.104943][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.113555][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.122172][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.124130][ T26] audit: type=1326 audit(1731031194.252:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 293.130699][ T7777] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 293.608782][ T7796] loop1: detected capacity change from 0 to 512 [ 293.667204][ T7796] EXT4-fs: Ignoring removed orlov option [ 293.735843][ T7796] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.769305][ T7796] EXT4-fs (loop1): Test dummy encryption mode enabled [ 294.412108][ T7796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 294.437415][ T7796] System zones: 1-12 [ 294.513296][ T7796] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1122: casefold flag without casefold feature [ 294.609781][ T7796] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1122: couldn't read orphan inode 15 (err -117) [ 294.669303][ T7796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 294.694635][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 294.745939][ T7796] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.1122: Directory hole found for htree leaf block 0 [ 294.824162][ T7796] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.1122: Directory hole found for htree leaf block 0 [ 294.884106][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1127'. [ 295.443514][ T7826] loop0: detected capacity change from 0 to 512 [ 295.499221][ T7826] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1132: invalid indirect mapped block 256 (level 2) [ 295.564085][ T7826] EXT4-fs (loop0): 2 truncates cleaned up [ 295.569915][ T7826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 296.073186][ T7833] loop4: detected capacity change from 0 to 256 [ 296.101599][ T7833] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.129860][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.138530][ T7833] FAT-fs (loop4): Filesystem has been set read-only [ 296.145266][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.153874][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.162454][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.171567][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.180118][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.188726][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.197388][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.205992][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.214593][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.223341][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.231952][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.240494][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.249145][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.257745][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.266329][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.275384][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.283968][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.292601][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.301240][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.309889][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.318522][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.327347][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.335979][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.345320][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.354185][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.363101][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.372153][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.380794][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.389473][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.398141][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.406786][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.415436][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.424092][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.432811][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.441389][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.450029][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.458842][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.467837][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.476993][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.485652][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.494275][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.502927][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.511686][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.520245][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.528854][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.537616][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.548036][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.556740][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.565398][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.574127][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.583213][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.591942][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.600516][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.609164][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.617820][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.626550][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.635264][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.643925][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.652501][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.661048][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.669742][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.678336][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.686918][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.695567][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.704152][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.712727][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.721361][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.729935][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.738506][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.747131][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.755715][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.764315][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.772901][ T7833] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 296.781732][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 296.781747][ T26] audit: type=1800 audit(1731031199.332:295): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1133" name="file1" dev="loop4" ino=1048629 res=0 errno=0 [ 296.823007][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 297.104738][ T26] audit: type=1326 audit(1731031199.652:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa165d7e719 code=0x7ffc0000 [ 297.134341][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 297.166823][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 297.206022][ T26] audit: type=1326 audit(1731031199.652:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa165d7e719 code=0x7ffc0000 [ 297.263768][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 297.271159][ T26] audit: type=1326 audit(1731031199.672:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fa165d7e719 code=0x7ffc0000 [ 297.340083][ T26] audit: type=1326 audit(1731031199.672:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa165d7e719 code=0x7ffc0000 [ 297.452761][ T26] audit: type=1326 audit(1731031199.672:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa165d7e719 code=0x7ffc0000 [ 297.573058][ T26] audit: type=1326 audit(1731031199.672:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa165d7e719 code=0x7ffc0000 [ 298.051274][ T26] audit: type=1326 audit(1731031199.672:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa165d7e719 code=0x7ffc0000 [ 298.371634][ T26] audit: type=1326 audit(1731031199.672:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa165d7e719 code=0x7ffc0000 [ 298.486943][ T26] audit: type=1326 audit(1731031199.672:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa165d7e719 code=0x7ffc0000 [ 298.566219][ T7860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'. [ 298.631129][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 298.798642][ T7867] loop1: detected capacity change from 0 to 256 [ 298.894505][ T7867] exfat: Deprecated parameter 'utf8' [ 298.968845][ T7867] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 300.226968][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 300.253399][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 300.567249][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1151'. [ 300.666013][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'. [ 301.396076][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 301.481286][ T7934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 301.825224][ T7942] overlayfs: filesystem on './bus' not supported as upperdir [ 302.487512][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'. [ 302.499059][ T7966] loop1: detected capacity change from 0 to 512 [ 302.513500][ T7966] EXT4-fs: Ignoring removed orlov option [ 302.534004][ T7966] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.563356][ T7966] EXT4-fs (loop1): Test dummy encryption mode enabled [ 302.610273][ T7966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 302.627590][ T7966] System zones: 1-12 [ 302.651960][ T7966] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1172: casefold flag without casefold feature [ 302.675496][ T7966] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1172: couldn't read orphan inode 15 (err -117) [ 302.707554][ T7966] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 302.772058][ T7966] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.1172: Directory hole found for htree leaf block 0 [ 302.819412][ T7966] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.1172: Directory hole found for htree leaf block 0 [ 302.872125][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 303.312908][ T7986] overlayfs: filesystem on './bus' not supported as upperdir [ 304.274866][ T7993] loop2: detected capacity change from 0 to 256 [ 304.303546][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1185'. [ 304.322199][ T7993] exfat: Deprecated parameter 'utf8' [ 304.369072][ T7993] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 304.597225][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 305.186217][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 305.616031][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 305.616069][ T26] audit: type=1326 audit(1731031208.162:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.1.1196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7da897e719 code=0x0 [ 306.454965][ T8034] overlayfs: filesystem on './bus' not supported as upperdir [ 306.786062][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 308.593686][ T8076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1214'. [ 308.757859][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 309.811864][ T4256] Bluetooth: hci4: link tx timeout [ 309.817199][ T4256] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 309.826073][ T4256] Bluetooth: hci4: link tx timeout [ 309.831871][ T4256] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 310.274869][ T8117] overlayfs: filesystem on './bus' not supported as upperdir [ 310.283803][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [ 310.722618][ T26] audit: type=1326 audit(1731031213.272:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x0 [ 310.748448][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 311.049205][ T8145] loop3: detected capacity change from 0 to 512 [ 311.108961][ T8145] EXT4-fs: Ignoring removed orlov option [ 311.165862][ T8145] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.219868][ T8145] EXT4-fs (loop3): Test dummy encryption mode enabled [ 311.256962][ T8145] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 311.270658][ T8145] System zones: 1-12 [ 311.301792][ T8145] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1237: casefold flag without casefold feature [ 311.350425][ T8145] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1237: couldn't read orphan inode 15 (err -117) [ 311.445270][ T4293] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 311.468858][ T8145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.583209][ T8145] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1237: Directory hole found for htree leaf block 0 [ 311.676785][ T8145] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1237: Directory hole found for htree leaf block 0 [ 311.851695][ T4293] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.875571][ T4293] usb 1-1: config 0 has no interfaces? [ 311.918560][ T4293] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.955073][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.976685][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 311.998733][ T4293] usb 1-1: config 0 descriptor?? [ 312.747707][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 313.336240][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 313.560351][ T26] audit: type=1326 audit(1731031216.102:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.1252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e5997e719 code=0x0 [ 313.638501][ T8192] overlayfs: filesystem on './bus' not supported as upperdir [ 313.818271][ T8199] syz.1.1256[8199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.818389][ T8199] syz.1.1256[8199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.026554][ T8172] loop2: detected capacity change from 0 to 40427 [ 314.049979][ T8172] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 314.060867][ T8172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 314.121102][ T8172] F2FS-fs (loop2): Found nat_bits in checkpoint [ 314.202216][ T8172] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 314.209536][ T8172] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 314.530381][ T4292] usb 1-1: USB disconnect, device number 7 [ 314.577308][ T8212] syz.2.1247: attempt to access beyond end of device [ 314.577308][ T8212] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 314.619072][ T8212] syz.2.1247: attempt to access beyond end of device [ 314.619072][ T8212] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 315.711920][ T8228] loop2: detected capacity change from 0 to 512 [ 315.726680][ T8228] EXT4-fs: Ignoring removed orlov option [ 315.757108][ T8228] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.771942][ T8228] EXT4-fs (loop2): Test dummy encryption mode enabled [ 315.794888][ T8228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 315.805177][ T8228] System zones: 1-12 [ 315.833766][ T8228] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1262: casefold flag without casefold feature [ 315.852550][ T8228] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1262: couldn't read orphan inode 15 (err -117) [ 315.873183][ T8228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 315.896663][ T8228] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.1262: Directory hole found for htree leaf block 0 [ 315.928343][ T8228] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.1262: Directory hole found for htree leaf block 0 [ 316.875131][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 317.032522][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.038882][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.575472][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 317.905889][ T8243] kvm: pic: non byte read [ 317.910533][ T8243] kvm: pic: level sensitive irq not supported [ 317.910608][ T8243] kvm: pic: non byte read [ 317.969960][ T8243] kvm: pic: level sensitive irq not supported [ 317.970141][ T8243] kvm: pic: non byte read [ 318.237858][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 318.251767][ T4292] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 318.621774][ T4292] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.649813][ T4292] usb 4-1: config 0 has no interfaces? [ 318.661574][ T4292] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.670667][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.672787][ T4291] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 318.732440][ T4292] usb 4-1: config 0 descriptor?? [ 319.381820][ T4291] usb 3-1: Using ep0 maxpacket: 8 [ 319.510015][ T4291] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 319.551651][ T4291] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.561446][ T4291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.581346][ T4291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.610528][ T4291] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.646342][ T4291] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 319.669122][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.951966][ T4291] usb 3-1: GET_CAPABILITIES returned 0 [ 319.957563][ T4291] usbtmc 3-1:16.0: can't read capabilities [ 319.982476][ T8300] loop4: detected capacity change from 0 to 512 [ 320.044182][ T8300] EXT4-fs: Ignoring removed orlov option [ 320.072006][ T8300] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.110333][ T8300] EXT4-fs (loop4): Test dummy encryption mode enabled [ 320.141251][ T8300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 320.157977][ T2183] usb 3-1: USB disconnect, device number 7 [ 320.159842][ T8300] System zones: 1-12 [ 320.224364][ T8300] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1286: casefold flag without casefold feature [ 320.302021][ T8300] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1286: couldn't read orphan inode 15 (err -117) [ 320.317383][ T8300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 320.383325][ T8300] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1286: Directory hole found for htree leaf block 0 [ 320.435910][ T8300] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1286: Directory hole found for htree leaf block 0 [ 321.248924][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 321.541341][ T8335] 9pnet_fd: Insufficient options for proto=fd [ 321.573573][ T8335] overlayfs: filesystem on './bus' not supported as upperdir [ 321.817043][ T8347] overlayfs: filesystem on './bus' not supported as upperdir [ 322.002490][ T2183] usb 4-1: USB disconnect, device number 10 [ 322.424526][ T8365] loop3: detected capacity change from 0 to 512 [ 322.462516][ T8365] EXT4-fs: Ignoring removed orlov option [ 322.517633][ T8365] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 322.621854][ T8365] EXT4-fs (loop3): Test dummy encryption mode enabled [ 322.647847][ T8365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 322.656907][ T8365] System zones: 1-12 [ 322.668386][ T8365] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1307: casefold flag without casefold feature [ 322.686527][ T8365] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1307: couldn't read orphan inode 15 (err -117) [ 322.831898][ T8365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 322.926709][ T8365] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1307: Directory hole found for htree leaf block 0 [ 323.021750][ T8365] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1307: Directory hole found for htree leaf block 0 [ 323.077851][ T8379] 9pnet_fd: Insufficient options for proto=fd [ 323.141257][ T8379] overlayfs: filesystem on './bus' not supported as upperdir [ 323.239398][ T8385] Driver unsupported XDP return value 0 on prog (id 281) dev N/A, expect packet loss! [ 323.305501][ T8383] kvm: pic: non byte read [ 323.342405][ T8383] kvm: pic: level sensitive irq not supported [ 323.342484][ T8383] kvm: pic: non byte read [ 323.392193][ T8383] kvm: pic: level sensitive irq not supported [ 323.392453][ T8383] kvm: pic: non byte read [ 324.022476][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 324.277930][ T8418] 9pnet_fd: Insufficient options for proto=fd [ 324.328770][ T8418] overlayfs: filesystem on './bus' not supported as upperdir [ 324.549232][ T8427] overlayfs: filesystem on './bus' not supported as upperdir [ 324.646437][ T8430] kvm: pic: non byte read [ 324.657348][ T8430] kvm: pic: level sensitive irq not supported [ 324.657424][ T8430] kvm: pic: non byte read [ 324.717437][ T8430] kvm: pic: level sensitive irq not supported [ 324.717529][ T8430] kvm: pic: non byte read [ 325.089029][ T26] audit: type=1326 audit(1731031227.632:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da897e719 code=0x7ffc0000 [ 325.157625][ T26] audit: type=1326 audit(1731031227.632:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da897e719 code=0x7ffc0000 [ 325.219453][ T26] audit: type=1326 audit(1731031227.662:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f7da897e719 code=0x7ffc0000 [ 325.260758][ T26] audit: type=1326 audit(1731031227.662:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da897e719 code=0x7ffc0000 [ 325.335673][ T26] audit: type=1326 audit(1731031227.662:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7da897e719 code=0x7ffc0000 [ 325.445890][ T26] audit: type=1326 audit(1731031227.662:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da897e719 code=0x7ffc0000 [ 325.523677][ T8457] 9pnet_fd: Insufficient options for proto=fd [ 325.533258][ T26] audit: type=1326 audit(1731031227.662:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7da897e719 code=0x7ffc0000 [ 325.571774][ T8457] overlayfs: filesystem on './bus' not supported as upperdir [ 325.603039][ T26] audit: type=1326 audit(1731031227.662:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da897e719 code=0x7ffc0000 [ 325.717084][ T26] audit: type=1326 audit(1731031227.662:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7da897d0b0 code=0x7ffc0000 [ 325.797335][ T26] audit: type=1326 audit(1731031227.662:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7da897ff47 code=0x7ffc0000 [ 330.981192][ T8587] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1387'. [ 333.171094][ T8594] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 333.209680][ T8594] overlayfs: filesystem on './bus' not supported as upperdir [ 333.840603][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 333.840619][ T26] audit: type=1326 audit(1731031236.382:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 333.970167][ T26] audit: type=1326 audit(1731031236.382:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 333.993339][ T26] audit: type=1326 audit(1731031236.382:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 334.033724][ T26] audit: type=1326 audit(1731031236.382:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 334.071177][ T26] audit: type=1326 audit(1731031236.382:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 334.191939][ T26] audit: type=1326 audit(1731031236.422:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 334.719679][ T26] audit: type=1326 audit(1731031236.422:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 335.017368][ T8635] overlayfs: missing 'lowerdir' [ 335.070354][ T26] audit: type=1326 audit(1731031236.422:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 335.245769][ T26] audit: type=1326 audit(1731031236.422:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 335.445458][ T26] audit: type=1326 audit(1731031236.422:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fb57e719 code=0x7ffc0000 [ 336.467513][ T8673] 9pnet_fd: Insufficient options for proto=fd [ 336.546856][ T8674] overlayfs: filesystem on './bus' not supported as upperdir [ 337.948955][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 338.671305][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 339.262228][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 339.845288][ T8824] 9pnet_fd: Insufficient options for proto=fd [ 340.885363][ T8865] loop4: detected capacity change from 0 to 512 [ 340.988700][ T8865] EXT4-fs: Ignoring removed orlov option [ 341.032626][ T8865] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.054955][ T8865] EXT4-fs (loop4): Test dummy encryption mode enabled [ 341.125973][ T8865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 341.138446][ T8873] kvm: pic: non byte read [ 341.141095][ T8865] System zones: 1-12 [ 341.179381][ T8865] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1499: casefold flag without casefold feature [ 341.192300][ T8873] kvm: pic: level sensitive irq not supported [ 341.192444][ T8873] kvm: pic: non byte read [ 341.206194][ T8873] kvm: pic: level sensitive irq not supported [ 341.206268][ T8873] kvm: pic: non byte read [ 341.325268][ T8865] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1499: couldn't read orphan inode 15 (err -117) [ 341.391953][ T8865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 341.493887][ T8865] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1499: Directory hole found for htree leaf block 0 [ 341.557990][ T8865] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1499: Directory hole found for htree leaf block 0 [ 341.629838][ T8841] loop0: detected capacity change from 0 to 40427 [ 341.660217][ T8841] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 341.686048][ T8841] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 341.792007][ T8841] F2FS-fs (loop0): Found nat_bits in checkpoint [ 342.602413][ T8841] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 342.652858][ T8841] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 343.519562][ T8909] overlayfs: filesystem on './bus' not supported as upperdir [ 343.693779][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 344.133885][ T8916] kvm: pic: non byte read [ 344.138481][ T8916] kvm: pic: level sensitive irq not supported [ 344.138551][ T8916] kvm: pic: non byte read [ 344.164192][ T8916] kvm: pic: level sensitive irq not supported [ 344.164270][ T8916] kvm: pic: non byte read [ 344.593495][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.651340][ T2183] wlan1: authenticate with 08:02:11:00:00:00 [ 344.662690][ T8929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.678408][ T2183] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 344.695175][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.701925][ T33] wlan1: authenticated [ 344.730691][ T2183] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 344.741122][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.771622][ T33] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 344.772487][ T8929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.781448][ T33] ------------[ cut here ]------------ [ 344.795668][ T33] WARNING: CPU: 0 PID: 33 at net/mac80211/chan.c:248 ieee80211_get_max_required_bw+0x422/0x450 [ 344.806531][ T33] Modules linked in: [ 344.810477][ T33] CPU: 0 PID: 33 Comm: kworker/u4:2 Not tainted 6.1.115-syzkaller #0 [ 344.818755][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.828922][ T33] Workqueue: phy12 ieee80211_iface_work [ 344.833044][ T8934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.834558][ T33] RIP: 0010:ieee80211_get_max_required_bw+0x422/0x450 [ 344.851124][ T33] Code: e9 ad fe ff ff e8 ee f4 56 f7 8b 04 24 eb 07 e8 e4 f4 56 f7 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce f4 56 f7 <0f> 0b e9 90 fc ff ff 48 c7 c1 64 38 9a 8e 80 e1 07 80 c1 03 38 c1 [ 344.870844][ T33] RSP: 0018:ffffc90000aa71a0 EFLAGS: 00010287 [ 344.876999][ T33] RAX: ffffffff8a339e82 RBX: 0000000000000000 RCX: 0000000000100000 [ 344.885089][ T33] RDX: ffffc90016c91000 RSI: 0000000000003b16 RDI: 0000000000003b17 [ 344.893153][ T33] RBP: ffffc90000aa7338 R08: ffffffff8a339b05 R09: ffffffff8a32cdec [ 344.901163][ T33] R10: 000000000000000e R11: ffff88801b6c1dc0 R12: dffffc0000000000 [ 344.909218][ T33] R13: ffff888058b40c80 R14: 0000000000000000 R15: dffffc0000000000 [ 344.917282][ T33] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 344.926298][ T33] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.932960][ T33] CR2: 00007f7da87fef98 CR3: 000000005fdd9000 CR4: 00000000003506f0 [ 344.940993][ T33] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.949048][ T33] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.957148][ T33] Call Trace: [ 344.960463][ T33] [ 344.963468][ T33] ? __warn+0x15a/0x520 [ 344.967672][ T33] ? ieee80211_get_max_required_bw+0x422/0x450 [ 344.973957][ T33] ? report_bug+0x2af/0x500 [ 344.978508][ T33] ? ieee80211_get_max_required_bw+0x422/0x450 [ 344.984774][ T33] ? handle_bug+0x3d/0x70 [ 344.989147][ T33] ? exc_invalid_op+0x16/0x40 [ 344.993927][ T33] ? asm_exc_invalid_op+0x16/0x20 [ 344.999016][ T33] ? _ieee80211_recalc_chanctx_min_def+0x51c/0xe20 [ 345.005640][ T33] ? ieee80211_get_max_required_bw+0xa5/0x450 [ 345.011798][ T33] ? ieee80211_get_max_required_bw+0x422/0x450 [ 345.018015][ T33] ? ieee80211_get_max_required_bw+0x422/0x450 [ 345.024304][ T33] _ieee80211_recalc_chanctx_min_def+0x5e1/0xe20 [ 345.030734][ T33] ? _ieee80211_recalc_chanctx_min_def+0x1d0/0xe20 [ 345.037411][ T33] ? ieee80211_recalc_chanctx_min_def+0x70/0x70 [ 345.043777][ T33] ieee80211_recalc_chanctx_min_def+0x20/0x70 [ 345.049912][ T33] ieee80211_recalc_min_chandef+0x3e0/0x4a0 [ 345.055899][ T33] ? ieee80211_recalc_min_chandef+0xc2/0x4a0 [ 345.061972][ T33] sta_info_move_state+0x679/0x850 [ 345.067139][ T33] ieee80211_assoc_success+0x42e0/0x6110 [ 345.072900][ T33] ? vprintk_emit+0x622/0x740 [ 345.077639][ T33] ? ieee80211_auth_challenge+0x370/0x370 [ 345.083445][ T33] ? __mutex_lock+0x9c5/0xd80 [ 345.088169][ T33] ? _printk+0xd1/0x111 [ 345.092429][ T33] ieee80211_sta_rx_queued_mgmt+0x2403/0x4100 [ 345.098563][ T33] ? ieee80211_rx_mgmt_beacon+0x3180/0x3180 [ 345.104550][ T33] ? stack_trace_save+0x113/0x1c0 [ 345.109630][ T33] ? mark_lock+0x9a/0x340 [ 345.114073][ T33] ? __lock_acquire+0x125b/0x1f80 [ 345.119161][ T33] ? __lock_acquire+0x125b/0x1f80 [ 345.124354][ T33] ? print_irqtrace_events+0x210/0x210 [ 345.129872][ T33] ? do_raw_spin_unlock+0x137/0x8a0 [ 345.135191][ T33] ? kcov_remote_start+0x4ae/0x7c0 [ 345.140346][ T33] ? lockdep_hardirqs_on+0x94/0x130 [ 345.145633][ T33] ? kcov_remote_start+0x8c/0x7c0 [ 345.150705][ T33] ieee80211_iface_work+0x737/0xce0 [ 345.156007][ T33] ? process_one_work+0x7a9/0x11d0 [ 345.161176][ T33] process_one_work+0x8a9/0x11d0 [ 345.166227][ T33] ? worker_detach_from_pool+0x260/0x260 [ 345.171951][ T33] ? _raw_spin_lock_irqsave+0x120/0x120 [ 345.177542][ T33] ? kthread_data+0x4e/0xc0 [ 345.182145][ T33] ? wq_worker_running+0x97/0x190 [ 345.187209][ T33] worker_thread+0xa47/0x1200 [ 345.191999][ T33] kthread+0x28d/0x320 [ 345.196106][ T33] ? worker_clr_flags+0x190/0x190 [ 345.201170][ T33] ? kthread_blkcg+0xd0/0xd0 [ 345.205841][ T33] ret_from_fork+0x1f/0x30 [ 345.210328][ T33] [ 345.213441][ T33] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 345.220743][ T33] CPU: 0 PID: 33 Comm: kworker/u4:2 Not tainted 6.1.115-syzkaller #0 [ 345.228835][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 345.239004][ T33] Workqueue: phy12 ieee80211_iface_work [ 345.244609][ T33] Call Trace: [ 345.247907][ T33] [ 345.250858][ T33] dump_stack_lvl+0x1e3/0x2cb [ 345.255600][ T33] ? nf_tcp_handle_invalid+0x642/0x642 [ 345.261085][ T33] ? panic+0x764/0x764 [ 345.265184][ T33] ? 0xffffffffa0004440 [ 345.269383][ T33] ? vscnprintf+0x59/0x80 [ 345.273750][ T33] panic+0x318/0x764 [ 345.277679][ T33] ? __warn+0x169/0x520 [ 345.281865][ T33] ? memcpy_page_flushcache+0xfc/0xfc [ 345.287281][ T33] ? ret_from_fork+0x1f/0x30 [ 345.291913][ T33] __warn+0x348/0x520 [ 345.295953][ T33] ? ieee80211_get_max_required_bw+0x422/0x450 [ 345.302156][ T33] report_bug+0x2af/0x500 [ 345.306525][ T33] ? ieee80211_get_max_required_bw+0x422/0x450 [ 345.312732][ T33] handle_bug+0x3d/0x70 [ 345.316921][ T33] exc_invalid_op+0x16/0x40 [ 345.321462][ T33] asm_exc_invalid_op+0x16/0x20 [ 345.326353][ T33] RIP: 0010:ieee80211_get_max_required_bw+0x422/0x450 [ 345.333159][ T33] Code: e9 ad fe ff ff e8 ee f4 56 f7 8b 04 24 eb 07 e8 e4 f4 56 f7 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce f4 56 f7 <0f> 0b e9 90 fc ff ff 48 c7 c1 64 38 9a 8e 80 e1 07 80 c1 03 38 c1 [ 345.352798][ T33] RSP: 0018:ffffc90000aa71a0 EFLAGS: 00010287 [ 345.358902][ T33] RAX: ffffffff8a339e82 RBX: 0000000000000000 RCX: 0000000000100000 [ 345.366907][ T33] RDX: ffffc90016c91000 RSI: 0000000000003b16 RDI: 0000000000003b17 [ 345.374912][ T33] RBP: ffffc90000aa7338 R08: ffffffff8a339b05 R09: ffffffff8a32cdec [ 345.382911][ T33] R10: 000000000000000e R11: ffff88801b6c1dc0 R12: dffffc0000000000 [ 345.390913][ T33] R13: ffff888058b40c80 R14: 0000000000000000 R15: dffffc0000000000 [ 345.398934][ T33] ? _ieee80211_recalc_chanctx_min_def+0x51c/0xe20 [ 345.405480][ T33] ? ieee80211_get_max_required_bw+0xa5/0x450 [ 345.411583][ T33] ? ieee80211_get_max_required_bw+0x422/0x450 [ 345.417793][ T33] _ieee80211_recalc_chanctx_min_def+0x5e1/0xe20 [ 345.424164][ T33] ? _ieee80211_recalc_chanctx_min_def+0x1d0/0xe20 [ 345.430710][ T33] ? ieee80211_recalc_chanctx_min_def+0x70/0x70 [ 345.437010][ T33] ieee80211_recalc_chanctx_min_def+0x20/0x70 [ 345.443113][ T33] ieee80211_recalc_min_chandef+0x3e0/0x4a0 [ 345.449067][ T33] ? ieee80211_recalc_min_chandef+0xc2/0x4a0 [ 345.455088][ T33] sta_info_move_state+0x679/0x850 [ 345.460244][ T33] ieee80211_assoc_success+0x42e0/0x6110 [ 345.465950][ T33] ? vprintk_emit+0x622/0x740 [ 345.470692][ T33] ? ieee80211_auth_challenge+0x370/0x370 [ 345.476449][ T33] ? __mutex_lock+0x9c5/0xd80 [ 345.481164][ T33] ? _printk+0xd1/0x111 [ 345.485375][ T33] ieee80211_sta_rx_queued_mgmt+0x2403/0x4100 [ 345.491499][ T33] ? ieee80211_rx_mgmt_beacon+0x3180/0x3180 [ 345.497433][ T33] ? stack_trace_save+0x113/0x1c0 [ 345.502572][ T33] ? mark_lock+0x9a/0x340 [ 345.507214][ T33] ? __lock_acquire+0x125b/0x1f80 [ 345.512290][ T33] ? __lock_acquire+0x125b/0x1f80 [ 345.517391][ T33] ? print_irqtrace_events+0x210/0x210 [ 345.522888][ T33] ? do_raw_spin_unlock+0x137/0x8a0 [ 345.528118][ T33] ? kcov_remote_start+0x4ae/0x7c0 [ 345.533382][ T33] ? lockdep_hardirqs_on+0x94/0x130 [ 345.538630][ T33] ? kcov_remote_start+0x8c/0x7c0 [ 345.543665][ T33] ieee80211_iface_work+0x737/0xce0 [ 345.548899][ T33] ? process_one_work+0x7a9/0x11d0 [ 345.554067][ T33] process_one_work+0x8a9/0x11d0 [ 345.559069][ T33] ? worker_detach_from_pool+0x260/0x260 [ 345.564735][ T33] ? _raw_spin_lock_irqsave+0x120/0x120 [ 345.570289][ T33] ? kthread_data+0x4e/0xc0 [ 345.574822][ T33] ? wq_worker_running+0x97/0x190 [ 345.579882][ T33] worker_thread+0xa47/0x1200 [ 345.584590][ T33] kthread+0x28d/0x320 [ 345.588655][ T33] ? worker_clr_flags+0x190/0x190 [ 345.593686][ T33] ? kthread_blkcg+0xd0/0xd0 [ 345.598274][ T33] ret_from_fork+0x1f/0x30 [ 345.602704][ T33] [ 345.606096][ T33] Kernel Offset: disabled [ 345.610514][ T33] Rebooting in 86400 seconds..