last executing test programs: 1m14.948741512s ago: executing program 0 (id=62): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000440)={[{@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fat=@nocase}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@rodir}, {@utf8}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_win95}]}, 0x1, 0x379, &(0x7f0000000c00)="$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") inotify_init() r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1m14.623300271s ago: executing program 0 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m14.622894581s ago: executing program 0 (id=73): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socketpair(0x3f, 0x3, 0x38, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m12.955122498s ago: executing program 0 (id=135): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a05086, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 1m12.940441199s ago: executing program 0 (id=136): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0xc7c) r1 = open(&(0x7f0000000040)='./file1\x00', 0xcc142, 0x0) ftruncate(r1, 0x7) 1m12.858117544s ago: executing program 0 (id=140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000001c0000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0)}, 0x20) 1m12.797986977s ago: executing program 32 (id=140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000001c0000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0)}, 0x20) 1m7.755198751s ago: executing program 3 (id=275): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)={[{@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@discard}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getdents64(r0, &(0x7f00000000c0)=""/85, 0x55) 1m7.730399382s ago: executing program 3 (id=278): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x4cb8d6d46cf08447, 0x7, 0x7, 0x10000, 0x3, 0x1, 0x18, 0xffff62d8, 0x2}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 1m7.651112427s ago: executing program 3 (id=281): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$security_evm(0x0, &(0x7f0000000240), 0x0, 0x0, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001580)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0x5, 0x801, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0) 1m7.640561487s ago: executing program 3 (id=282): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") open(&(0x7f0000000340)='./bus\x00', 0x400147040, 0x154) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0xbf5, 0x2000402) 1m7.535346903s ago: executing program 3 (id=288): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) 1m6.954419177s ago: executing program 3 (id=307): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1m6.90343766s ago: executing program 33 (id=307): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 17.689272171s ago: executing program 6 (id=1137): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, &(0x7f0000000100)="00ddbb52cfbae29d", 0x0}, 0x50) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) copy_file_range(r1, 0x0, r0, &(0x7f0000000100), 0x8, 0x0) 17.657637123s ago: executing program 6 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 16.402840786s ago: executing program 6 (id=1143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, r2, 0x0) 16.110290013s ago: executing program 6 (id=1148): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") open(&(0x7f0000000340)='./bus\x00', 0x400147040, 0x154) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0xbf5, 0x2000402) 15.932286993s ago: executing program 6 (id=1150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 14.895285334s ago: executing program 6 (id=1161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000, {0x2}}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) 14.741853903s ago: executing program 34 (id=1161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000, {0x2}}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) 3.648021227s ago: executing program 7 (id=1270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340)) 3.010778364s ago: executing program 4 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x2, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x1}) 2.92210004s ago: executing program 7 (id=1273): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) flock(r1, 0x1) 2.524626323s ago: executing program 7 (id=1274): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x64842, 0x4) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x2c) read(r0, 0x0, 0x0) 1.917803108s ago: executing program 7 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) write$tun(r0, &(0x7f00000009c0)={@void, @void, @eth={@local, @random="5da477244596", @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x63, 0x2000, 0x3, 0x2f, 0x0, @empty, @loopback}, {0xa040, 0x6558, 0x23, 0x0, @wg=@data={0x4, 0x1, 0x5, "736b416937f841936e20da"}}}}}}}, 0x49) 1.057219328s ago: executing program 4 (id=1278): pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x2200) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) 1.03791173s ago: executing program 7 (id=1279): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f00000000c0)=""/22, 0x16}, 0x8000}], 0x1, 0x2102, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 907.922257ms ago: executing program 7 (id=1280): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f000000f7c0)=ANY=[@ANYBLOB="00031400000014036d0a7af1c718159d3153a2cda1412b2cfe829d9e26e49c3f5d9e7de4f2e47d994d74b5e8384eb8b3836f5c130cea5705748dbc03dfb931cad9e7cdcbeed05a6e5f8831f5589bae9554da8e42e1e0573aab81a0fdb899f978f37edf83229821ae70ef34f42d9563674c1ab0dace876f7a3339acff7bf7c6aae17708b27fd9272a9af43b45e17ebe9b418ef17c"]}, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES16], 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000540)={0xa1a, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 574.973726ms ago: executing program 5 (id=1292): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000700)='\x00I;\xf6\xc8\x15\x94\xfa,\xc8\xb6\xac\x96\x90\x12H\xa34:~\xb3\xcaJT\xe2\xac\x1e\rXk\xe2k\x86\xe0\xaf\xf4\xb46!\x00\x83U\xd8\x02\xe5gn)\xa4\xfe\x00E\xf7\\jgN\xe0D/oj\xad\xd2\x00\x00\x00\xa6U$\xc4\a\x02\x96\x1c\xa1\x1d\xef5\xe8\x7f\xe3\x90\xfd!\xdeZ\x06\x11\x83\xf47\x01\xe1R2\xc1\xae!\xb7\xf6A\xa30\x94\xa3\x1dj$\x914z\x7f\xa20{\xfa)\xb2j\xba\x1f\x97q\x9bG\xc6\xc0u\x89\'\r\x96#6\x1f\f.m+\xa7~w\xc8+\x99\x12\x7f\xc9\x89\x0f\x05\v)\x9fO\x048\xf4bf\x18\x8b\x99\xb8\v\xeaY\xb6\xccSR\xa5\x86\xdf\xb3\x16}BN\x82\xfam\nx\x9f\xe0o\xc4*\xf0\x8d18\xd8\xf2\x1fr\xd7i,\xb0\xe9\x19\x9b[\xbe\x16\xe6\xc3N\xcb0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) 240.439726ms ago: executing program 2 (id=1302): syz_io_uring_setup(0x461, &(0x7f00000002c0)={0x0, 0x78a5, 0x1, 0x3, 0x281}, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 226.724247ms ago: executing program 5 (id=1303): r0 = syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x3010006, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYRESDEC=r0, @ANYRES64=r0], 0xdb, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000001f80)=""/4097, 0x1001) 201.810978ms ago: executing program 4 (id=1304): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = geteuid() setreuid(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 173.762669ms ago: executing program 1 (id=1305): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 172.216319ms ago: executing program 4 (id=1306): mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 144.902272ms ago: executing program 5 (id=1307): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:0/', @ANYRESOCT], 0x31) 123.749743ms ago: executing program 2 (id=1308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 110.560463ms ago: executing program 4 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 105.719254ms ago: executing program 5 (id=1310): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$eJzs3c9rHFUcAPDvbLL9rU2hFBWRgAcrtZsm8UcFD/WsxYLe65JsQ8mmW7Kb0sSC7cGepXgRC+JdPPdY/Ac8+DcUbKFICXrwEpnN7ObX5FezSbbdzwc2vDczu2++++a9vDdvlw2gZw2mfwoRr0fE90nE8YhIsn39ke0cXDxu/tmtsfSRxMLCl38nzePSfOu1Ws87mmVei4jfv4s4U1hbbn12brJcrVams/xQY+r6UH127uzVqfJEZaJybWR09PwHoyMff/Rhx2J999K/P37xsC/LnbiXxIU4luWWx7EDt5dnBmMwe0+KcWHVgcMdKKybJLlbf9vz82B7+rJ2Xoy0DzgefVmrB15+30bEAtCjkm23/z+Lu3MmwN5qjQNac/sOzYNfGE8/XZwArY2/f/HeSBxqzo2OzCcrZkbpfHegA+WnZTx4fP9e+ojO3YcA2NTtOxFxrr9/bf+XZP3f8zu3hWOWyli8g6j/g73zMB3/vJc3/im0xz+RM/45uqLtPr/Vr7G2/ReedKCYdaXjv09yx7/tRauBviz3SnPMV0yuXK1W0r7t1Yg4HcWDaX6j9Zzz848W1tu3fPz3oHD/Xlp+ayyYnceT/oMrnzNebpR3EvNyT+9EvJE7/k3a9Z/k1H/6flzaYhmnKvffytncHD6viP9xXvy7a+GXiHdy639pRSvZeH1yqHk9DLWuirX+uXvqj/XK3+/40/o/snH8A8ny9dr69sv4+dB/lWivJ6+0Iv7Y+vV/IPmqmT6QbbtZbjSmhyMOJJ+3txda20eWntvKt45P4z/99sb9X971fzgivt5i/HdP/vrmevu6of7Hc+u/PbtdVf/bTzz67Juf1it/8/jT+n+/mTqdbdlK/7fVE9zJewcAAAAAAADdphARxyIplNrpQqFUWvx8x8k4UqjW6o0zV2oz18aj+V3ZgSgWWivdx5d9HmI4WzFs5UdW5Ucj4kRE/NB3uJkvjdWq4/sdPAAAAAAAAAAAAAAAAAAAAHSJo+t8/z/1V99+nx2w6/zkN/SuTdt/J37pCehK/v9D79L+oXdp/9C7tH/oXdo/9C7tH3pXbvs/tPfnAew9//8BAAAAAAAAAAAAAAAAAAAAAAAAAACgoy5dvJg+Fuaf3RpL8+M3ZmcmazfOjlfqk6WpmbHSWG36emmiVpuoVkpjtanNXq9aq10fHomZm0ONSr0xVJ+duzxVm7nWuHx1qjxRuVwp7klUAAAAAAAAAAAAAAAAAAAA8GKpz85NlqvVyrTEy5xIImKXiujvigAlOp3Y754JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJb8HwAA//9jbDB1") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) 96.416504ms ago: executing program 1 (id=1311): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0xfffffffd, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x8, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0xb7, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xd, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x6, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0xfd, 0x9, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xe, 0x4, 0x100002, 0x8, 0x80000752, 0x0, 0x3, 0x0, 0x10001, 0x1, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0x2, 0x2, 0x40, 0x1084, 0x100, 0x5, 0x252, 0x81, 0xf, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x3, 0x2, 0x5, 0xb, 0x0, 0x4, 0x2, 0x40, 0x8, 0x9, 0x4, 0x401, 0x66d1, 0x8, 0x8, 0x1, 0x7, 0xc5c, 0x5]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 90.502444ms ago: executing program 2 (id=1312): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 73.488535ms ago: executing program 4 (id=1313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000700)="440f20c0663503000000440f22c036f30fc7fe0f01cb3ef30f2d5700f20fc21ec2b400b862058ed00f01c20f01cb66660f7ef4832a42", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.847037ms ago: executing program 1 (id=1314): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="280320000a00140000007ef506be00c48ad97a0000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6b0100995f96877870000000000000000", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random}, 0x14) 37.890827ms ago: executing program 2 (id=1315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xfffff801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x52, 0x10000, 0x4, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000340)={0x5, 0x10000, 0x4, r2, 0x4}) 0s ago: executing program 1 (id=1316): unshare(0x2040400) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) unshare(0x22020600) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): nge from 0 to 256 [ 84.965167][ T3110] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 84.973029][ T3293] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 84.987997][ T3110] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 84.997319][ T3273] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 85.009866][ T3273] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 85.018623][ T28] audit: type=1400 audit(1770634371.500:1250): avc: denied { mounton } for pid=3292 comm="syz.1.1157" path="/228/file0/file0" dev="loop1" ino=1048704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.026658][ T3110] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 85.055416][ T28] audit: type=1400 audit(1770634371.540:1251): avc: denied { unlink } for pid=284 comm="syz-executor" name="file0" dev="loop1" ino=1048707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.116964][ T3297] loop1: detected capacity change from 0 to 512 [ 85.131665][ T3297] EXT4-fs: Ignoring removed oldalloc option [ 85.157727][ T3297] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 85.167125][ T3297] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1160: invalid indirect mapped block 2683928664 (level 1) [ 85.243710][ T3297] EXT4-fs (loop1): 1 truncate cleaned up [ 85.277895][ T28] audit: type=1400 audit(1770634371.760:1252): avc: denied { link } for pid=3296 comm="syz.1.1160" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 85.288886][ T3273] syz.5.1152: attempt to access beyond end of device [ 85.288886][ T3273] loop5: rw=2049, sector=53248, nr_sectors = 7880 limit=40427 [ 85.300724][ T3297] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1160: Invalid block bitmap block 3 in block_group 0 [ 85.326813][ T3273] syz.5.1152: attempt to access beyond end of device [ 85.326813][ T3273] loop5: rw=2049, sector=61128, nr_sectors = 4744 limit=40427 [ 85.349664][ T3273] syz.5.1152: attempt to access beyond end of device [ 85.349664][ T3273] loop5: rw=2049, sector=65872, nr_sectors = 2872 limit=40427 [ 85.380064][ T3273] syz.5.1152: attempt to access beyond end of device [ 85.380064][ T3273] loop5: rw=2049, sector=68744, nr_sectors = 4496 limit=40427 [ 85.436485][ T3307] loop1: detected capacity change from 0 to 512 [ 85.461358][ T3273] syz.5.1152: attempt to access beyond end of device [ 85.461358][ T3273] loop5: rw=2049, sector=73240, nr_sectors = 4584 limit=40427 [ 85.485380][ T3273] syz.5.1152: attempt to access beyond end of device [ 85.485380][ T3273] loop5: rw=2049, sector=81920, nr_sectors = 3584 limit=40427 [ 85.510268][ T3273] syz.5.1152: attempt to access beyond end of device [ 85.510268][ T3273] loop5: rw=2049, sector=85504, nr_sectors = 4336 limit=40427 [ 85.529135][ T3307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.555825][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.561420][ T3307] EXT4-fs (loop1): 1 truncate cleaned up [ 85.564246][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.580407][ T681] syz-executor: attempt to access beyond end of device [ 85.580407][ T681] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 85.602477][ T3310] device bridge_slave_0 entered promiscuous mode [ 85.630137][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.637773][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.652035][ T3310] device bridge_slave_1 entered promiscuous mode [ 85.749829][ T3320] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 85.782791][ T1143] device bridge_slave_1 left promiscuous mode [ 85.796158][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.822083][ T1143] device bridge_slave_0 left promiscuous mode [ 85.835421][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.843171][ T3316] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(918016) [ 85.852974][ T3316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 85.862211][ T3316] F2FS-fs (loop1): invalid crc value [ 85.862627][ T1143] device veth1_macvtap left promiscuous mode [ 85.873718][ T1143] device veth0_vlan left promiscuous mode [ 85.875670][ T3316] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.946712][ T3316] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 85.953977][ T3316] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.987446][ T28] audit: type=1400 audit(1770634372.470:1253): avc: denied { map } for pid=3315 comm="syz.1.1168" path="/231/file1/memory.swap.current" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.001297][ T19] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 86.064196][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.071302][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.078659][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.085731][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.107884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.115768][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.123582][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.147417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.161581][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.168637][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.177371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.187080][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.194154][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.202694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.213614][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 86.232204][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.234511][ T28] audit: type=1400 audit(1770634372.720:1254): avc: denied { create } for pid=3345 comm="syz.4.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 86.245608][ T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.274024][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.294963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.303125][ T19] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.313495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.322239][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.330645][ T19] usb 6-1: Product: syz [ 86.335018][ T19] usb 6-1: Manufacturer: syz [ 86.339907][ T19] usb 6-1: SerialNumber: syz [ 86.345057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.362379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.380215][ T3310] device veth0_vlan entered promiscuous mode [ 86.440808][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.451022][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.459479][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.467623][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.484962][ T3310] device veth1_macvtap entered promiscuous mode [ 86.505765][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.525978][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.535114][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.562674][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.572785][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.587843][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.608592][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.716408][ T28] audit: type=1400 audit(1770634373.200:1255): avc: denied { write } for pid=3370 comm="syz.1.1186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 86.773118][ T19] usb 6-1: 0:2 : does not exist [ 86.868813][ T28] audit: type=1400 audit(1770634373.350:1256): avc: denied { read } for pid=3373 comm="syz.7.1187" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.892018][ T28] audit: type=1400 audit(1770634373.350:1257): avc: denied { open } for pid=3373 comm="syz.7.1187" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.975757][ T3354] F2FS-fs (loop4): invalid crc value [ 86.982655][ T3354] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 704461755581925) [ 87.031156][ T3354] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.080643][ T3354] F2FS-fs (loop4): access invalid blkaddr:1803188595 [ 87.087554][ T3354] CPU: 0 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 87.094951][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 87.105294][ T3354] Call Trace: [ 87.108770][ T3354] [ 87.111713][ T3354] __dump_stack+0x21/0x24 [ 87.116062][ T3354] dump_stack_lvl+0x110/0x170 [ 87.116075][ T3392] erofs: (device loop7): mounted with root inode @ nid 36. [ 87.128098][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 87.133139][ T3354] ? f2fs_map_lock+0xc4/0x2d0 [ 87.137807][ T3354] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 87.143788][ T3354] dump_stack+0x15/0x24 [ 87.147931][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 87.153459][ T3354] f2fs_is_valid_blkaddr+0x23/0x30 [ 87.158564][ T3354] f2fs_map_blocks+0xd43/0x3ba0 [ 87.163403][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 87.168242][ T3354] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 87.173504][ T3354] ? irqentry_exit+0x37/0x40 [ 87.178069][ T3354] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 87.183855][ T3354] f2fs_file_write_iter+0x14d3/0x2610 [ 87.189203][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 87.194045][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 87.199763][ T3354] ? __switch_to_asm+0x3a/0x60 [ 87.204511][ T3354] ? __schedule+0xbae/0x1500 [ 87.209080][ T3354] ? plist_add+0x3e8/0x470 [ 87.213568][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 87.218509][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 87.223287][ T3354] ? security_file_permission+0x8a/0xb0 [ 87.228824][ T3354] do_iter_write+0x665/0xb40 [ 87.233398][ T3354] ? _copy_from_user+0x8f/0xc0 [ 87.238153][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 87.242850][ T3354] ? import_iovec+0x7c/0xb0 [ 87.247356][ T3354] vfs_writev+0x339/0x5f0 [ 87.251680][ T3354] ? do_writev+0x2c0/0x2c0 [ 87.256091][ T3354] ? __fdget+0x19c/0x220 [ 87.260416][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 87.265446][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 87.270385][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 87.275412][ T3354] ? __kasan_check_write+0x14/0x20 [ 87.280535][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 87.286188][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 87.291163][ T3354] x64_sys_call+0x2d6/0x9a0 [ 87.295692][ T3354] do_syscall_64+0x4c/0xa0 [ 87.300136][ T3354] ? clear_bhb_loop+0x30/0x80 [ 87.305066][ T3354] ? clear_bhb_loop+0x30/0x80 [ 87.310081][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.316061][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 87.320464][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.340051][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 87.348453][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 87.356407][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 87.364366][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 87.372405][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 87.380363][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 87.388327][ T3354] [ 87.396845][ T3354] F2FS-fs (loop4): access invalid blkaddr:1803188595 [ 87.403724][ T19] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 87.416610][ T3354] CPU: 1 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 87.424094][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 87.434241][ T3354] Call Trace: [ 87.437525][ T3354] [ 87.440017][ T19] usb 6-1: USB disconnect, device number 8 [ 87.440465][ T3354] __dump_stack+0x21/0x24 [ 87.450586][ T3354] dump_stack_lvl+0x110/0x170 [ 87.455464][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 87.460603][ T3354] ? __kasan_check_write+0x14/0x20 [ 87.465731][ T3354] ? f2fs_dirty_node_folio+0x220/0x330 [ 87.471275][ T3354] dump_stack+0x15/0x24 [ 87.475533][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 87.481065][ T3354] ? f2fs_set_data_blkaddr+0x28b/0x3d0 [ 87.486776][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 87.492217][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 87.498790][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 87.504321][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 87.510286][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 87.515748][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 87.521022][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 87.525681][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 87.531031][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 87.535863][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 87.541559][ T3354] ? __switch_to_asm+0x3a/0x60 [ 87.546402][ T3354] ? __schedule+0xbae/0x1500 [ 87.551062][ T3354] ? plist_add+0x3e8/0x470 [ 87.555463][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 87.560302][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 87.564987][ T3354] ? security_file_permission+0x8a/0xb0 [ 87.570558][ T3354] do_iter_write+0x665/0xb40 [ 87.575223][ T3354] ? _copy_from_user+0x8f/0xc0 [ 87.579968][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 87.584795][ T3354] ? import_iovec+0x7c/0xb0 [ 87.589470][ T3354] vfs_writev+0x339/0x5f0 [ 87.593792][ T3354] ? do_writev+0x2c0/0x2c0 [ 87.598199][ T3354] ? __fdget+0x19c/0x220 [ 87.602705][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 87.607760][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 87.612688][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 87.617706][ T3354] ? __kasan_check_write+0x14/0x20 [ 87.622794][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 87.628407][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 87.633236][ T3354] x64_sys_call+0x2d6/0x9a0 [ 87.637807][ T3354] do_syscall_64+0x4c/0xa0 [ 87.642201][ T3354] ? clear_bhb_loop+0x30/0x80 [ 87.646852][ T3354] ? clear_bhb_loop+0x30/0x80 [ 87.651506][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.657479][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 87.661963][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.681550][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 87.689944][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 87.697896][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 87.705933][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 87.713886][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 87.721921][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 87.729878][ T3354] [ 87.734396][ T3354] F2FS-fs (loop4): access invalid blkaddr:1701604449 [ 87.746514][ T3354] CPU: 0 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 87.753903][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 87.764335][ T3354] Call Trace: [ 87.767799][ T3354] [ 87.770742][ T3354] __dump_stack+0x21/0x24 [ 87.775095][ T3354] dump_stack_lvl+0x110/0x170 [ 87.779798][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 87.784838][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 87.790329][ T3354] dump_stack+0x15/0x24 [ 87.794589][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 87.800158][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 87.805636][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 87.811113][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 87.817291][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 87.822772][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 87.828786][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 87.834126][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 87.839333][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 87.843925][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 87.849309][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 87.854234][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 87.859939][ T3354] ? __switch_to_asm+0x3a/0x60 [ 87.864691][ T3354] ? __schedule+0xbae/0x1500 [ 87.869280][ T3354] ? plist_add+0x3e8/0x470 [ 87.873685][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 87.878528][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 87.883365][ T3354] ? security_file_permission+0x8a/0xb0 [ 87.888985][ T3354] do_iter_write+0x665/0xb40 [ 87.893561][ T3354] ? _copy_from_user+0x8f/0xc0 [ 87.898311][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 87.902973][ T3354] ? import_iovec+0x7c/0xb0 [ 87.907465][ T3354] vfs_writev+0x339/0x5f0 [ 87.911779][ T3354] ? do_writev+0x2c0/0x2c0 [ 87.916273][ T3354] ? __fdget+0x19c/0x220 [ 87.920583][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 87.925592][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 87.930514][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 87.935525][ T3354] ? __kasan_check_write+0x14/0x20 [ 87.940618][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 87.946262][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 87.951106][ T3354] x64_sys_call+0x2d6/0x9a0 [ 87.955595][ T3354] do_syscall_64+0x4c/0xa0 [ 87.960000][ T3354] ? clear_bhb_loop+0x30/0x80 [ 87.964658][ T3354] ? clear_bhb_loop+0x30/0x80 [ 87.969328][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.975213][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 87.979627][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.999223][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 88.007640][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 88.015605][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 88.023585][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 88.031551][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 88.039514][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 88.047475][ T3354] [ 88.050989][ T3354] F2FS-fs (loop4): access invalid blkaddr:29554 [ 88.062925][ T3354] CPU: 1 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 88.070306][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.080362][ T3354] Call Trace: [ 88.083699][ T3354] [ 88.086636][ T3354] __dump_stack+0x21/0x24 [ 88.090986][ T3354] dump_stack_lvl+0x110/0x170 [ 88.095715][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 88.100728][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 88.106223][ T3354] dump_stack+0x15/0x24 [ 88.110360][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 88.115889][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 88.121346][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 88.126813][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 88.132992][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 88.138474][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 88.144473][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 88.149774][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 88.154986][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 88.159598][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 88.165081][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 88.169949][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 88.175680][ T3354] ? __switch_to_asm+0x3a/0x60 [ 88.180457][ T3354] ? __schedule+0xbae/0x1500 [ 88.185156][ T3354] ? plist_add+0x3e8/0x470 [ 88.189589][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 88.194457][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 88.199141][ T3354] ? security_file_permission+0x8a/0xb0 [ 88.204693][ T3354] do_iter_write+0x665/0xb40 [ 88.209273][ T3354] ? _copy_from_user+0x8f/0xc0 [ 88.214109][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 88.218769][ T3354] ? import_iovec+0x7c/0xb0 [ 88.223256][ T3354] vfs_writev+0x339/0x5f0 [ 88.227579][ T3354] ? do_writev+0x2c0/0x2c0 [ 88.231985][ T3354] ? __fdget+0x19c/0x220 [ 88.236219][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 88.241255][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 88.246172][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 88.251177][ T3354] ? __kasan_check_write+0x14/0x20 [ 88.256275][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 88.261888][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 88.266736][ T3354] x64_sys_call+0x2d6/0x9a0 [ 88.271218][ T3354] do_syscall_64+0x4c/0xa0 [ 88.275765][ T3354] ? clear_bhb_loop+0x30/0x80 [ 88.280443][ T3354] ? clear_bhb_loop+0x30/0x80 [ 88.285110][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.290993][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 88.295400][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.314992][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 88.323502][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 88.331569][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 88.339522][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 88.347495][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 88.355531][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 88.363518][ T3354] [ 88.372791][ T3354] F2FS-fs (loop4): access invalid blkaddr:4076150801 [ 88.379804][ T3354] CPU: 1 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 88.387179][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.397238][ T3354] Call Trace: [ 88.400554][ T3354] [ 88.403489][ T3354] __dump_stack+0x21/0x24 [ 88.407853][ T3354] dump_stack_lvl+0x110/0x170 [ 88.412541][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 88.417584][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 88.423061][ T3354] dump_stack+0x15/0x24 [ 88.427226][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 88.432885][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 88.438353][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 88.443840][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 88.450029][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 88.455505][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 88.461502][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 88.466802][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 88.472030][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 88.476651][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 88.482049][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 88.486917][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 88.492645][ T3354] ? __switch_to_asm+0x3a/0x60 [ 88.497427][ T3354] ? __schedule+0xbae/0x1500 [ 88.502023][ T3354] ? plist_add+0x3e8/0x470 [ 88.506451][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 88.511317][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 88.516009][ T3354] ? security_file_permission+0x8a/0xb0 [ 88.521570][ T3354] do_iter_write+0x665/0xb40 [ 88.526164][ T3354] ? _copy_from_user+0x8f/0xc0 [ 88.530939][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 88.535628][ T3354] ? import_iovec+0x7c/0xb0 [ 88.540150][ T3354] vfs_writev+0x339/0x5f0 [ 88.544489][ T3354] ? do_writev+0x2c0/0x2c0 [ 88.548923][ T3354] ? __fdget+0x19c/0x220 [ 88.553176][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 88.558216][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 88.563158][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 88.568183][ T3354] ? __kasan_check_write+0x14/0x20 [ 88.573282][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 88.578909][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 88.583760][ T3354] x64_sys_call+0x2d6/0x9a0 [ 88.588254][ T3354] do_syscall_64+0x4c/0xa0 [ 88.592659][ T3354] ? clear_bhb_loop+0x30/0x80 [ 88.597319][ T3354] ? clear_bhb_loop+0x30/0x80 [ 88.601987][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.607873][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 88.612274][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.631861][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 88.640258][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 88.648215][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 88.656178][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 88.664134][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 88.672086][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 88.680043][ T3354] [ 88.688722][ T3354] F2FS-fs (loop4): access invalid blkaddr:1 [ 88.694677][ T3354] CPU: 1 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 88.702067][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.712123][ T3354] Call Trace: [ 88.715664][ T3354] [ 88.718622][ T3354] __dump_stack+0x21/0x24 [ 88.722964][ T3354] dump_stack_lvl+0x110/0x170 [ 88.727657][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 88.732702][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 88.738166][ T3354] dump_stack+0x15/0x24 [ 88.742322][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 88.747858][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 88.753304][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 88.758760][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 88.764968][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 88.770424][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 88.776412][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 88.781692][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 88.786880][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 88.791557][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 88.796914][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 88.801758][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 88.807460][ T3354] ? __switch_to_asm+0x3a/0x60 [ 88.812295][ T3354] ? __schedule+0xbae/0x1500 [ 88.816870][ T3354] ? plist_add+0x3e8/0x470 [ 88.821277][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 88.826211][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 88.830964][ T3354] ? security_file_permission+0x8a/0xb0 [ 88.836496][ T3354] do_iter_write+0x665/0xb40 [ 88.841065][ T3354] ? _copy_from_user+0x8f/0xc0 [ 88.845816][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 88.850474][ T3354] ? import_iovec+0x7c/0xb0 [ 88.854962][ T3354] vfs_writev+0x339/0x5f0 [ 88.859277][ T3354] ? do_writev+0x2c0/0x2c0 [ 88.863684][ T3354] ? __fdget+0x19c/0x220 [ 88.867914][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 88.872929][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 88.877855][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 88.882861][ T3354] ? __kasan_check_write+0x14/0x20 [ 88.887953][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 88.893574][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 88.898404][ T3354] x64_sys_call+0x2d6/0x9a0 [ 88.902893][ T3354] do_syscall_64+0x4c/0xa0 [ 88.907296][ T3354] ? clear_bhb_loop+0x30/0x80 [ 88.911955][ T3354] ? clear_bhb_loop+0x30/0x80 [ 88.916612][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.922491][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 88.926890][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.946566][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 88.954963][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 88.962922][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 88.970879][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 88.978835][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 88.986787][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 88.994743][ T3354] [ 88.999953][ T3354] F2FS-fs (loop4): access invalid blkaddr:2147878401 [ 89.006963][ T3354] CPU: 0 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 89.014344][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 89.024401][ T3354] Call Trace: [ 89.027671][ T3354] [ 89.030586][ T3354] __dump_stack+0x21/0x24 [ 89.034908][ T3354] dump_stack_lvl+0x110/0x170 [ 89.039585][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.044597][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 89.050043][ T3354] dump_stack+0x15/0x24 [ 89.054180][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 89.059708][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 89.065236][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 89.070685][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 89.076830][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 89.082274][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 89.088241][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 89.093516][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 89.098708][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 89.103285][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 89.108753][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 89.113593][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 89.119292][ T3354] ? __switch_to_asm+0x3a/0x60 [ 89.124041][ T3354] ? __schedule+0xbae/0x1500 [ 89.128614][ T3354] ? plist_add+0x3e8/0x470 [ 89.133016][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 89.137856][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 89.142520][ T3354] ? security_file_permission+0x8a/0xb0 [ 89.148051][ T3354] do_iter_write+0x665/0xb40 [ 89.152621][ T3354] ? _copy_from_user+0x8f/0xc0 [ 89.157373][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 89.162032][ T3354] ? import_iovec+0x7c/0xb0 [ 89.166522][ T3354] vfs_writev+0x339/0x5f0 [ 89.170836][ T3354] ? do_writev+0x2c0/0x2c0 [ 89.175239][ T3354] ? __fdget+0x19c/0x220 [ 89.179464][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 89.184469][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 89.189389][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 89.194400][ T3354] ? __kasan_check_write+0x14/0x20 [ 89.199500][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 89.205113][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 89.209945][ T3354] x64_sys_call+0x2d6/0x9a0 [ 89.214430][ T3354] do_syscall_64+0x4c/0xa0 [ 89.218832][ T3354] ? clear_bhb_loop+0x30/0x80 [ 89.223490][ T3354] ? clear_bhb_loop+0x30/0x80 [ 89.228148][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.234028][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 89.238426][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.258009][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 89.266404][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 89.274402][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 89.282407][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 89.290452][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 89.298407][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 89.306450][ T3354] [ 89.323244][ T3354] F2FS-fs (loop4): access invalid blkaddr:1953784319 [ 89.324233][ T3434] set_capacity_and_notify: 7 callbacks suppressed [ 89.324247][ T3434] loop1: detected capacity change from 0 to 512 [ 89.330001][ T3354] CPU: 0 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 89.349924][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 89.353927][ T3434] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.359975][ T3354] Call Trace: [ 89.359987][ T3354] [ 89.359994][ T3354] __dump_stack+0x21/0x24 [ 89.366792][ T3434] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1212: bg 0: block 63: padding at end of block bitmap is not set [ 89.369573][ T3354] dump_stack_lvl+0x110/0x170 [ 89.373105][ T3434] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1001: inode #11: comm syz.1.1212: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 89.376809][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.376837][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 89.391558][ T3434] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1194: inode #11: comm syz.1.1212: ea_inode dec ref err=-117 [ 89.395628][ T3354] dump_stack+0x15/0x24 [ 89.411407][ T3434] EXT4-fs (loop1): 1 orphan inode deleted [ 89.415540][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 89.449275][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 89.454761][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 89.460244][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 89.466394][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 89.471836][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 89.477800][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 89.483073][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 89.488260][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 89.492839][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 89.498539][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 89.503377][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 89.509085][ T3354] ? __switch_to_asm+0x3a/0x60 [ 89.513839][ T3354] ? __schedule+0xbae/0x1500 [ 89.518426][ T3354] ? plist_add+0x3e8/0x470 [ 89.522836][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 89.527685][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 89.532532][ T3354] ? security_file_permission+0x8a/0xb0 [ 89.538064][ T3354] do_iter_write+0x665/0xb40 [ 89.542637][ T3354] ? _copy_from_user+0x8f/0xc0 [ 89.547384][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 89.552047][ T3354] ? import_iovec+0x7c/0xb0 [ 89.556544][ T3354] vfs_writev+0x339/0x5f0 [ 89.560950][ T3354] ? do_writev+0x2c0/0x2c0 [ 89.565370][ T3354] ? __fdget+0x19c/0x220 [ 89.569899][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 89.574918][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 89.579845][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 89.584854][ T3354] ? __kasan_check_write+0x14/0x20 [ 89.589972][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 89.595588][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 89.600423][ T3354] x64_sys_call+0x2d6/0x9a0 [ 89.604909][ T3354] do_syscall_64+0x4c/0xa0 [ 89.609308][ T3354] ? clear_bhb_loop+0x30/0x80 [ 89.613972][ T3354] ? clear_bhb_loop+0x30/0x80 [ 89.618632][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.624520][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 89.628922][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.648607][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 89.657007][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 89.664968][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 89.672926][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 89.680890][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 89.688840][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 89.696796][ T3354] [ 89.700308][ T3354] F2FS-fs (loop4): access invalid blkaddr:1635266930 [ 89.714557][ T3354] CPU: 1 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 89.722033][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 89.732087][ T3354] Call Trace: [ 89.735360][ T3354] [ 89.738282][ T3354] __dump_stack+0x21/0x24 [ 89.742623][ T3354] dump_stack_lvl+0x110/0x170 [ 89.747312][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.752334][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 89.758224][ T3354] dump_stack+0x15/0x24 [ 89.762368][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 89.767924][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 89.773367][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 89.778813][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 89.784959][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 89.790409][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 89.796384][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 89.801667][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 89.806855][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 89.811432][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 89.816790][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 89.821629][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 89.827332][ T3354] ? __switch_to_asm+0x3a/0x60 [ 89.832091][ T3354] ? __schedule+0xbae/0x1500 [ 89.836668][ T3354] ? plist_add+0x3e8/0x470 [ 89.841073][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 89.845919][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 89.850580][ T3354] ? security_file_permission+0x8a/0xb0 [ 89.856111][ T3354] do_iter_write+0x665/0xb40 [ 89.860685][ T3354] ? _copy_from_user+0x8f/0xc0 [ 89.865452][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 89.870114][ T3354] ? import_iovec+0x7c/0xb0 [ 89.874638][ T3354] vfs_writev+0x339/0x5f0 [ 89.878952][ T3354] ? do_writev+0x2c0/0x2c0 [ 89.883361][ T3354] ? __fdget+0x19c/0x220 [ 89.887586][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 89.892594][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 89.897517][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 89.902528][ T3354] ? __kasan_check_write+0x14/0x20 [ 89.907658][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 89.913277][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 89.918112][ T3354] x64_sys_call+0x2d6/0x9a0 [ 89.922601][ T3354] do_syscall_64+0x4c/0xa0 [ 89.927004][ T3354] ? clear_bhb_loop+0x30/0x80 [ 89.931668][ T3354] ? clear_bhb_loop+0x30/0x80 [ 89.936342][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.942229][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 89.946635][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.966226][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 89.974625][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 89.982580][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 89.990534][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 89.998497][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 90.006462][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 90.014781][ T3354] [ 90.035992][ T3354] F2FS-fs (loop4): access invalid blkaddr:829584500 [ 90.042831][ T3354] CPU: 0 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 90.050306][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 90.060360][ T3354] Call Trace: [ 90.063635][ T3354] [ 90.066591][ T3354] __dump_stack+0x21/0x24 [ 90.070925][ T3354] dump_stack_lvl+0x110/0x170 [ 90.075599][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 90.080627][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 90.086092][ T3354] dump_stack+0x15/0x24 [ 90.090251][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 90.095793][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 90.101251][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 90.106711][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 90.112884][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 90.118399][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 90.124398][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 90.129698][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 90.134906][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 90.139511][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 90.144975][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 90.149834][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 90.155642][ T3354] ? __switch_to_asm+0x3a/0x60 [ 90.160410][ T3354] ? __schedule+0xbae/0x1500 [ 90.161733][ T3445] loop2: detected capacity change from 0 to 40427 [ 90.164998][ T3354] ? plist_add+0x3e8/0x470 [ 90.175781][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 90.180650][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 90.185339][ T3354] ? security_file_permission+0x8a/0xb0 [ 90.190925][ T3354] do_iter_write+0x665/0xb40 [ 90.195520][ T3354] ? _copy_from_user+0x8f/0xc0 [ 90.200381][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 90.205054][ T3354] ? import_iovec+0x7c/0xb0 [ 90.209540][ T3354] vfs_writev+0x339/0x5f0 [ 90.213852][ T3354] ? do_writev+0x2c0/0x2c0 [ 90.218267][ T3354] ? __fdget+0x19c/0x220 [ 90.222481][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 90.227566][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 90.232484][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 90.237491][ T3354] ? __kasan_check_write+0x14/0x20 [ 90.242577][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 90.248360][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 90.253194][ T3354] x64_sys_call+0x2d6/0x9a0 [ 90.257704][ T3354] do_syscall_64+0x4c/0xa0 [ 90.262129][ T3354] ? clear_bhb_loop+0x30/0x80 [ 90.266807][ T3354] ? clear_bhb_loop+0x30/0x80 [ 90.271488][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.277394][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 90.281814][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.301418][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 90.309830][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 90.317781][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 90.325732][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 90.333719][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 90.341673][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 90.349624][ T3354] [ 90.354906][ T3354] F2FS-fs (loop4): access invalid blkaddr:394753 [ 90.361725][ T3445] F2FS-fs (loop2): invalid crc value [ 90.368098][ T3354] CPU: 0 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 90.375484][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 90.385710][ T3354] Call Trace: [ 90.388986][ T3354] [ 90.391917][ T3354] __dump_stack+0x21/0x24 [ 90.396262][ T3354] dump_stack_lvl+0x110/0x170 [ 90.400952][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 90.401020][ T3455] loop5: detected capacity change from 0 to 128 [ 90.405984][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 90.406016][ T3354] dump_stack+0x15/0x24 [ 90.406038][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 90.427450][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 90.432927][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 90.438395][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 90.444647][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 90.450105][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 90.456086][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 90.461368][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 90.466555][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 90.471136][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 90.476528][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 90.481374][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 90.487073][ T3354] ? __switch_to_asm+0x3a/0x60 [ 90.491912][ T3354] ? __schedule+0xbae/0x1500 [ 90.496495][ T3354] ? plist_add+0x3e8/0x470 [ 90.500903][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 90.505829][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 90.510489][ T3354] ? security_file_permission+0x8a/0xb0 [ 90.516542][ T3354] do_iter_write+0x665/0xb40 [ 90.521230][ T3354] ? _copy_from_user+0x8f/0xc0 [ 90.525984][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 90.530645][ T3354] ? import_iovec+0x7c/0xb0 [ 90.535137][ T3354] vfs_writev+0x339/0x5f0 [ 90.539453][ T3354] ? do_writev+0x2c0/0x2c0 [ 90.543948][ T3354] ? __fdget+0x19c/0x220 [ 90.548175][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 90.553189][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 90.558212][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 90.563222][ T3354] ? __kasan_check_write+0x14/0x20 [ 90.568318][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 90.573936][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 90.578862][ T3354] x64_sys_call+0x2d6/0x9a0 [ 90.583355][ T3354] do_syscall_64+0x4c/0xa0 [ 90.587863][ T3354] ? clear_bhb_loop+0x30/0x80 [ 90.592578][ T3354] ? clear_bhb_loop+0x30/0x80 [ 90.597273][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.603174][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 90.607578][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.627166][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 90.635565][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 90.643604][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 90.651557][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 90.659595][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 90.667564][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 90.675543][ T3354] [ 90.700912][ T3445] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.703260][ T3455] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 90.738690][ T3354] F2FS-fs (loop4): access invalid blkaddr:1953784184 [ 90.748593][ T3445] F2FS-fs (loop2): Start checkpoint disabled! [ 90.755166][ T3354] CPU: 0 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 90.762555][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 90.772609][ T3354] Call Trace: [ 90.775891][ T3354] [ 90.778816][ T3354] __dump_stack+0x21/0x24 [ 90.783156][ T3354] dump_stack_lvl+0x110/0x170 [ 90.787879][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 90.793005][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 90.798475][ T3354] dump_stack+0x15/0x24 [ 90.802637][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 90.808192][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 90.813660][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 90.817359][ T3453] loop7: detected capacity change from 0 to 40427 [ 90.819304][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 90.829903][ T3453] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 90.831828][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 90.831861][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 90.839022][ T3453] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 90.843869][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 90.843902][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 90.850849][ T3453] F2FS-fs (loop7): invalid crc value [ 90.857994][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 90.858025][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 90.865350][ T28] audit: type=1400 audit(1770634377.350:1258): avc: denied { remount } for pid=3454 comm="syz.5.1227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 90.868479][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 90.908662][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 90.915069][ T3354] ? __switch_to_asm+0x3a/0x60 [ 90.919838][ T3354] ? __schedule+0xbae/0x1500 [ 90.924447][ T3354] ? plist_add+0x3e8/0x470 [ 90.928870][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 90.933717][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 90.938569][ T3354] ? security_file_permission+0x8a/0xb0 [ 90.944111][ T3354] do_iter_write+0x665/0xb40 [ 90.948700][ T3354] ? _copy_from_user+0x8f/0xc0 [ 90.953464][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 90.958318][ T3354] ? import_iovec+0x7c/0xb0 [ 90.962824][ T3354] vfs_writev+0x339/0x5f0 [ 90.967338][ T3354] ? do_writev+0x2c0/0x2c0 [ 90.971794][ T3354] ? __fdget+0x19c/0x220 [ 90.976033][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 90.981047][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 90.985975][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 90.990984][ T3354] ? __kasan_check_write+0x14/0x20 [ 90.996080][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 91.001706][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 91.006643][ T3354] x64_sys_call+0x2d6/0x9a0 [ 91.011138][ T3354] do_syscall_64+0x4c/0xa0 [ 91.015633][ T3354] ? clear_bhb_loop+0x30/0x80 [ 91.020313][ T3354] ? clear_bhb_loop+0x30/0x80 [ 91.024980][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.030873][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 91.035284][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.054884][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 91.063292][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 91.071249][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 91.079205][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 91.087194][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 91.095162][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 91.103128][ T3354] [ 91.106801][ T3354] F2FS-fs (loop4): access invalid blkaddr:1635267186 [ 91.113594][ T3445] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 91.122212][ T3354] CPU: 1 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 91.129601][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 91.139923][ T3354] Call Trace: [ 91.143209][ T3354] [ 91.146142][ T3354] __dump_stack+0x21/0x24 [ 91.150486][ T3354] dump_stack_lvl+0x110/0x170 [ 91.155178][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 91.157487][ T3453] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 91.160221][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 91.176667][ T3354] dump_stack+0x15/0x24 [ 91.180826][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 91.186386][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 91.189684][ T3453] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 91.191850][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 91.191876][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 91.191906][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 91.191934][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 91.191960][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 91.191986][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 91.192011][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 91.237105][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 91.242476][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 91.247312][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 91.253009][ T3354] ? __switch_to_asm+0x3a/0x60 [ 91.257756][ T3354] ? __schedule+0xbae/0x1500 [ 91.262343][ T3354] ? plist_add+0x3e8/0x470 [ 91.266760][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 91.271606][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 91.276451][ T3354] ? security_file_permission+0x8a/0xb0 [ 91.282002][ T3354] do_iter_write+0x665/0xb40 [ 91.286691][ T3354] ? _copy_from_user+0x8f/0xc0 [ 91.291448][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 91.296379][ T3354] ? import_iovec+0x7c/0xb0 [ 91.300876][ T3354] vfs_writev+0x339/0x5f0 [ 91.305192][ T3354] ? do_writev+0x2c0/0x2c0 [ 91.309602][ T3354] ? __fdget+0x19c/0x220 [ 91.313833][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 91.318837][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 91.323759][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 91.328763][ T3354] ? __kasan_check_write+0x14/0x20 [ 91.333852][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 91.339472][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 91.344308][ T3354] x64_sys_call+0x2d6/0x9a0 [ 91.348796][ T3354] do_syscall_64+0x4c/0xa0 [ 91.353200][ T3354] ? clear_bhb_loop+0x30/0x80 [ 91.357883][ T3354] ? clear_bhb_loop+0x30/0x80 [ 91.362551][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.368469][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 91.372889][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.392488][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 91.400912][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 91.408884][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 91.416896][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 91.425465][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 91.433428][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 91.441401][ T3354] [ 91.444894][ T3445] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 91.461263][ T3453] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 91.478068][ T3354] F2FS-fs (loop4): access invalid blkaddr:846361716 [ 91.484896][ T3354] CPU: 0 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 91.492274][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 91.502337][ T3354] Call Trace: [ 91.505620][ T3354] [ 91.508553][ T3354] __dump_stack+0x21/0x24 [ 91.512897][ T3354] dump_stack_lvl+0x110/0x170 [ 91.517587][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 91.522626][ T3354] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 91.528103][ T3354] dump_stack+0x15/0x24 [ 91.532272][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 91.537847][ T3354] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 91.543342][ T3354] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 91.548823][ T3354] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 91.555002][ T3354] f2fs_do_truncate_blocks+0x645/0xc70 [ 91.560482][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 91.566481][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 91.571784][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 91.576993][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 91.581618][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 91.586998][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 91.591855][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 91.597578][ T3354] ? __switch_to_asm+0x3a/0x60 [ 91.602360][ T3354] ? __schedule+0xbae/0x1500 [ 91.606989][ T3354] ? plist_add+0x3e8/0x470 [ 91.611425][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 91.616376][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 91.621065][ T3354] ? security_file_permission+0x8a/0xb0 [ 91.626621][ T3354] do_iter_write+0x665/0xb40 [ 91.631219][ T3354] ? _copy_from_user+0x8f/0xc0 [ 91.635999][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 91.640946][ T3354] ? import_iovec+0x7c/0xb0 [ 91.645487][ T3354] vfs_writev+0x339/0x5f0 [ 91.649832][ T3354] ? do_writev+0x2c0/0x2c0 [ 91.654281][ T3354] ? __fdget+0x19c/0x220 [ 91.658530][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 91.663563][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 91.668675][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 91.673700][ T3354] ? __kasan_check_write+0x14/0x20 [ 91.678899][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 91.684536][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 91.689395][ T3354] x64_sys_call+0x2d6/0x9a0 [ 91.693902][ T3354] do_syscall_64+0x4c/0xa0 [ 91.698321][ T3354] ? clear_bhb_loop+0x30/0x80 [ 91.703001][ T3354] ? clear_bhb_loop+0x30/0x80 [ 91.707683][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.710128][ T3453] bio_check_eod: 2 callbacks suppressed [ 91.710140][ T3453] syz.7.1217: attempt to access beyond end of device [ 91.710140][ T3453] loop7: rw=2049, sector=53248, nr_sectors = 24576 limit=40427 [ 91.713590][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 91.713606][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.713622][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 91.765705][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 91.772520][ T3453] syz.7.1217: attempt to access beyond end of device [ 91.772520][ T3453] loop7: rw=2049, sector=81920, nr_sectors = 7920 limit=40427 [ 91.773682][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 91.773697][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 91.803638][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 91.811610][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 91.819589][ T3354] [ 91.841356][ T3310] syz-executor: attempt to access beyond end of device [ 91.841356][ T3310] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.849518][ T3354] F2FS-fs (loop4): access invalid blkaddr:36 [ 91.861640][ T10] kworker/u4:1: attempt to access beyond end of device [ 91.861640][ T10] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 91.875931][ T3354] CPU: 0 PID: 3354 Comm: syz.4.1181 Not tainted syzkaller #0 [ 91.883309][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 91.893359][ T3354] Call Trace: [ 91.896632][ T3354] [ 91.899558][ T3354] __dump_stack+0x21/0x24 [ 91.903977][ T3354] dump_stack_lvl+0x110/0x170 [ 91.908654][ T3354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 91.913679][ T3354] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 91.919584][ T3354] ? f2fs_lookup_read_extent_cache_block+0x3b2/0x460 [ 91.926271][ T3354] dump_stack+0x15/0x24 [ 91.930433][ T3354] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 91.935981][ T3354] f2fs_is_valid_blkaddr+0x23/0x30 [ 91.941108][ T3354] f2fs_get_read_data_page+0x4ef/0x850 [ 91.946569][ T3354] ? __cfi_f2fs_get_read_data_page+0x10/0x10 [ 91.952548][ T3354] ? __kasan_check_write+0x14/0x20 [ 91.957659][ T3354] f2fs_get_lock_data_page+0x55/0x1e0 [ 91.963031][ T3354] ? f2fs_do_truncate_blocks+0x932/0xc70 [ 91.968679][ T3354] f2fs_do_truncate_blocks+0x1d1/0xc70 [ 91.974145][ T3354] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 91.980132][ T3354] ? rwsem_write_trylock+0x136/0x300 [ 91.985429][ T3354] f2fs_truncate_blocks+0x10e/0x310 [ 91.990633][ T3354] f2fs_truncate+0x1d7/0x3d0 [ 91.995239][ T3354] f2fs_file_write_iter+0x12d0/0x2610 [ 92.000612][ T3354] ? _raw_spin_unlock+0x4c/0x70 [ 92.005462][ T3354] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 92.011278][ T3354] ? __switch_to_asm+0x3a/0x60 [ 92.016140][ T3354] ? __schedule+0xbae/0x1500 [ 92.020741][ T3354] ? plist_add+0x3e8/0x470 [ 92.025163][ T3354] ? avc_policy_seqno+0x1b/0x70 [ 92.030024][ T3354] ? fsnotify_perm+0x67/0x5b0 [ 92.031489][ T3464] loop1: detected capacity change from 0 to 40427 [ 92.034697][ T3354] ? security_file_permission+0x8a/0xb0 [ 92.046785][ T3354] do_iter_write+0x665/0xb40 [ 92.051475][ T3354] ? _copy_from_user+0x8f/0xc0 [ 92.056259][ T3354] ? vfs_iter_write+0xa0/0xa0 [ 92.061112][ T3354] ? import_iovec+0x7c/0xb0 [ 92.065620][ T3354] vfs_writev+0x339/0x5f0 [ 92.069948][ T3354] ? do_writev+0x2c0/0x2c0 [ 92.074367][ T3354] ? __fdget+0x19c/0x220 [ 92.078605][ T3354] ? __se_sys_pwritev2+0xb4/0x2b0 [ 92.083626][ T3354] __se_sys_pwritev2+0x1af/0x2b0 [ 92.088562][ T3354] ? __x64_sys_pwritev2+0xd0/0xd0 [ 92.093582][ T3354] ? __kasan_check_write+0x14/0x20 [ 92.098690][ T3354] ? fpregs_restore_userregs+0x128/0x260 [ 92.104325][ T3354] __x64_sys_pwritev2+0xbf/0xd0 [ 92.109175][ T3354] x64_sys_call+0x2d6/0x9a0 [ 92.113680][ T3354] do_syscall_64+0x4c/0xa0 [ 92.118101][ T3354] ? clear_bhb_loop+0x30/0x80 [ 92.122776][ T3354] ? clear_bhb_loop+0x30/0x80 [ 92.127447][ T3354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.133449][ T3354] RIP: 0033:0x7fdc0bf9af79 [ 92.137878][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.152449][ T3464] F2FS-fs (loop1): invalid crc value [ 92.157568][ T3354] RSP: 002b:00007fdc0cde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 92.157593][ T3354] RAX: ffffffffffffffda RBX: 00007fdc0c215fa0 RCX: 00007fdc0bf9af79 [ 92.179209][ T3354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 92.187179][ T3354] RBP: 00007fdc0c0316e0 R08: 0000000000000000 R09: 0000000000000000 [ 92.195138][ T3354] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 92.203101][ T3354] R13: 00007fdc0c216038 R14: 00007fdc0c215fa0 R15: 00007ffebb7b62d8 [ 92.211080][ T3354] [ 92.237588][ T3464] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.348693][ T3464] F2FS-fs (loop1): Start checkpoint disabled! [ 92.365437][ T3464] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 92.374120][ T3464] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 92.378512][ T3471] loop2: detected capacity change from 0 to 1024 [ 92.485749][ T3465] loop5: detected capacity change from 0 to 131072 [ 92.501501][ T3465] F2FS-fs (loop5): Test dummy encryption mode enabled [ 92.521941][ T3465] F2FS-fs (loop5): invalid crc value [ 92.527359][ T3464] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 92.566571][ T3479] loop7: detected capacity change from 0 to 512 [ 92.576984][ T3465] F2FS-fs (loop5): Found nat_bits in checkpoint [ 92.627370][ T3479] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.645512][ T1143] kworker/u4:6: attempt to access beyond end of device [ 92.645512][ T1143] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.731263][ T3465] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 92.751562][ T28] audit: type=1400 audit(1770634379.240:1259): avc: denied { name_bind } for pid=3489 comm="syz.2.1228" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 92.810204][ T28] audit: type=1400 audit(1770634379.290:1260): avc: denied { create } for pid=3496 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.875186][ T3503] loop2: detected capacity change from 0 to 512 [ 92.881346][ T28] audit: type=1400 audit(1770634379.290:1261): avc: denied { getopt } for pid=3496 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.903528][ T3503] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.932925][ T3503] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1232: inode has both inline data and extents flags [ 92.961435][ T3503] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1232: couldn't read orphan inode 15 (err -117) [ 93.020877][ T3503] syz.2.1232 (pid 3503) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 93.031382][ T518] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.078409][ T287] EXT4-fs unmount: 32 callbacks suppressed [ 93.078426][ T287] EXT4-fs (loop2): unmounting filesystem. [ 93.205985][ T3518] loop2: detected capacity change from 0 to 128 [ 93.239463][ T518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.251089][ T3518] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 93.258795][ T518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.273208][ T518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.299488][ T518] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.309525][ T518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.330132][ T518] usb 5-1: config 0 descriptor?? [ 93.460645][ T3538] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.1246: inode has both inline data and extents flags [ 93.495514][ T3538] EXT4-fs (loop2): get root inode failed [ 93.501470][ T3538] EXT4-fs (loop2): mount failed [ 93.501657][ T3506] F2FS-fs (loop1): invalid crc value [ 93.553106][ T3506] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 704461755581925) [ 93.600869][ T3506] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.631066][ T3506] F2FS-fs (loop1): access invalid blkaddr:1803188595 [ 93.637913][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 93.645388][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 93.655449][ T3506] Call Trace: [ 93.658717][ T3506] [ 93.661635][ T3506] __dump_stack+0x21/0x24 [ 93.665982][ T3506] dump_stack_lvl+0x110/0x170 [ 93.670839][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 93.675890][ T3506] ? f2fs_map_lock+0xc4/0x2d0 [ 93.680579][ T3506] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 93.686481][ T3506] dump_stack+0x15/0x24 [ 93.690745][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 93.696312][ T3506] f2fs_is_valid_blkaddr+0x23/0x30 [ 93.701444][ T3506] f2fs_map_blocks+0xd43/0x3ba0 [ 93.706315][ T3506] ? _raw_spin_unlock+0x4c/0x70 [ 93.711169][ T3506] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 93.716565][ T3506] ? __file_update_time+0x250/0x270 [ 93.721780][ T3506] ? file_modified_flags+0x390/0x440 [ 93.727058][ T3506] ? fault_in_readable+0xf3/0x150 [ 93.732313][ T3506] f2fs_file_write_iter+0x14d3/0x2610 [ 93.737752][ T3506] ? __kasan_check_write+0x14/0x20 [ 93.742879][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 93.748652][ T3506] ? __switch_to_asm+0x3a/0x60 [ 93.753434][ T3506] ? __schedule+0xbae/0x1500 [ 93.758043][ T3506] ? plist_add+0x3e8/0x470 [ 93.762482][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 93.765344][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.767353][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 93.779400][ T3506] ? security_file_permission+0x8a/0xb0 [ 93.781342][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.785058][ T3506] do_iter_write+0x665/0xb40 [ 93.785088][ T3506] ? _copy_from_user+0x8f/0xc0 [ 93.797678][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.801949][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 93.801979][ T3506] ? import_iovec+0x7c/0xb0 [ 93.809442][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.813991][ T3506] vfs_writev+0x339/0x5f0 [ 93.814024][ T3506] ? do_writev+0x2c0/0x2c0 [ 93.818542][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.825878][ T3506] ? __fdget+0x19c/0x220 [ 93.825907][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 93.825926][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 93.825945][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 93.830342][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.834649][ T3506] ? __kasan_check_write+0x14/0x20 [ 93.834674][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 93.834694][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 93.834713][ T3506] x64_sys_call+0x2d6/0x9a0 [ 93.834732][ T3506] do_syscall_64+0x4c/0xa0 [ 93.842244][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.846342][ T3506] ? clear_bhb_loop+0x30/0x80 [ 93.851429][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.856373][ T3506] ? clear_bhb_loop+0x30/0x80 [ 93.856404][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.861530][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.868766][ T3506] RIP: 0033:0x7f90b779af79 [ 93.873953][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.879467][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.884420][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.888761][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 [ 93.893193][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.900501][ T3506] ORIG_RAX: 0000000000000148 [ 93.900510][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 93.900525][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 93.905300][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.912581][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 93.912595][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 93.917401][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.923193][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 93.923214][ T3506] [ 93.930599][ T518] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 93.962526][ T3506] F2FS-fs (loop1): access invalid blkaddr:1803188595 [ 93.977442][ T518] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 94.004067][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 94.047844][ T518] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 94.053044][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 94.053057][ T3506] Call Trace: [ 94.053062][ T3506] [ 94.053069][ T3506] __dump_stack+0x21/0x24 [ 94.053094][ T3506] dump_stack_lvl+0x110/0x170 [ 94.053114][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 94.063363][ T518] usb 5-1: USB disconnect, device number 7 [ 94.067464][ T3506] ? __kasan_check_write+0x14/0x20 [ 94.128656][ T3506] ? f2fs_dirty_node_folio+0x220/0x330 [ 94.134315][ T3506] dump_stack+0x15/0x24 [ 94.138490][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 94.144058][ T3506] ? f2fs_set_data_blkaddr+0x28b/0x3d0 [ 94.149529][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 94.155101][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 94.161302][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 94.166790][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 94.172883][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 94.178195][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 94.183422][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 94.188051][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 94.193446][ T3506] ? __kasan_check_write+0x14/0x20 [ 94.198576][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 94.204311][ T3506] ? __switch_to_asm+0x3a/0x60 [ 94.209103][ T3506] ? __schedule+0xbae/0x1500 [ 94.213786][ T3506] ? plist_add+0x3e8/0x470 [ 94.218229][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 94.223169][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 94.227841][ T3506] ? security_file_permission+0x8a/0xb0 [ 94.233384][ T3506] do_iter_write+0x665/0xb40 [ 94.237961][ T3506] ? _copy_from_user+0x8f/0xc0 [ 94.242801][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 94.247464][ T3506] ? import_iovec+0x7c/0xb0 [ 94.252028][ T3506] vfs_writev+0x339/0x5f0 [ 94.256362][ T3506] ? do_writev+0x2c0/0x2c0 [ 94.260770][ T3506] ? __fdget+0x19c/0x220 [ 94.264998][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 94.270016][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 94.274946][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 94.279973][ T3506] ? __kasan_check_write+0x14/0x20 [ 94.285077][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 94.290806][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 94.295836][ T3506] x64_sys_call+0x2d6/0x9a0 [ 94.300331][ T3506] do_syscall_64+0x4c/0xa0 [ 94.304739][ T3506] ? clear_bhb_loop+0x30/0x80 [ 94.309411][ T3506] ? clear_bhb_loop+0x30/0x80 [ 94.314075][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.320051][ T3506] RIP: 0033:0x7f90b779af79 [ 94.324457][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.344576][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 94.352991][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 94.360958][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 94.369009][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 94.376978][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 94.384947][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 94.392918][ T3506] [ 94.409215][ T3506] F2FS-fs (loop1): access invalid blkaddr:1701604449 [ 94.417224][ T3563] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1263: inode has both inline data and extents flags [ 94.419771][ T3569] fido_id[3569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 94.445827][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 94.449903][ T3563] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1263: couldn't read orphan inode 15 (err -117) [ 94.453207][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 94.453219][ T3506] Call Trace: [ 94.453225][ T3506] [ 94.453231][ T3506] __dump_stack+0x21/0x24 [ 94.465423][ T3563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.475069][ T3506] dump_stack_lvl+0x110/0x170 [ 94.475099][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 94.504169][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 94.509657][ T3506] dump_stack+0x15/0x24 [ 94.513817][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 94.519364][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 94.524917][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 94.530392][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 94.536652][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 94.542127][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 94.548128][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 94.553429][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 94.558641][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 94.563254][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 94.568731][ T3506] ? __kasan_check_write+0x14/0x20 [ 94.573857][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 94.579591][ T3506] ? __switch_to_asm+0x3a/0x60 [ 94.584373][ T3506] ? __schedule+0xbae/0x1500 [ 94.589013][ T3506] ? plist_add+0x3e8/0x470 [ 94.593449][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 94.598332][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 94.603025][ T3506] ? security_file_permission+0x8a/0xb0 [ 94.608593][ T3506] do_iter_write+0x665/0xb40 [ 94.613194][ T3506] ? _copy_from_user+0x8f/0xc0 [ 94.617981][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 94.622673][ T3506] ? import_iovec+0x7c/0xb0 [ 94.627201][ T3506] vfs_writev+0x339/0x5f0 [ 94.631847][ T3506] ? do_writev+0x2c0/0x2c0 [ 94.636390][ T3506] ? __fdget+0x19c/0x220 [ 94.640640][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 94.645687][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 94.651102][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 94.656166][ T3506] ? __kasan_check_write+0x14/0x20 [ 94.661436][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 94.667349][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 94.673189][ T3506] x64_sys_call+0x2d6/0x9a0 [ 94.677853][ T3506] do_syscall_64+0x4c/0xa0 [ 94.682483][ T3506] ? clear_bhb_loop+0x30/0x80 [ 94.687705][ T3506] ? clear_bhb_loop+0x30/0x80 [ 94.692467][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.698656][ T3506] RIP: 0033:0x7f90b779af79 [ 94.703186][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.723076][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 94.731505][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 94.739573][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 94.747546][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 94.755521][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 94.763497][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 94.771477][ T3506] [ 94.776019][ T287] EXT4-fs (loop2): unmounting filesystem. [ 94.782138][ T3506] F2FS-fs (loop1): access invalid blkaddr:29554 [ 94.788587][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 94.795965][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 94.806109][ T3506] Call Trace: [ 94.809466][ T3506] [ 94.812384][ T3506] __dump_stack+0x21/0x24 [ 94.816737][ T3506] dump_stack_lvl+0x110/0x170 [ 94.821429][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 94.826445][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 94.831903][ T3506] dump_stack+0x15/0x24 [ 94.836050][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 94.841589][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 94.847049][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 94.852496][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 94.858644][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 94.864093][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 94.870165][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 94.875451][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 94.880642][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 94.885238][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 94.890598][ T3506] ? __kasan_check_write+0x14/0x20 [ 94.895780][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 94.901751][ T3506] ? __switch_to_asm+0x3a/0x60 [ 94.906803][ T3506] ? __schedule+0xbae/0x1500 [ 94.911799][ T3506] ? plist_add+0x3e8/0x470 [ 94.916345][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 94.921487][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 94.926277][ T3506] ? security_file_permission+0x8a/0xb0 [ 94.932469][ T3506] do_iter_write+0x665/0xb40 [ 94.937168][ T3506] ? _copy_from_user+0x8f/0xc0 [ 94.942045][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 94.946716][ T3506] ? import_iovec+0x7c/0xb0 [ 94.951219][ T3506] vfs_writev+0x339/0x5f0 [ 94.955736][ T3506] ? do_writev+0x2c0/0x2c0 [ 94.960184][ T3506] ? __fdget+0x19c/0x220 [ 94.964689][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 94.969793][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 94.975365][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 94.980501][ T3506] ? __kasan_check_write+0x14/0x20 [ 94.985807][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 94.991668][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 94.996646][ T3506] x64_sys_call+0x2d6/0x9a0 [ 95.001162][ T3506] do_syscall_64+0x4c/0xa0 [ 95.005593][ T3506] ? clear_bhb_loop+0x30/0x80 [ 95.010276][ T3506] ? clear_bhb_loop+0x30/0x80 [ 95.014963][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.020865][ T3506] RIP: 0033:0x7f90b779af79 [ 95.025561][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.045352][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 95.053781][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 95.061742][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 95.069784][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 95.077738][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 95.085692][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 95.093653][ T3506] [ 95.099742][ T3506] F2FS-fs (loop1): access invalid blkaddr:4076150801 [ 95.106666][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 95.114486][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 95.124848][ T3506] Call Trace: [ 95.128245][ T3506] [ 95.131188][ T3506] __dump_stack+0x21/0x24 [ 95.135976][ T3506] dump_stack_lvl+0x110/0x170 [ 95.140823][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 95.145881][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 95.151460][ T3506] dump_stack+0x15/0x24 [ 95.155638][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 95.161377][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 95.166832][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 95.172282][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 95.178526][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 95.183979][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 95.189962][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 95.195238][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 95.200425][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 95.205003][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 95.210358][ T3506] ? __kasan_check_write+0x14/0x20 [ 95.215464][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 95.221166][ T3506] ? __switch_to_asm+0x3a/0x60 [ 95.225921][ T3506] ? __schedule+0xbae/0x1500 [ 95.230499][ T3506] ? plist_add+0x3e8/0x470 [ 95.234911][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 95.239752][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 95.244411][ T3506] ? security_file_permission+0x8a/0xb0 [ 95.249944][ T3506] do_iter_write+0x665/0xb40 [ 95.254517][ T3506] ? _copy_from_user+0x8f/0xc0 [ 95.259269][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 95.264001][ T3506] ? import_iovec+0x7c/0xb0 [ 95.268539][ T3506] vfs_writev+0x339/0x5f0 [ 95.272889][ T3506] ? do_writev+0x2c0/0x2c0 [ 95.277307][ T3506] ? __fdget+0x19c/0x220 [ 95.281710][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 95.286838][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 95.291815][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 95.296946][ T3506] ? __kasan_check_write+0x14/0x20 [ 95.302154][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 95.307975][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 95.312868][ T3506] x64_sys_call+0x2d6/0x9a0 [ 95.317396][ T3506] do_syscall_64+0x4c/0xa0 [ 95.321912][ T3506] ? clear_bhb_loop+0x30/0x80 [ 95.326577][ T3506] ? clear_bhb_loop+0x30/0x80 [ 95.331325][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.337209][ T3506] RIP: 0033:0x7f90b779af79 [ 95.341609][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.361196][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 95.369598][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 95.377553][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 95.385609][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 95.393560][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 95.401515][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 95.409472][ T3506] [ 95.423013][ T3506] F2FS-fs (loop1): access invalid blkaddr:1 [ 95.429134][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 95.436523][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 95.446780][ T3506] Call Trace: [ 95.450067][ T3506] [ 95.453030][ T3506] __dump_stack+0x21/0x24 [ 95.457467][ T3506] dump_stack_lvl+0x110/0x170 [ 95.462162][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 95.467206][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 95.472681][ T3506] dump_stack+0x15/0x24 [ 95.476863][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 95.482429][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 95.487913][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 95.489677][ T3589] set_capacity_and_notify: 3 callbacks suppressed [ 95.489694][ T3589] loop2: detected capacity change from 0 to 512 [ 95.493397][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 95.493435][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 95.517666][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 95.523695][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 95.529056][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 95.532979][ T3589] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.534332][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 95.543496][ T3589] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.547731][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 95.547764][ T3506] ? __kasan_check_write+0x14/0x20 [ 95.568594][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 95.574418][ T3506] ? __switch_to_asm+0x3a/0x60 [ 95.579313][ T3506] ? __schedule+0xbae/0x1500 [ 95.583931][ T3506] ? plist_add+0x3e8/0x470 [ 95.588375][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 95.593261][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 95.598046][ T3506] ? security_file_permission+0x8a/0xb0 [ 95.603592][ T3506] do_iter_write+0x665/0xb40 [ 95.608171][ T3506] ? _copy_from_user+0x8f/0xc0 [ 95.612929][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 95.617594][ T3506] ? import_iovec+0x7c/0xb0 [ 95.622116][ T3506] vfs_writev+0x339/0x5f0 [ 95.626431][ T3506] ? do_writev+0x2c0/0x2c0 [ 95.630833][ T3506] ? __fdget+0x19c/0x220 [ 95.635061][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 95.640166][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 95.645203][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 95.650216][ T3506] ? __kasan_check_write+0x14/0x20 [ 95.655315][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 95.660937][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 95.665772][ T3506] x64_sys_call+0x2d6/0x9a0 [ 95.670264][ T3506] do_syscall_64+0x4c/0xa0 [ 95.674763][ T3506] ? clear_bhb_loop+0x30/0x80 [ 95.679424][ T3506] ? clear_bhb_loop+0x30/0x80 [ 95.684086][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.689992][ T3506] RIP: 0033:0x7f90b779af79 [ 95.694392][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.714073][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 95.722567][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 95.730520][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 95.738650][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 95.746607][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 95.754561][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 95.762521][ T3506] [ 95.766324][ T3506] F2FS-fs (loop1): access invalid blkaddr:2147878401 [ 95.773437][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 95.778789][ T287] EXT4-fs (loop2): unmounting filesystem. [ 95.780813][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 95.796555][ T3506] Call Trace: [ 95.799836][ T3506] [ 95.802764][ T3506] __dump_stack+0x21/0x24 [ 95.807113][ T3506] dump_stack_lvl+0x110/0x170 [ 95.811779][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 95.816800][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 95.822251][ T3506] dump_stack+0x15/0x24 [ 95.826480][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 95.832014][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 95.837461][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 95.843015][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 95.849168][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 95.854613][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 95.860577][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 95.865852][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 95.871052][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 95.875640][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 95.880996][ T3506] ? __kasan_check_write+0x14/0x20 [ 95.886202][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 95.891900][ T3506] ? __switch_to_asm+0x3a/0x60 [ 95.896695][ T3506] ? __schedule+0xbae/0x1500 [ 95.901271][ T3506] ? plist_add+0x3e8/0x470 [ 95.905671][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 95.910594][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 95.915257][ T3506] ? security_file_permission+0x8a/0xb0 [ 95.920823][ T3506] do_iter_write+0x665/0xb40 [ 95.925410][ T3506] ? _copy_from_user+0x8f/0xc0 [ 95.930162][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 95.934839][ T3506] ? import_iovec+0x7c/0xb0 [ 95.939342][ T3506] vfs_writev+0x339/0x5f0 [ 95.943674][ T3506] ? do_writev+0x2c0/0x2c0 [ 95.948096][ T3506] ? __fdget+0x19c/0x220 [ 95.952317][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 95.957321][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 95.962242][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 95.967250][ T3506] ? __kasan_check_write+0x14/0x20 [ 95.972339][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 95.977956][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 95.982794][ T3506] x64_sys_call+0x2d6/0x9a0 [ 95.987284][ T3506] do_syscall_64+0x4c/0xa0 [ 95.991689][ T3506] ? clear_bhb_loop+0x30/0x80 [ 95.996347][ T3506] ? clear_bhb_loop+0x30/0x80 [ 96.001003][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.006879][ T3506] RIP: 0033:0x7f90b779af79 [ 96.011271][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.030858][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 96.039252][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 96.047294][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 96.055254][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 96.063217][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 96.071174][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 96.079148][ T3506] [ 96.082718][ T3506] F2FS-fs (loop1): access invalid blkaddr:1953784319 [ 96.090490][ T3506] CPU: 1 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 96.097893][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 96.107958][ T3506] Call Trace: [ 96.111239][ T3506] [ 96.114183][ T3506] __dump_stack+0x21/0x24 [ 96.118627][ T3506] dump_stack_lvl+0x110/0x170 [ 96.123319][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 96.128358][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 96.133926][ T3506] dump_stack+0x15/0x24 [ 96.138101][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 96.143672][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 96.149150][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 96.154658][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 96.160849][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 96.166331][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 96.171585][ T28] audit: type=1400 audit(1770634382.590:1262): avc: denied { create } for pid=3596 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 96.172331][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 96.197270][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 96.202494][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 96.207105][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 96.212675][ T3506] ? __kasan_check_write+0x14/0x20 [ 96.217809][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 96.220180][ T28] audit: type=1400 audit(1770634382.590:1263): avc: denied { sys_admin } for pid=3596 comm="syz.2.1266" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 96.223550][ T3506] ? __switch_to_asm+0x3a/0x60 [ 96.223576][ T3506] ? __schedule+0xbae/0x1500 [ 96.223601][ T3506] ? plist_add+0x3e8/0x470 [ 96.258406][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 96.263277][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 96.267966][ T3506] ? security_file_permission+0x8a/0xb0 [ 96.273525][ T3506] do_iter_write+0x665/0xb40 [ 96.278118][ T3506] ? _copy_from_user+0x8f/0xc0 [ 96.283074][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 96.287864][ T3506] ? import_iovec+0x7c/0xb0 [ 96.292373][ T3506] vfs_writev+0x339/0x5f0 [ 96.296701][ T3506] ? do_writev+0x2c0/0x2c0 [ 96.301108][ T3506] ? __fdget+0x19c/0x220 [ 96.305339][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 96.310345][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 96.315262][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 96.320268][ T3506] ? __kasan_check_write+0x14/0x20 [ 96.325361][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 96.330990][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 96.335846][ T3506] x64_sys_call+0x2d6/0x9a0 [ 96.340502][ T3506] do_syscall_64+0x4c/0xa0 [ 96.344908][ T3506] ? clear_bhb_loop+0x30/0x80 [ 96.349572][ T3506] ? clear_bhb_loop+0x30/0x80 [ 96.354244][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.360142][ T3506] RIP: 0033:0x7f90b779af79 [ 96.364549][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.384149][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 96.392550][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 96.400506][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 96.408470][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 96.416532][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 96.424496][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 96.432671][ T3506] [ 96.457706][ T3506] F2FS-fs (loop1): access invalid blkaddr:1635266930 [ 96.465712][ T3506] CPU: 1 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 96.473104][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 96.483164][ T3506] Call Trace: [ 96.486449][ T3506] [ 96.489391][ T3506] __dump_stack+0x21/0x24 [ 96.493737][ T3506] dump_stack_lvl+0x110/0x170 [ 96.498430][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 96.503463][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 96.508937][ T3506] dump_stack+0x15/0x24 [ 96.513100][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 96.518654][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 96.524121][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 96.529624][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 96.535788][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 96.541265][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 96.547264][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 96.552576][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 96.557805][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 96.562510][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 96.567896][ T3506] ? __kasan_check_write+0x14/0x20 [ 96.573279][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 96.579017][ T3506] ? __switch_to_asm+0x3a/0x60 [ 96.583811][ T3506] ? __schedule+0xbae/0x1500 [ 96.588427][ T3506] ? plist_add+0x3e8/0x470 [ 96.592875][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 96.597902][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 96.602662][ T3506] ? security_file_permission+0x8a/0xb0 [ 96.608376][ T3506] do_iter_write+0x665/0xb40 [ 96.612954][ T3506] ? _copy_from_user+0x8f/0xc0 [ 96.617705][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 96.622366][ T3506] ? import_iovec+0x7c/0xb0 [ 96.626863][ T3506] vfs_writev+0x339/0x5f0 [ 96.631191][ T3506] ? do_writev+0x2c0/0x2c0 [ 96.635606][ T3506] ? __fdget+0x19c/0x220 [ 96.639844][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 96.644870][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 96.649803][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 96.654831][ T3506] ? __kasan_check_write+0x14/0x20 [ 96.659929][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 96.665636][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 96.670476][ T3506] x64_sys_call+0x2d6/0x9a0 [ 96.674984][ T3506] do_syscall_64+0x4c/0xa0 [ 96.679392][ T3506] ? clear_bhb_loop+0x30/0x80 [ 96.684056][ T3506] ? clear_bhb_loop+0x30/0x80 [ 96.688717][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.694601][ T3506] RIP: 0033:0x7f90b779af79 [ 96.699003][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.718610][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 96.727012][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 96.734975][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 96.742933][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 96.750888][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 96.758842][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 96.766805][ T3506] [ 96.770552][ T3506] F2FS-fs (loop1): access invalid blkaddr:829584500 [ 96.777225][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 96.784600][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 96.794752][ T3506] Call Trace: [ 96.798032][ T3506] [ 96.801123][ T3506] __dump_stack+0x21/0x24 [ 96.805446][ T3506] dump_stack_lvl+0x110/0x170 [ 96.810206][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 96.815214][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 96.820667][ T3506] dump_stack+0x15/0x24 [ 96.824904][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 96.830525][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 96.835970][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 96.841503][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 96.847650][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 96.853097][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 96.859154][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 96.864432][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 96.869622][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 96.874206][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 96.879571][ T3506] ? __kasan_check_write+0x14/0x20 [ 96.884667][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 96.890366][ T3506] ? __switch_to_asm+0x3a/0x60 [ 96.895115][ T3506] ? __schedule+0xbae/0x1500 [ 96.899877][ T3506] ? plist_add+0x3e8/0x470 [ 96.904298][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 96.909158][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 96.913830][ T3506] ? security_file_permission+0x8a/0xb0 [ 96.919373][ T3506] do_iter_write+0x665/0xb40 [ 96.923948][ T3506] ? _copy_from_user+0x8f/0xc0 [ 96.928708][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 96.933373][ T3506] ? import_iovec+0x7c/0xb0 [ 96.937885][ T3506] vfs_writev+0x339/0x5f0 [ 96.942217][ T3506] ? do_writev+0x2c0/0x2c0 [ 96.946633][ T3506] ? __fdget+0x19c/0x220 [ 96.950866][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 96.955879][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 96.960807][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 96.965828][ T3506] ? __kasan_check_write+0x14/0x20 [ 96.971106][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 96.976728][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 96.981649][ T3506] x64_sys_call+0x2d6/0x9a0 [ 96.986232][ T3506] do_syscall_64+0x4c/0xa0 [ 96.990635][ T3506] ? clear_bhb_loop+0x30/0x80 [ 96.995557][ T3506] ? clear_bhb_loop+0x30/0x80 [ 97.000240][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.006143][ T3506] RIP: 0033:0x7f90b779af79 [ 97.010546][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.030137][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 97.038742][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 97.046714][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 97.054677][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 97.062725][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 97.070684][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 97.078648][ T3506] [ 97.085052][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 97.166745][ T3506] F2FS-fs (loop1): access invalid blkaddr:394753 [ 97.178050][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 97.185558][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 97.195621][ T3506] Call Trace: [ 97.198905][ T3506] [ 97.201858][ T3506] __dump_stack+0x21/0x24 [ 97.206639][ T3506] dump_stack_lvl+0x110/0x170 [ 97.211341][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 97.216378][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 97.221849][ T3506] dump_stack+0x15/0x24 [ 97.226014][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 97.231569][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 97.237039][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 97.242517][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 97.248692][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 97.254178][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 97.260176][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 97.265477][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 97.270866][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 97.275474][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 97.280941][ T3506] ? __kasan_check_write+0x14/0x20 [ 97.286066][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 97.292152][ T3506] ? __switch_to_asm+0x3a/0x60 [ 97.296944][ T3506] ? __schedule+0xbae/0x1500 [ 97.301565][ T3506] ? plist_add+0x3e8/0x470 [ 97.306009][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 97.310977][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 97.315767][ T3506] ? security_file_permission+0x8a/0xb0 [ 97.321354][ T3506] do_iter_write+0x665/0xb40 [ 97.326076][ T3506] ? _copy_from_user+0x8f/0xc0 [ 97.330867][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 97.335555][ T3506] ? import_iovec+0x7c/0xb0 [ 97.340072][ T3506] vfs_writev+0x339/0x5f0 [ 97.344397][ T3506] ? do_writev+0x2c0/0x2c0 [ 97.348802][ T3506] ? __fdget+0x19c/0x220 [ 97.353026][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 97.358033][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 97.362957][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 97.367984][ T3506] ? __kasan_check_write+0x14/0x20 [ 97.373267][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 97.378895][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 97.383831][ T3506] x64_sys_call+0x2d6/0x9a0 [ 97.388420][ T3506] do_syscall_64+0x4c/0xa0 [ 97.392829][ T3506] ? clear_bhb_loop+0x30/0x80 [ 97.397664][ T3506] ? clear_bhb_loop+0x30/0x80 [ 97.402335][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.408307][ T3506] RIP: 0033:0x7f90b779af79 [ 97.412721][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.433621][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 97.442034][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 97.449987][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 97.458026][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 97.466071][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 97.474039][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 97.482099][ T3506] [ 97.485658][ T3506] F2FS-fs (loop1): access invalid blkaddr:1953784184 [ 97.492530][ T3506] CPU: 1 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 97.500171][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 97.510229][ T3506] Call Trace: [ 97.513494][ T3506] [ 97.516405][ T3506] __dump_stack+0x21/0x24 [ 97.520732][ T3506] dump_stack_lvl+0x110/0x170 [ 97.525425][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 97.530436][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 97.535879][ T3506] dump_stack+0x15/0x24 [ 97.540017][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 97.545545][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 97.550983][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 97.556441][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 97.562776][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 97.568232][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 97.574198][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 97.579484][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 97.582388][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.584675][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 97.595667][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.600113][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 97.610872][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.615343][ T3506] ? __kasan_check_write+0x14/0x20 [ 97.615368][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 97.615385][ T3506] ? __switch_to_asm+0x3a/0x60 [ 97.628576][ T19] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.633288][ T3506] ? __schedule+0xbae/0x1500 [ 97.633316][ T3506] ? plist_add+0x3e8/0x470 [ 97.639312][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.643809][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 97.643842][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 97.643862][ T3506] ? security_file_permission+0x8a/0xb0 [ 97.643884][ T3506] do_iter_write+0x665/0xb40 [ 97.657609][ T19] usb 3-1: config 0 descriptor?? [ 97.662144][ T3506] ? _copy_from_user+0x8f/0xc0 [ 97.662176][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 97.662195][ T3506] ? import_iovec+0x7c/0xb0 [ 97.709261][ T3506] vfs_writev+0x339/0x5f0 [ 97.713585][ T3506] ? do_writev+0x2c0/0x2c0 [ 97.717995][ T3506] ? __fdget+0x19c/0x220 [ 97.722221][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 97.727228][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 97.732148][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 97.737211][ T3506] ? __kasan_check_write+0x14/0x20 [ 97.742392][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 97.748010][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 97.752844][ T3506] x64_sys_call+0x2d6/0x9a0 [ 97.757331][ T3506] do_syscall_64+0x4c/0xa0 [ 97.761733][ T3506] ? clear_bhb_loop+0x30/0x80 [ 97.766393][ T3506] ? clear_bhb_loop+0x30/0x80 [ 97.771141][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.777019][ T3506] RIP: 0033:0x7f90b779af79 [ 97.781437][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.801051][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 97.809559][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 97.817543][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 97.825503][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 97.833459][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 97.841504][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 97.849515][ T3506] [ 97.854476][ T3506] F2FS-fs (loop1): access invalid blkaddr:1635267186 [ 97.861508][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 97.868983][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 97.879035][ T3506] Call Trace: [ 97.882400][ T3506] [ 97.885367][ T3506] __dump_stack+0x21/0x24 [ 97.889696][ T3506] dump_stack_lvl+0x110/0x170 [ 97.894366][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 97.899383][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 97.904842][ T3506] dump_stack+0x15/0x24 [ 97.908984][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 97.914516][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 97.919958][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 97.925405][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 97.931562][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 97.937027][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 97.943009][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 97.948378][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 97.953571][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 97.958148][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 97.963508][ T3506] ? __kasan_check_write+0x14/0x20 [ 97.968634][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 97.974334][ T3506] ? __switch_to_asm+0x3a/0x60 [ 97.979086][ T3506] ? __schedule+0xbae/0x1500 [ 97.983837][ T3506] ? plist_add+0x3e8/0x470 [ 97.988239][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 97.993080][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 97.997747][ T3506] ? security_file_permission+0x8a/0xb0 [ 98.003281][ T3506] do_iter_write+0x665/0xb40 [ 98.007855][ T3506] ? _copy_from_user+0x8f/0xc0 [ 98.012609][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 98.017268][ T3506] ? import_iovec+0x7c/0xb0 [ 98.021774][ T3506] vfs_writev+0x339/0x5f0 [ 98.026092][ T3506] ? do_writev+0x2c0/0x2c0 [ 98.030499][ T3506] ? __fdget+0x19c/0x220 [ 98.034724][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 98.039738][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 98.044658][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 98.049664][ T3506] ? __kasan_check_write+0x14/0x20 [ 98.054758][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 98.060373][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 98.065209][ T3506] x64_sys_call+0x2d6/0x9a0 [ 98.069702][ T3506] do_syscall_64+0x4c/0xa0 [ 98.074107][ T3506] ? clear_bhb_loop+0x30/0x80 [ 98.078762][ T3506] ? clear_bhb_loop+0x30/0x80 [ 98.083465][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.089358][ T3506] RIP: 0033:0x7f90b779af79 [ 98.093757][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.113636][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 98.122123][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 98.130165][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 98.138295][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 98.146251][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 98.154463][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 98.162433][ T3506] [ 98.167540][ T3506] F2FS-fs (loop1): access invalid blkaddr:846361716 [ 98.174650][ T3506] CPU: 0 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 98.182042][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 98.186893][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.192188][ T3506] Call Trace: [ 98.192201][ T3506] [ 98.192208][ T3506] __dump_stack+0x21/0x24 [ 98.192236][ T3506] dump_stack_lvl+0x110/0x170 [ 98.206497][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 98.210127][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 98.221654][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.222584][ T3506] ? f2fs_dirty_node_folio+0x1f5/0x330 [ 98.235958][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 98.241327][ T3506] dump_stack+0x15/0x24 [ 98.241355][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 98.258909][ T3506] ? f2fs_set_data_blkaddr+0x2ae/0x3d0 [ 98.260104][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.264376][ T3506] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 98.264405][ T3506] f2fs_truncate_data_blocks_range+0x5f4/0xed0 [ 98.275058][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.277713][ T3506] f2fs_do_truncate_blocks+0x645/0xc70 [ 98.284799][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.291634][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 98.291668][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 98.297704][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.305061][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 98.305092][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 98.311639][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.316311][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 98.347333][ T3506] ? __kasan_check_write+0x14/0x20 [ 98.352435][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 98.358132][ T3506] ? __switch_to_asm+0x3a/0x60 [ 98.362881][ T3506] ? __schedule+0xbae/0x1500 [ 98.367459][ T3506] ? plist_add+0x3e8/0x470 [ 98.372030][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 98.376862][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 98.381613][ T3506] ? security_file_permission+0x8a/0xb0 [ 98.387227][ T3506] do_iter_write+0x665/0xb40 [ 98.391795][ T3506] ? _copy_from_user+0x8f/0xc0 [ 98.396547][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 98.401211][ T3506] ? import_iovec+0x7c/0xb0 [ 98.405806][ T3506] vfs_writev+0x339/0x5f0 [ 98.410125][ T3506] ? do_writev+0x2c0/0x2c0 [ 98.414530][ T3506] ? __fdget+0x19c/0x220 [ 98.418757][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 98.423760][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 98.428679][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 98.433758][ T3506] ? __kasan_check_write+0x14/0x20 [ 98.438858][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 98.444475][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 98.449300][ T3506] x64_sys_call+0x2d6/0x9a0 [ 98.453782][ T3506] do_syscall_64+0x4c/0xa0 [ 98.458174][ T3506] ? clear_bhb_loop+0x30/0x80 [ 98.462830][ T3506] ? clear_bhb_loop+0x30/0x80 [ 98.467487][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.473454][ T3506] RIP: 0033:0x7f90b779af79 [ 98.477845][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.497515][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 98.505916][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 98.513866][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 98.521811][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 98.529787][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 98.537745][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 98.545710][ T3506] [ 98.549090][ T3506] F2FS-fs (loop1): access invalid blkaddr:36 [ 98.556654][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.559674][ T3506] CPU: 1 PID: 3506 Comm: syz.1.1234 Not tainted syzkaller #0 [ 98.565109][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.571375][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 98.571387][ T3506] Call Trace: [ 98.571393][ T3506] [ 98.571400][ T3506] __dump_stack+0x21/0x24 [ 98.571427][ T3506] dump_stack_lvl+0x110/0x170 [ 98.579181][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.588824][ T3506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 98.588851][ T3506] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 98.588874][ T3506] ? f2fs_lookup_read_extent_cache_block+0x3b2/0x460 [ 98.592403][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.595053][ T3506] dump_stack+0x15/0x24 [ 98.599461][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.604193][ T3506] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 98.604217][ T3506] f2fs_is_valid_blkaddr+0x23/0x30 [ 98.611896][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.616566][ T3506] f2fs_get_read_data_page+0x4ef/0x850 [ 98.622639][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.629076][ T3506] ? __cfi_f2fs_get_read_data_page+0x10/0x10 [ 98.636715][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.640615][ T3506] ? __kasan_check_write+0x14/0x20 [ 98.648164][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.653558][ T3506] f2fs_get_lock_data_page+0x55/0x1e0 [ 98.653580][ T3506] ? f2fs_do_truncate_blocks+0x932/0xc70 [ 98.658892][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.666009][ T3506] f2fs_do_truncate_blocks+0x1d1/0xc70 [ 98.666039][ T3506] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 98.671734][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.678989][ T3506] ? rwsem_write_trylock+0x136/0x300 [ 98.685158][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.692278][ T3506] f2fs_truncate_blocks+0x10e/0x310 [ 98.692307][ T3506] f2fs_truncate+0x1d7/0x3d0 [ 98.692330][ T3506] f2fs_file_write_iter+0x12d0/0x2610 [ 98.697670][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.704754][ T3506] ? __kasan_check_write+0x14/0x20 [ 98.704777][ T3506] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 98.710346][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.715729][ T3506] ? __switch_to_asm+0x3a/0x60 [ 98.715752][ T3506] ? __schedule+0xbae/0x1500 [ 98.723352][ T19] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 98.728529][ T3506] ? plist_add+0x3e8/0x470 [ 98.734862][ T19] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 98.741819][ T3506] ? avc_policy_seqno+0x1b/0x70 [ 98.741848][ T3506] ? fsnotify_perm+0x67/0x5b0 [ 98.748409][ T19] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 98.754494][ T3506] ? security_file_permission+0x8a/0xb0 [ 98.754524][ T3506] do_iter_write+0x665/0xb40 [ 98.754540][ T3506] ? _copy_from_user+0x8f/0xc0 [ 98.860877][ T3506] ? vfs_iter_write+0xa0/0xa0 [ 98.863836][ T6] usb 3-1: USB disconnect, device number 6 [ 98.865569][ T3506] ? import_iovec+0x7c/0xb0 [ 98.875860][ T3506] vfs_writev+0x339/0x5f0 [ 98.880216][ T3506] ? do_writev+0x2c0/0x2c0 [ 98.884646][ T3506] ? __fdget+0x19c/0x220 [ 98.888872][ T3506] ? __se_sys_pwritev2+0xb4/0x2b0 [ 98.893877][ T3506] __se_sys_pwritev2+0x1af/0x2b0 [ 98.898799][ T3506] ? __x64_sys_pwritev2+0xd0/0xd0 [ 98.903803][ T3506] ? __kasan_check_write+0x14/0x20 [ 98.908896][ T3506] ? fpregs_restore_userregs+0x128/0x260 [ 98.914556][ T3506] __x64_sys_pwritev2+0xbf/0xd0 [ 98.919393][ T3506] x64_sys_call+0x2d6/0x9a0 [ 98.923878][ T3506] do_syscall_64+0x4c/0xa0 [ 98.928272][ T3506] ? clear_bhb_loop+0x30/0x80 [ 98.932924][ T3506] ? clear_bhb_loop+0x30/0x80 [ 98.937587][ T3506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.943461][ T3506] RIP: 0033:0x7f90b779af79 [ 98.947851][ T3506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.967433][ T3506] RSP: 002b:00007f90b61f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 98.975829][ T3506] RAX: ffffffffffffffda RBX: 00007f90b7a15fa0 RCX: 00007f90b779af79 [ 98.983779][ T3506] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 98.991732][ T3506] RBP: 00007f90b78316e0 R08: 0000000000000000 R09: 0000000000000000 [ 98.999855][ T3506] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 99.007889][ T3506] R13: 00007f90b7a16038 R14: 00007f90b7a15fa0 R15: 00007ffe8280b3d8 [ 99.015843][ T3506] [ 99.175875][ T3631] process 'syz.1.1276' launched './file0' with NULL argv: empty string added [ 99.189175][ T28] audit: type=1400 audit(1770634385.670:1264): avc: denied { execute_no_trans } for pid=3630 comm="syz.1.1276" path="/252/file0" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.213116][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 99.253337][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 99.341726][ T3645] loop1: detected capacity change from 0 to 4096 [ 99.348920][ T3645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.358780][ T3645] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 99.367144][ T3645] System zones: 0-5 [ 99.372145][ T3645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.421246][ T28] audit: type=1400 audit(1770634385.900:1265): avc: denied { unlink } for pid=284 comm="syz-executor" name="file1" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.432960][ T3652] loop2: detected capacity change from 0 to 256 [ 99.445854][ T28] audit: type=1400 audit(1770634385.900:1266): avc: denied { rmdir } for pid=284 comm="syz-executor" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 99.455663][ T3652] exfat: Deprecated parameter 'utf8' [ 99.471985][ T6] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 99.481829][ T284] EXT4-fs (loop1): unmounting filesystem. [ 99.484874][ T3652] exfat: Deprecated parameter 'namecase' [ 99.496358][ T3652] exfat: Deprecated parameter 'namecase' [ 99.502083][ T3652] exfat: Deprecated parameter 'utf8' [ 99.515188][ T28] audit: type=1400 audit(1770634386.000:1267): avc: denied { setopt } for pid=3655 comm="syz.5.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.549105][ T28] audit: type=1400 audit(1770634386.020:1268): avc: denied { read } for pid=3659 comm="syz.5.1293" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.549429][ T3652] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 99.572412][ T28] audit: type=1400 audit(1770634386.020:1269): avc: denied { open } for pid=3659 comm="syz.5.1293" path="/dev/ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.586517][ T3662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3662 comm=syz.1.1289 [ 99.627181][ T28] audit: type=1400 audit(1770634386.020:1270): avc: denied { ioctl } for pid=3659 comm="syz.5.1293" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.658889][ T28] audit: type=1400 audit(1770634386.030:1271): avc: denied { create } for pid=3659 comm="syz.5.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.681738][ T6] usb 8-1: Using ep0 maxpacket: 32 [ 99.694378][ T6] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 99.701164][ T3667] loop2: detected capacity change from 0 to 512 [ 99.710215][ T6] usb 8-1: config 0 has no interface number 0 [ 99.720212][ T6] usb 8-1: config 0 interface 2 has no altsetting 0 [ 99.729355][ T3667] EXT4-fs: Invalid want_extra_isize 2 [ 99.737253][ T6] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 99.752102][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.771529][ T6] usb 8-1: Product: syz [ 99.783984][ T3669] netlink: 'syz.5.1296': attribute type 15 has an invalid length. [ 99.790979][ T6] usb 8-1: Manufacturer: syz [ 99.798842][ T6] usb 8-1: SerialNumber: syz [ 99.805084][ T3675] loop1: detected capacity change from 0 to 256 [ 99.806255][ T3669] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1296'. [ 99.819390][ T6] usb 8-1: config 0 descriptor?? [ 99.830221][ T3675] exfat: Deprecated parameter 'utf8' [ 99.841411][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 99.850151][ T3675] exfat: Deprecated parameter 'utf8' [ 99.862780][ T3675] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 99.879167][ T3682] loop5: detected capacity change from 0 to 256 [ 99.899391][ T3682] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.020085][ T3701] loop5: detected capacity change from 0 to 1024 [ 100.070650][ T3701] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 100.102074][ T3701] ================================================================== [ 100.110170][ T3701] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 [ 100.118262][ T3701] Read of size 18446744073709551612 at addr ffff8881195ef040 by task syz.5.1310/3701 [ 100.127718][ T3701] [ 100.130041][ T3701] CPU: 0 PID: 3701 Comm: syz.5.1310 Not tainted syzkaller #0 [ 100.137391][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.147427][ T3701] Call Trace: [ 100.150692][ T3701] [ 100.153607][ T3701] __dump_stack+0x21/0x24 [ 100.157941][ T3701] dump_stack_lvl+0x110/0x170 [ 100.162694][ T3701] ? __cfi_dump_stack_lvl+0x8/0x8 [ 100.167722][ T3701] ? ext4_xattr_set_entry+0x979/0x21d0 [ 100.173168][ T3701] ? ext4_xattr_set_entry+0x979/0x21d0 [ 100.178700][ T3701] print_address_description+0x71/0x200 [ 100.184318][ T3701] print_report+0x4a/0x60 [ 100.188730][ T3701] kasan_report+0x122/0x150 [ 100.193226][ T3701] ? ext4_xattr_set_entry+0x979/0x21d0 [ 100.198675][ T3701] ? ext4_xattr_set_entry+0x979/0x21d0 [ 100.204122][ T3701] kasan_check_range+0x249/0x2a0 [ 100.209051][ T3701] ? ext4_xattr_set_entry+0x979/0x21d0 [ 100.214499][ T3701] memmove+0x2d/0x70 [ 100.218378][ T3701] ext4_xattr_set_entry+0x979/0x21d0 [ 100.223651][ T3701] ext4_xattr_block_set+0xad3/0x3260 [ 100.228935][ T3701] ? __kasan_check_write+0x14/0x20 [ 100.234029][ T3701] ? iput+0x620/0x670 [ 100.237995][ T3701] ? ext4_xattr_block_find+0x310/0x310 [ 100.243443][ T3701] ext4_xattr_set_handle+0x10e8/0x12c0 [ 100.248987][ T3701] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 100.254791][ T3701] ? __kasan_check_read+0x11/0x20 [ 100.259799][ T3701] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 100.265421][ T3701] ext4_xattr_set+0x242/0x320 [ 100.270083][ T3701] ? __kasan_kmalloc+0x95/0xb0 [ 100.274835][ T3701] ? __kmalloc_node+0xb2/0x1e0 [ 100.279608][ T3701] ? __cfi_ext4_xattr_set+0x10/0x10 [ 100.284789][ T3701] ? selinux_inode_setxattr+0x5cf/0xbf0 [ 100.290348][ T3701] ext4_xattr_trusted_set+0x3c/0x50 [ 100.295535][ T3701] ? __cfi_ext4_xattr_trusted_set+0x10/0x10 [ 100.301428][ T3701] __vfs_setxattr+0x3f2/0x440 [ 100.306097][ T3701] __vfs_setxattr_noperm+0x12a/0x5e0 [ 100.311382][ T3701] __vfs_setxattr_locked+0x212/0x230 [ 100.316654][ T3701] vfs_setxattr+0x167/0x2e0 [ 100.321145][ T3701] ? __cfi_vfs_setxattr+0x10/0x10 [ 100.326213][ T3701] ? __kasan_check_write+0x14/0x20 [ 100.331309][ T3701] setxattr+0x346/0x360 [ 100.335544][ T3701] ? path_setxattr+0x290/0x290 [ 100.340908][ T3701] ? __mnt_want_write+0x1e6/0x260 [ 100.345922][ T3701] ? mnt_want_write+0x220/0x300 [ 100.350757][ T3701] path_setxattr+0x147/0x290 [ 100.355368][ T3701] ? simple_xattr_list_add+0x120/0x120 [ 100.360816][ T3701] ? __kasan_check_write+0x14/0x20 [ 100.365911][ T3701] ? fpregs_restore_userregs+0x128/0x260 [ 100.371622][ T3701] __x64_sys_lsetxattr+0xc2/0xe0 [ 100.376551][ T3701] x64_sys_call+0x8b7/0x9a0 [ 100.381041][ T3701] do_syscall_64+0x4c/0xa0 [ 100.385541][ T3701] ? clear_bhb_loop+0x30/0x80 [ 100.390228][ T3701] ? clear_bhb_loop+0x30/0x80 [ 100.394984][ T3701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.400896][ T3701] RIP: 0033:0x7f787599af79 [ 100.405337][ T3701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.425217][ T3701] RSP: 002b:00007f787693e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 100.433736][ T3701] RAX: ffffffffffffffda RBX: 00007f7875c15fa0 RCX: 00007f787599af79 [ 100.441970][ T3701] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 100.449942][ T3701] RBP: 00007f7875a316e0 R08: 0000000000000000 R09: 0000000000000000 [ 100.457901][ T3701] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 100.465859][ T3701] R13: 00007f7875c16038 R14: 00007f7875c15fa0 R15: 00007ffcbefb2f88 [ 100.473826][ T3701] [ 100.476847][ T3701] [ 100.479155][ T3701] Allocated by task 3701: [ 100.483474][ T3701] kasan_set_track+0x4b/0x70 [ 100.488145][ T3701] kasan_save_alloc_info+0x25/0x30 [ 100.493250][ T3701] __kasan_kmalloc+0x95/0xb0 [ 100.497824][ T3701] __kmalloc_node_track_caller+0xb1/0x1e0 [ 100.503619][ T3701] kmemdup+0x2b/0x60 [ 100.507506][ T3701] ext4_xattr_block_set+0x9d5/0x3260 [ 100.512794][ T3701] ext4_xattr_set_handle+0x10e8/0x12c0 [ 100.518261][ T3701] ext4_xattr_set+0x242/0x320 [ 100.522929][ T3701] ext4_xattr_trusted_set+0x3c/0x50 [ 100.528118][ T3701] __vfs_setxattr+0x3f2/0x440 [ 100.532786][ T3701] __vfs_setxattr_noperm+0x12a/0x5e0 [ 100.538058][ T3701] __vfs_setxattr_locked+0x212/0x230 [ 100.543333][ T3701] vfs_setxattr+0x167/0x2e0 [ 100.547844][ T3701] setxattr+0x346/0x360 [ 100.551987][ T3701] path_setxattr+0x147/0x290 [ 100.556563][ T3701] __x64_sys_lsetxattr+0xc2/0xe0 [ 100.561490][ T3701] x64_sys_call+0x8b7/0x9a0 [ 100.565975][ T3701] do_syscall_64+0x4c/0xa0 [ 100.570412][ T3701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.576301][ T3701] [ 100.578615][ T3701] Last potentially related work creation: [ 100.584422][ T3701] kasan_save_stack+0x3a/0x60 [ 100.589099][ T3701] __kasan_record_aux_stack+0xb6/0xc0 [ 100.594550][ T3701] kasan_record_aux_stack_noalloc+0xb/0x10 [ 100.600347][ T3701] call_rcu+0xcf/0xf90 [ 100.604404][ T3701] fscrypt_put_master_key+0xdf/0x140 [ 100.609679][ T3701] fscrypt_put_master_key_activeref+0x42b/0x4a0 [ 100.615910][ T3701] fscrypt_destroy_keyring+0x18b/0x290 [ 100.621450][ T3701] generic_shutdown_super+0xae/0x370 [ 100.626720][ T3701] kill_block_super+0x7f/0xf0 [ 100.631380][ T3701] deactivate_locked_super+0xb5/0x120 [ 100.636735][ T3701] deactivate_super+0xaf/0xe0 [ 100.641395][ T3701] cleanup_mnt+0x474/0x500 [ 100.645796][ T3701] __cleanup_mnt+0x19/0x20 [ 100.650225][ T3701] task_work_run+0x1e1/0x250 [ 100.654800][ T3701] exit_to_user_mode_loop+0x9b/0xb0 [ 100.660075][ T3701] exit_to_user_mode_prepare+0x87/0xd0 [ 100.665514][ T3701] syscall_exit_to_user_mode+0x1a/0x30 [ 100.671000][ T3701] do_syscall_64+0x58/0xa0 [ 100.675400][ T3701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.681281][ T3701] [ 100.683586][ T3701] The buggy address belongs to the object at ffff8881195ef000 [ 100.683586][ T3701] which belongs to the cache kmalloc-1k of size 1024 [ 100.697626][ T3701] The buggy address is located 64 bytes inside of [ 100.697626][ T3701] 1024-byte region [ffff8881195ef000, ffff8881195ef400) [ 100.710973][ T3701] [ 100.713324][ T3701] The buggy address belongs to the physical page: [ 100.719759][ T3701] page:ffffea0004657a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1195e8 [ 100.729981][ T3701] head:ffffea0004657a00 order:3 compound_mapcount:0 compound_pincount:0 [ 100.738291][ T3701] flags: 0x4000000000010200(slab|head|zone=1) [ 100.744357][ T3701] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 100.752938][ T3701] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 100.761515][ T3701] page dumped because: kasan: bad access detected [ 100.767932][ T3701] page_owner tracks the page as allocated [ 100.773624][ T3701] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 114, tgid 114 (udevd), ts 5120281085, free_ts 0 [ 100.793236][ T3701] post_alloc_hook+0x1f5/0x210 [ 100.798106][ T3701] prep_new_page+0x1c/0x110 [ 100.802598][ T3701] get_page_from_freelist+0x2d12/0x2d80 [ 100.808131][ T3701] __alloc_pages+0x1d9/0x480 [ 100.812708][ T3701] alloc_slab_page+0x6e/0xf0 [ 100.817304][ T3701] new_slab+0x98/0x3d0 [ 100.821360][ T3701] ___slab_alloc+0x6bd/0xb20 [ 100.825942][ T3701] __slab_alloc+0x5e/0xa0 [ 100.830258][ T3701] __kmem_cache_alloc_node+0x203/0x2c0 [ 100.835786][ T3701] __kmalloc_node_track_caller+0xa0/0x1e0 [ 100.841487][ T3701] __alloc_skb+0x236/0x4b0 [ 100.845894][ T3701] netlink_sendmsg+0x635/0xbd0 [ 100.850645][ T3701] ____sys_sendmsg+0x5cc/0x990 [ 100.855396][ T3701] ___sys_sendmsg+0x2a2/0x360 [ 100.860058][ T3701] __x64_sys_sendmsg+0x205/0x2d0 [ 100.864977][ T3701] x64_sys_call+0x171/0x9a0 [ 100.869465][ T3701] page_owner free stack trace missing [ 100.874808][ T3701] [ 100.877111][ T3701] Memory state around the buggy address: [ 100.882807][ T3701] ffff8881195eef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.890934][ T3701] ffff8881195eef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.898978][ T3701] >ffff8881195ef000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.907017][ T3701] ^ [ 100.913151][ T3701] ffff8881195ef080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.921201][ T3701] ffff8881195ef100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.929247][ T3701] ================================================================== [ 100.939806][ T3716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.940539][ T3701] Disabling lock debugging due to kernel taint [ 100.955625][ T3716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.978848][ T6] usb 8-1: USB disconnect, device number 2 [ 100.992199][ T3717] EXT4-fs error (device loop5): ext4_xattr_block_find:1842: inode #15: comm syz.5.1310: corrupted xattr block 145 [ 101.034086][ T681] EXT4-fs (loop5): unmounting filesystem.