last executing test programs: 9.090265339s ago: executing program 1 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000140)={0x0, 0xfffffff9, &(0x7f0000000180)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x1, 0x2800000, {{0x17, 0x4, 0x1, 0x8, 0x5c, 0x67, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0xe2, [@loopback, @loopback, @rand_addr=0x64010100, @remote, @remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @lsrr={0x83, 0x7, 0xef, [@loopback]}, @rr={0x7, 0x13, 0x55, [@multicast1, @empty, @loopback, @remote]}]}}}}}) 9.028186101s ago: executing program 1 (id=469): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb}, 0xc) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f00000000c0)) pread64(r0, &(0x7f0000000000)=""/146, 0x92, 0xfff) pread64(r0, &(0x7f00000014c0)=""/4096, 0x1000, 0x547) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) 9.027731471s ago: executing program 1 (id=470): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)={0x40242, 0x0, 0x10}, 0x18) r2 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x7}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00'}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, r1, 0x33ad0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x10106, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfff, 0x7, 0x8000}, {{0x2}, {0x2}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24049094}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) socket$netlink(0x10, 0x3, 0x0) 8.148741213s ago: executing program 1 (id=483): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000a010101000000000000000000000000ac1414aa00000000000000000000000000000080000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000100000000000e0000000000000000000000000000000000000000000000ffffffffffffffff040000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0b00000000000000000000001400000000008e2918357257250000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="e02742e86c0d85ff9782764532db", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r5, &(0x7f0000000f00)="c023", 0x2, 0x0, &(0x7f0000000f40)={0x2, 0x1234, @loopback}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000880)={0x0, 0x1, 0x3ff, 0x2}) fcntl$lock(r6, 0x25, &(0x7f00000008c0)={0x2, 0x2, 0x1, 0x7}) sendmsg$key(r0, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000380)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="6797f04cdb6f2c8ff1c9aa15b0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x9, 0x70, &(0x7f00000004c0)=""/112, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000580)=[{0x4, 0x5, 0xf, 0x4}, {0x3, 0x4, 0xe, 0x2}, {0x1, 0x3, 0x9, 0x5}, {0x5, 0x2, 0x5, 0x4}, {0x2, 0x3, 0xf, 0xa}, {0x4, 0x2, 0x3, 0x3}, {0x4, 0x5, 0xc, 0x5}, {0x2, 0x3, 0x1, 0xa}, {0x4, 0x1, 0xe, 0x6}, {0x3, 0x4, 0xa, 0x1}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r8, 0x4) timer_settime(r7, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}}, &(0x7f0000000340)) 8.066973665s ago: executing program 1 (id=484): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000010b00)={0x0, 0x0, &(0x7f0000010b40)={&(0x7f0000010b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x105fc, &(0x7f0000000300)="$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") fsopen(0x0, 0x1) lstat(&(0x7f0000010940)='./file1\x00', &(0x7f00000000c0)) write(r3, &(0x7f0000000000)='\x00', 0xffffffffffffffd9) openat$tun(0xffffffffffffff9c, 0x0, 0x200200, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000010980)={{0x27, 0x9, 0xb, 0x1, 0x6}, [{0x5, 0x4, 0x5, 0x28}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000010900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000010a00)='./dev\x00', &(0x7f0000010a40)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000010a80)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd06, &(0x7f0000010ac0)="0400000000000000000000003801000000000000000000000000000007000000000000000000000000000000000000006d7061746830") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7.640610826s ago: executing program 4 (id=488): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x800, 0x10) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)=ANY=[]) read$msr(r1, &(0x7f0000000100)=""/205, 0xcd) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000ac010000008100000000000000e000000100004e200018907804000000342800000700000000000000"], 0x0) 7.622696896s ago: executing program 3 (id=490): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20040406, &(0x7f0000000040)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@minixdf}], [], 0x2c}, 0x84, 0x504, &(0x7f0000001080)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x2, '\x00', @a}) 7.564657828s ago: executing program 4 (id=491): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x10000, 0x8, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 7.563205828s ago: executing program 4 (id=492): ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000003c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84) syz_emit_ethernet(0x36, &(0x7f0000001940)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001980)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "4f400038200000000000000001000001000000010001000001000001000000040000000005dc00006574683000"/56}}}, 0x0) r3 = io_uring_setup(0x25f3, &(0x7f0000001bc0)={0x0, 0x0, 0x2, 0x1, 0x257}) bind$inet6(0xffffffffffffffff, &(0x7f0000001c40)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38, 0x22048084}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000001e40)={0x0, 0x2800, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001fc0)={0x3c, r8, 0x1, 0x70bd36, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5f}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_mount_image$ext4(&(0x7f0000002000)='ext4\x00', &(0x7f0000002040)='./file0\x00', 0x19f, &(0x7f0000002080)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x542, &(0x7f0000002100)="$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") recvmmsg(r5, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x100, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f00000026c0)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) io_uring_enter(r3, 0x2000000, 0x2, 0xf, &(0x7f0000001c80), 0x18) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) write$binfmt_script(r0, &(0x7f0000001ac0), 0xfffffd9d) r9 = socket(0x1e, 0x4, 0x0) connect$tipc(r9, &(0x7f0000001b00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff}) write(r10, &(0x7f0000001b80)=';', 0x1) sendfile(r9, r0, 0x0, 0x8010002b) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)={[{@rodir}, {@numtail}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@utf8}, {@numtail}, {@shortname_winnt}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8no}, {@uni_xlate}]}, 0x3, 0x281, &(0x7f0000000400)="$eJzs3c9qY1UYAPDv5k+TKJgsXInQC7pwVVqfoEUqiAVByUJdaLEpSBMKLRSqYnTlE/gEPo+bYV5gHmCG2U0Xw9zh9uZfy01KO21TZn6/TT++c76c7+Rc2tU9/fnjwcHe4fH+3388iWYzicpmbMZZEp2oxNhfUerxs/I8APDAnWVZPM8KjSJ1enFGfU5lrXLnzQEAd2L27/+yewEA7sd33//w9dbOzva3adqMGPxz0k2i+FmMb+3Hr9GPXqxHO15GZBNF/OVXO9tRS3Od+HQwPOnmlYOf/h99/tbTiPP6jWhHp7x+Iy3M1A9PuvV4b7T+Zj963/wX7fiwvP7zkvrorsRnn8z0vxbtePRLHEY/9ka9jev/3EjTL7J/X/z+Y57N65PheP9TWfX+TgUAAAAAAAAAAAAAAAAAAAAAgLfdWjrRuXj/zvji/wXjC+4HGs7cz7OepmmW5LM/iGl9LT6qRW25uwcAAAAAAAAAAAAAAAAAAICH4fj0t4Pdfr93dKvB+LX+kqF4dTHTiIibr7V6KZM1ShedBlEdtdZPIq63Vj0a55VXT65ecxetvJ/eUVKL2zuCZJJpzQ6tRrFWnmkVwUzmjVdvxnkwfroOdpOrDre5+LxuHGQlj191btXK5UxrtIOSya0Fq6+8f6Oes/acoSQi6pMvc/Hn1G/pq2vd328fAAAAAAAAAAAAAAAAAABg1vTt30sDlSU1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABLMP3//9cIhqPieXOyah7UYpRZ8hYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4B7wOAAD//45WYzw=") openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x101000, 0x108) 7.506920279s ago: executing program 3 (id=493): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)={0x40242, 0x0, 0x10}, 0x18) r2 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x7}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00'}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x11e) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, r1, 0x33ad0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x10106, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfff, 0x7, 0x8000}, {{0x2}, {0x2}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24049094}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) socket$netlink(0x10, 0x3, 0x0) 6.917269665s ago: executing program 1 (id=505): syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x4, 0x1, 0x3}}, {@can={0xc, {{0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "baa8a659a738c7ed"}}}}, &(0x7f0000000040)={0x1, 0x2, [0xb77, 0xa1f, 0x5c, 0xf4e]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080), 0x4) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200000, 0x29, 0x4}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000140)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x109080, 0x46) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4080) utimes(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x77359400}, {0x77359400}}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x100000001, 0x4900) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'geneve0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1ac, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3fc00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/!.[{)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa33}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "6d81bdc45ec8c047f4ea83e819de2f6912efe471344d292b9609e25fa865a31928a9f9fef3eee2a1638fbca56254b7bbdde5d817ab4485df849bcec56d399cdccd784752"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x804) socketpair(0x1a, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x80000aae) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r7) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044080) r10 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000b80), 0x800) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000d80), &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0, 0x0}, &(0x7f0000000e80)=0xc) sendmmsg$unix(r4, &(0x7f0000000f40)=[{{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="cf7fa78561b776105b4ff6401101d421834eb10e01c843f52a2ec02df68c18097a2785fc42fc5059ca54ab0dde5ea4593f3e1eebcbdf681e60bbbeb95cebd331e94e7f4245e1de192d755f51bc1dc6060948c2802b80fd6a6d7a1286fa717c05601b0654046cf16dade27e102cd8950247ecd51c50a0705cd02b02c87512ab04b868be8a3acbf295a8d671aa1adbcc6a3bd78a8a38fded3e0ee77c9094102e23e181eee7a08ad8f3e335b85f66e858219a9b7ac9b5c83e11cd28b0a5b749570cd39204397a3d8534c988ded8010bd1ce2dbc818f0a608b70a5d3add3784c179a4fbcf2c200d060ad68ed4231beb836b3", 0xf0}], 0x1, &(0x7f0000000bc0)=[@rights={{0x20, 0x1, 0x1, [r10, r4, r6, r3]}}], 0x20, 0x4000000}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c80)="f91b4f052f14a9f1e39a617efdbe827707c246b82b342d514bfe368ebcf2c5a3c2ca3239c93e79a07a33f4e2f41d4168daf78009c39dd8e31d98622f4a25f7e033cae1d61b5228aee78b7b81e7e812a844fda4b455fa61083f274eab66c183b1d25c8dd26e1595fe5c4ade555c7447e4317b29f333ef1589bc43a6c6c8a0ec042c2cf19e12909243b5b95335fca86f75b4b865bdebf45f02073a2a8ae3a4f4f93f94df168798581e846f", 0xaa}], 0x1, &(0x7f0000000ec0)=[@rights={{0x30, 0x1, 0x1, [r3, r2, r0, r6, r11, r6, r7, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r12, r15}}}], 0x50, 0x44041}}], 0x2, 0x8004) connect$unix(r7, &(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x1040088, &(0x7f0000001180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@noxattr}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x40}}, {@afid={'afid', 0x3d, 0x3}}, {@dfltgid={'dfltgid', 0x3d, r16}}, {@access_client}, {@dfltuid={'dfltuid', 0x3d, r14}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'batadv_slave_0\x00'}}, {@euid_eq={'euid', 0x3d, r13}}, {@subj_role={'subj_role', 0x3d, 'netdevsim\x00'}}, {@appraise_type}, {@fsname={'fsname', 0x3d, '0000:00:10.0\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) r17 = open$dir(&(0x7f0000001300)='./file1/file0\x00', 0x22400, 0x22) unlinkat(r17, &(0x7f0000001340)='./file0\x00', 0x0) fchownat(r17, &(0x7f0000001380)='./file1/file0\x00', 0x0, 0x0, 0x100) 6.391874248s ago: executing program 3 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400000000000000000000000095d935ad57a1d68285ed398d3ad3b0bb31249aa3ae5e827272eb0600000000000000a827b98b92ed72421658becdc70a12cfdeeef91ee869755cabe52f0f1429827034f925bb60a8de124b3cc612264d6d34e95640695b82d61cea8f62b6c6088994d916a68ab3ecda", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0016801800018014000a00f8ffffff000000000300000000000000140035006272696467655f736c6176655f300000"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000005d40)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000058001a000600000002000000040003"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000500)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ffde2a", 0x14, 0x6, 0x40, @remote, @empty, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0xffc}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000005e40)=0x7, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000005e80)=0x468, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000005ec0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) r6 = syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f00000002c0)='./bus\x00', 0x800000, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/452], 0x1, 0x5516, &(0x7f0000000780)="$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") mknodat$loop(0xffffffffffffff9c, 0x0, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000005f40)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$can_bcm(r7, &(0x7f0000006000), 0x10) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000005cc0)='.\x00', 0x100, 0x52) r9 = openat(0xffffffffffffff9c, &(0x7f0000005d80)='./tracing/events/msr/read_msr/enable\x00', 0x0, 0x14e) read(r9, 0x0, 0x0) write$selinux_validatetrans(r9, &(0x7f0000005dc0)={'system_u:object_r:vmware_device_t:s0', 0x20, 'system_u:object_r:syslogd_initrc_exec_t:s0', 0x20, 0x7, 0x20, '/sbin/dhclient\x00'}, 0x74) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, 0x0) 5.163584379s ago: executing program 3 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getgroups(0xffffffffffffffb4, 0x0) unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./dev\x00', &(0x7f0000000b00)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000b80)="040000000000000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573") ioctl(r1, 0xc138fd06, &(0x7f0000000bc0)) mknod(&(0x7f00000003c0)='./bus\x00', 0x1024, 0x1000000) syz_mount_image$f2fs(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x1f, &(0x7f0000000c40)={[{@adaptive_mode}, {@usrjquota}, {@alloc_mode_def}, {@nolazytime}, {@background_gc_off}, {@discard_unit_section}, {@compress_cache}, {@lazytime}, {@whint_mode_user}, {@noinline_xattr}, {@noextent_cache}, {@alloc_mode_def}, {@jqfmt_vfsold}, {@background_gc_off}, {@heap}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nousep_xattr#\xc5\xf8\xf5\xfe\a\xc7\xa5\x17\xe1\xb8\xd3\'\xe5\xe4\x81b\v\x91aOtR\xdb\xd6u\xfc-\xb3\xf4\xf4A-\xf7\x1f7;:\xa4fZ\xf2\t\xafrkR\xef\xe7w\xfc\xd0J`\xcb\xf48\x895b\xb7n\xfe\x8a\xc6K\xb7g\x99\xca,\xdb\xc3~\xe4\xaa9W\xa2\xfe\xaf\xce\"\xc1m\xc8\xecq\xfbG\x97AK\xdf\xa7D\x8f\xa6\xe2\xc4L7\x8e\xf5%\xac\x84n\xe1\x13\xa1u\xf00\xbe)c\x82I\xe6Pu\xaaG1-\x12\x14\xe7\x12\xd6[\x8a>\xbbc-\x11\x15\x02\xe0bW\xfew\xb3\xe4@\xf9\x94.\xf9\x00\xfa\x17\xeb8>\v\x04|\x0eYZ\xd3\x06\xb4\xdb:fKW\xc9\xebhn\x82`'}}, {@dont_appraise}, {@smackfsroot={'smackfsroot', 0x3d, '+!(/\x84)'}}]}, 0x0, 0x5553, &(0x7f0000000e40)="$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") r2 = open(&(0x7f0000000400)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r2, &(0x7f0000000440)={0x5e}, 0xffd3) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000006c0)={0x3}, 0x4) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000380)=[@timestamp, @timestamp, @mss={0x2, 0xe17b}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x5, 0x6}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) 5.162057509s ago: executing program 4 (id=518): socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x470, &(0x7f0000000000)={0x0, 0x32ac, 0x400, 0x0, 0x122}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x80010, r0, 0x7037d000) syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000969e574b2d07b3a800000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) write$bt_hci(r1, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="e1ea89dcfdaa0055f0372a8f4971c62bc8c7150f416bf64d7d7aebd070e2a3becf431e7fff1879d6d9f9d4cc97c73ded91aa0e0fcbed34d3983fb2f85935392fa3a1e73850134a40a875631cecea77bf40c74cf39f16c28dfcecef595f87d0462b25e5f4abd69d85f99337ffb30d6267f9ca1e1c781f95bc0fa6bb141cc75deee5e7442626fdca997c1199682c72d6a3189b840799d4c00620d326c058bec83871afbb1a929f3b88e5"], 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f0000000580)) syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f00000006c0)='./file0/file1\x00', &(0x7f0000000700)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x2}, [], {0x4, 0x3}, [], {}, {0x20, 0x1}}, 0x24, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x10000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000a80)={0x3, &(0x7f0000000ac0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x9}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000b00)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @dccp_packet={0xc, 0x6, "08d62a", 0x10, 0x21, 0x0, @mcast2, @mcast1, {[], {{0x4e23, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0xa, 0x1, "29c2d1", 0x1, "043463"}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a40)={r8}, 0xc) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x440088c4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) 3.397335284s ago: executing program 0 (id=526): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x1800, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @restrict]}}, 0x0, 0x3e}, 0x28) 3.224963518s ago: executing program 0 (id=528): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xd82b3000) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_create(0x0, &(0x7f0000001940)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000840)="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", &(0x7f0000001840)="068efa1e92d00e62430ee6b600193cc32a2b12b1ad951860db9a7a81b9a87d75550fbc6b77320f27ab680691b132cf7e85b6833814b16562554e90305ddc1c674e090b6d517a838cb20917ecf6090f35c806740b995ca4407b9f3d9e5c05a47ac8d73f5ae442222d22d1608d2c5896cb9be6af5439ae6012cd4c605a6014c664dcd09268584314eb55b37edfa2efba0f9912679f8c4840e988219cfb8277721ab79636d85b1f86f8200712f78c3050374308355f4152a9d0f3c54e59d39731aa15f33c8f6d5c"}}, &(0x7f0000001980)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x2, 0x2afb, 0x6, 0x8ed, 0x9, 0x9, 0x5}, &(0x7f0000000180)={0x7, 0x5, 0x1000, 0x1, 0x6, 0x5, 0xc, 0x5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x5d6]}, 0x8}) 2.944055145s ago: executing program 4 (id=529): symlink(0x0, &(0x7f0000002680)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl$Q_QUOTAOFF(0x2, 0x0, 0x0, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x98802) io_uring_setup(0x7362, &(0x7f0000000180)={0x0, 0x3859, 0x2, 0x1, 0x3d5, 0x0, r1}) socket$nl_route(0x10, 0x3, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000003680)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000000000000000200040000000000100000000000000020"], 0x24, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'veth0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) 2.719064821s ago: executing program 0 (id=530): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x14d3, &(0x7f00000000c0)="$eJzs3HuYz9XaMPB1r7W+jGnSr0kOw7rX/eWXBsskSQ5JckiSJElySkiaJElIDDklIQk5TpLDEJLDYDDO5/P50GRLkiSnnMJ6L+39PJ6928/led+938cfc3+ua12z7vn+7vu31twz8z1c18zPnYZUb1ijSn0iEv8S+OuHFCFEjBCivxDiDiFEIIQoE18m/vrxXApS/rU3Yf9ez6Xd6hWwW4n7n71x/7M37n/2xv3P3rj/2Rv3P3vj/mdv3H/GsrOt0wrcySP7Dn7+n53x+T974/5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7Hs7FY/f+Zxa8et/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY9XPQ3aCHEf8xv9boYY4wxxhhjjDH27+Nz3uoVMMYYY4wxxhhj7P8/EFIooUUgcoicIkbkErHiNhEnbhe5xR0iIu4U8eIukUfcLfKKfCK/KCASREFRSBiBwgoSoSgsioiouEcUFfeKRFFMFBclhBMlRZK4T5QS94vS4gFRRjwoyoqHRDlRXlQQFcXDopJ4RFQWj4oq4jFRVVQT1UUN8bioKZ4QtcSTorZ4StQRT4u64hlRTzwr6ovnRAPxvGgoXhCNxIuisWgimopmovn/U/67opt4T3QXPUSK6Cl6ifdFb9FH9BX9RH/xgRggPhQDxUdikBgshoiPxVDxiRgmPhXDxQgxUnwmRonRYowYK8aJ8SJVfC4miC/ERPGlmCQmiyliqkgT08R08ZWYIWaKWeJrMVt8I+aIuWKemC/SxQKxUCwSGWKxWCKWikyxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETrFL7BZ7xF6xT+wXB8RB8a3IEt/9X+Zf+If8ziBAgAQJGjTkgBwQAzEQC7EQB3GQG3JDBCIQD/GQB/JAXsgL+SE/JEACFIJCgIBAQFAYCkMUolAUikIiJEJxKA4OHCRBEpSC+6E0lIYyUAbKQlkoB+WhPFSEilAJKkFlqAxVoApUhapQHarD4/A4PAG1oBbUhtpQB+pAXagL9aAe1If60AAaQENoCI2gETSGxtAUmkJzaA4toAW0hJbQGlpDG2gDbaEtJEMytIN20B7aQwfoAB2hI3SCTtAZukAXeBfehffgPegBVWVP6AW9oDf0hr7QD/rBBzAAPoQP4SMYBINhCHwMH8MnMAzOw3AYASNhJFSSo2EMjAWS4yEVUmECTICJMBEmwWSYDFMhDabBdJgOM2AmzISvYTZ8A9/AXJgL8yEd0mEhLIIMyIAlcAEyYRkshxWwElbBSlgDa2ENrIcNsB42wSbYAltgG2yDHbADdsEu2AN7YB/sgwNwAAZBFmTBITgEh+EwHIEjcBSOwjE4BsfhOJyAE3ASTsIpOA1n4DScg3NwHi7ARbgIl+EyXIErcA2uXf/hl9dpqWUOmUPGyBgZK2NlnIyTuWVuGZERGS/jZR6ZR+aVeWV+mV8myARZSBaSKFGSDGVhWVhGZVQWlUVlokyUxWVx6aSTSTJJlpKlZGlZWpaRD8qy8iFZTpaXrVxFWVFWkq1dZfmorCKryKqymqwua8gasqasKWvJWrK2rC3ryDqyrnxG1pM9oS88J693pqEcDI3kEGgsm8imspn8BF6SLeQwaClbydbyFTkChkNb2cIly9dlOzkG2ss35Vh4S3aU46GTfEd2ll1kV/mu7CZbuu6yh5wEPWUvORV6yz6yr+wnZ0A1eb1j1eVHcpAcLIfIj+V8+EQOk5/K4XKEHCk/k6PkaDlGjpXj5HiZKj+XE+QXcqL8Uk6Sk+UUOVWmyWlyuvxKzpAz5Sz5tZwtv5Fz5Fw5T86X6XKBXCgXyQy5WC6RS2WmXCaXyxVypVwlV8s1cq1cJ9fLDXKj3CQ3yy1yq9wmt8sdcqfcJXfLPXKv3Cf3ywPyoPxWZsnv5CH5F3lYfi+PyB/kUfmjPCZ/ksflz/KE/EWelL/KU/K0PCPPynPyN3leXpAX5SV5Wf4ur8ir8pr0UihQUimlVaByqJwqRuVSseo2FaduV7nVHSqi7lTx6i6VR92t8qp8Kr8qoBJUQVVIGYXKKlKhKqyKqKi6RxVV96pEVUwVVyWUUyVVkrpPlVL3q9LqAVVGPajKqodUOVVeVVAV1cOqknpEVVaPqirqMVVVVVPVVQ31uKqpnlC11JOqtnpK1VFPq7rqGVVPPavqq+dUA/W8aqheUI3Ui6qxaqKaqmaquXpJtVAvq5aqlWqtXlFt1KuqrXpNJavXVTv1hmqv3lQd1Fuqo3pbdVLvqM6qi+qqrqpryqvuqodKUT1VL/W+6q36qL6qn+qvPlAD1IdqoPpIDVKD1RD1sRqqPlHD1KdquBqhRqrP1Cg1Wo1RY9U4NV6lqs/VBPWFmqi+VJPUZDVFTVVpaprq+7dKs/4H+V/8k/yBf7z7FrVVbVPb1Q61U+1Su9UetVftVfvVfnVQHVRZKksdUofUYXVYHVFH1FF1VB1Tx9RxdVydUCfUSXVSnVKn1SV1Vp1Tv6nz6oK6oC6py+qyuvK3r4HQoKVWWutA59A5dYzOpWP1bTpO365z6zt0RN+p4/VdOo++W+fV+XR+XUAn6IK6kDYatdWkQ11YF9FRfY8uqu/VibqYLq5LaKdL6iR937+cf7P1NdfNdQvdQrfULXVr3Vq30W10W91WJ+tk3U630+11e91Bd9AddUfdSXfSnXVn3VV31d10N91dd9cpOkX30u/r3rqP7qv76f76Az1AD9AD9UA9SA/SQ/QQPVQP1cP0MD1cD9cj9Ug9So/SY/QYPU6P06k6VU/QE/REPVFP0pP0FD1Fp+k0PV1P1zP0DD1Lz9Kz9Ww9R8/R8/Q8na7T9UK9UGfoDL1EL9GZepleplfoFXqVXqXX6DV6nV6nN+gNepPepDP1Vr1Vb9fb9U69U+/Wu/VevVfv1/v1QX1QZ+ksfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf0Cf1SX1Kn9Jn9Bl9Tp/T5/V5fVFf1Jf1ZX1FX9HX9LXrl32BDGSgAx3kCHIEMUFMEBvEBnFBXJA7yB1EgkgQH8QHeYK7g7xBviB/UCBICAoGhQITYGADCsKgcFAkiAb3BEWDe4PEoFhQPCgRuKBkkBTcF5QK7g9KBw8EZYIHg7LBQ0G5oHxQIagYPBxUCh4JKgePBlWCx4KqQbWgelAjeDyoGTwR1AqeDGoHTwV1gqeDusEzQb3g2aB+8FzQIHg+aBi8EDQKXgwaB02CpkGzoPm/tb735/O97LqbHibF9DS9zPumt+lj+pp+pr/5wAwwH5qB5iMzyAw2Q8zHZqj5xAwzn5rhZoQZaT4zo8xoM8aMNePMeJNqPjcTzBdmovnSTDKTzRQz1aSZaWa6+crMMDPNLPO1mW2+MXPMXDPPzDfpZoFZaBaZDLPYLDFLTaZZZpabFWalWWVWmzVmrVln1psNZqPZZDabLWar2Wa2mx1mp9lldps9Zq/ZZ/abA+ag+dZkme/MIfMXc9h8b46YH8xR86M5Zn4yx83P5oT5xZw0v5pT5rQ5Y86ac+Y3c95cMBfNJXPZ/G6umKvmmvHXL+6vn95Ro8YcmANjMAZjMRbjMA5zY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIryMkLIyFMYpRLIpFMRETsTgWR4cOkzAJS2EpLI2lsQyWwbJYFsthOayAFfBhfBgfwUfwUXwUH8PHsBpWwxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi20xGZOxHbbD9tgeO2AH7IgdsRN2ws7YGbtiV+yG3bA7dscUTMFe2At7Y2/si32xP/bHATgAB+JAHISDcAgOwaE4FIfhMByOI3AkfoajcDSOwbE4DsdjKqbiBJyAE3EiTsJJOAWnYBqm4XScjjNwBs7CWTgbZ+McnIPzcB6mYzouxIWYgRm4BJdgJmbiclyOK3ElrsbVuBbX4npcjxtxI27GzbgVt+J23I47cSfuxt24F/fiftyPB/EgZmEWHsJDeBgP4xE8gkfxKB7DY3gcj+MJPIEn8SSewlN4Bs/gOTyH5/E8XsSLeBl/xyt4Fa+hxxiby8ba22ycvd3mtnfYf4zz2wI2wRa0hayxeW2+v4vRWptoi9nitoR1tqRNsvf9KS5ny9sKtqJ92Fayj9jKf4pr2idsLfukrW2fsjXs438X17FP27r2BVvPvmjr2ya2gW1mG9oXbCP7om1sm9imtpltY1+1be1rNtm+btvZN/4UL7SL7Fq7zq63G+x+e8BetJfscfuzvWx/t91tD9vffmAH2A/tQPuRHWQH/ykeaT+zo+xoO8aOtePs+D/FU+xUm2an2en2KzvDzvxTnG4X2Nk2w86xc+08O/+P+PqaMuxiu8QutZl2mV1uV9iVdpVdbdf851pX2E12s91i99p9drvdYXfaXXa33fNHfH0fB+23Nst+Z4/Zn+xh+709Yk/Yo/bHP+Lr+zthf7En7a/2lD1tz9iz9pz9zZ63F/7Y//W9n7VX7TXrrSAgSYo0BZSDclIM5aJYuo3i6HbKTXdQhO6keLqL8tDdlJfyUX4qQAlUkAqRISRLRCEVpiIUpXuoKN1LiVSMilMJclSSkug+KkX3U2l6gMrQg1SWHqJyVJ4qUEV6mCrRI1SZHqUq9BhVpWpUnWrQ41STnqBa9CTVpqeoDj1NdekZqkfPUn16jhrQ89SQXqBG9CI1pibUlJpRc3qJWtDL1JJaUWt6hdrQq9SWXqNkep3a0RvUnt6kDvQWdaS3qRO9Q52pC3Wld6kbvUfdqQelUE/qRe9Tb+pDfakf9acPaAB9SAPpIxpEg2kIfUxD6RMaRp/ScBpBI+kzGkWjaQyNpXE0nlLpc5pAX9BE+pIm0WSaQlMpjabRdPqKZtBMmkVf02z6hubQXJpH8ymdFtBCWkQZtJiW0FLKpGW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO2kW7aQ/tpX20nw7QQfqWsug7OkR/ocP0PR2hH+go/UjH6Cc6Tj/TCfqFTtKvdIpO0xk6S+foNzpPF+giXaLL9Dtdoat0jTyJEEIZqlCHQZgjzBnGhLnC2PC2MC68Pcwd3hFGwjvD+PCuME94d5g3zBfmDwuECWHBsFBoQgxtSGEYFg6LhNHwnrBoeG+YGBYLi4clQheWDJPC+8JS4f1h6fCBsEz4YFg2fCgsF5YPK4QVw4fDSuEjYeXw0bBK+FhYNawWVg9rhI+HNcMnwlrhk2Ht8KmwdPh0WDd8JqwXPhvWD58LG4TPhw3DF8JG4Yth47BJ2DRsFjYPXwpbhC+HLcNWYevwlbBN+GrYNnwtTA5fD9uFb9z0eErYM+wVvh++H3r/pJoXnR9Njy6ILowuimZEF0eXRJdGM6PLosujK6Iro6uiq6Nromuj66LroxuiG6ObopujW6Le18gpHDjplNMucDlcThfjcrlYd5uLc7e73O4OF3F3unh3l8vj7nZ5XT6X3xVwCa6gK+SMQ2cdudAVdkVc1N3jirp7XaIr5oq7Es65ki7JNXPNXXPXwr3sWrpWrrV7xb3iXnWvutfca+5118694dq7N10H95br6N52b7t3XGfXxXV177pu7j3X3fVwKS7F9XK9XG/X2/V1fV1/198NcAPcQDfQDXKD3BA3xA11Q90wN8wNd8PdSDfSjXKj3Bg3xo1z41yqS3UT3AQ30U10k9wkN8VNcWkuzU13090MN8PNcrPcbDfbzXFz3Dw3z6W7dLfQLXQZLsMtcUtcpst0y91yt9KtdKvdarfWrXXr3Xq30W10m91mt9VtddvddrfT7XS73W631+11+91+d9AddFkuyx1yh9xhd9gdcT+4o+5Hd8z95I67n90J94s76X51p9xpd8addefcb+68u+AuukvusvvdXXFX3TXnXWrk88iEyBeRiZEvI5MikyNTIlMjaZFpkemRryIzIjMjsyJfR2ZHvonMicyNzIvMj6RHFkQWRhZFMiKLI0siSyOZkWWR5ZEVkZWRVRHvC24PfWFfxEf9Pb6ov9cn+mK+uC/hnS/pk/x9vpS/35f2D/gy/kFf1j/ky/nyvoJ/0Tf2TXxT38w39y/5Fv5l39K38q39K76Nf9W39a/5ZP+6b+ff8O39m76Df8t39G/7Tv4d39l38V39u76bf8939z18iu/pe/n3fW/fx/f1/Xx//4Ef4D/0A/1HfpAf7If4j/1Q/4kf5j/1w/0IP9J/5kf50X6MH+vH+fE+1X/uJ/gv/ET/pZ/kJ/spfqpP89P8dP+Vn+Fn+ln+az/bf+Pn+Ll+np/v0/0Cv9Av8hl+sV/il/pMv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/E6/y+/2e/xev8/v9wf8Qf+tz/Lf+UP+L/6w/94f8T/4o/5Hf8z/5I/7n/0J/4s/6X/1p/xpf8af9ef8b/68v+Av+kv+sv/dX/FX/TX+mzXGGGOMsf8RdZPjPf/J5+TfxnW9hBC37yhw9B9rbsz713kfmdAmIoR4vUen5/5jVK2akpLyt9dmKhEUmSuEiNzIzyFuxMtEa/GqSBatRKl/ur4+sstlukn96INCxP6XnBhxI75R//7/pv7o2TetP1eIxCI3cnKJG/GN+qX/m/r5Wtykfq7vU4Vo+V9y4sSN+Eb9JPGyeEMk/90rGWOMMcYYY4yxv+ojK3S42f3t9fvzBH0jJ6e4Ed/s/pwxxhhjjDHGGGO33ltdur72UnJyqw484QlPePKfk1v9m4kxxhhjjDH273bjov9Wr4QxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu+/jf+ndit3iNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2q/2fAAAA//+uBTVz") prlimit64(0x0, 0xe, &(0x7f0000001e40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001e80)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0xb, 0x0, &(0x7f00000015c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000001ec0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000001f00)=0x7) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000001700)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001740)={'veth0_macvtap\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$packet(r2, &(0x7f0000001780)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r2, 0x0, 0x0, 0x40500f0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000002040), 0x10106, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000001600), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000001640)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f0000001680)=[{&(0x7f00000016c0)='?', 0x20000081}], 0x1) 2.717764001s ago: executing program 3 (id=531): mkdir(&(0x7f0000000280)='./bus\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x4000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000740)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000780)='./proc\x00', 0x9000, &(0x7f00000007c0)={0xb, 0x4, 0x80000}, 0x20) (fail_nth: 1) mount$incfs(&(0x7f00000005c0)='\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0xc002, 0x0) 2.240847763s ago: executing program 2 (id=532): socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000015c0)='./file1\x00', 0x804, &(0x7f0000001600)=ANY=[@ANYBLOB='shortname=winnt,shortname=win95,utf8=1,utf8=1,shortname,shortname=winnt,rodir,utf8=0,gid=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,uni_xlate=1,nonumtail=0,quiet,utf8=0,shortname=winnt,iocharset=iso8859-6,\x00'], 0x1, 0x27b, &(0x7f0000001700)="$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") r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e80)={0x6, 0x3, &(0x7f0000002f40)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000"], &(0x7f0000002f80)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002fc0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003000)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x46, &(0x7f00000029c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaff00000000000000000000ffffe0000001feff00000000000000000000000000aa4e244e2000109078028800008000ffea489bdb5f1419327ce985c563be6873eb03cc870495753136fdb808d9278fc3f893a42d182b0ae9a11aa7a792ad749c3c31f57e1e80fdbe6f62b78a8566f972412afcee1f52285abe93ae468478dac9d8b2dcfb128178ace673acddffc2abba1c8fc109dfcc34dc401407fec79a94dff1fae4873bd2ae5b7dd03b273b7682ed50e6f864c7ca7499e4bfd34288da99015f7da978fe827635d94112afb450247f53a68fc61283463a953e803296aca2ad9fbb1d"], 0x0) 2.005799549s ago: executing program 3 (id=533): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60040000) syz_mount_image$ext4(&(0x7f0000005dc0)='ext4\x00', &(0x7f0000005e00)='./file1\x00', 0x200000, &(0x7f0000005e40)={[{@dioread_nolock}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000005ec0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006440)='rdma.current\x00', 0x275a, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0xfffffffe}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000680)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='fdinfo/3\x00') pread64(r4, &(0x7f0000000740)=""/210, 0xd2, 0x57) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.506925522s ago: executing program 0 (id=534): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x401c2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x8800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x13) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0xfffdff78, 0x80803, 0xfffffff1, 0x0, 0x4f, "144100", 0x9, 0x140220}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0xd) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x801, &(0x7f0000000380)=ANY=[], 0x2, 0x252, &(0x7f00000003c0)="$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") socket$vsock_stream(0x28, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x10100, 0x53) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000700)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x143042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x702, 0x0) sendfile(r6, r0, 0x0, 0x578410eb) socket$inet6_tcp(0xa, 0x1, 0x0) 1.484146323s ago: executing program 2 (id=535): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000280)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) pselect6(0x40, &(0x7f0000000800)={0x0, 0x0, 0x4000000000}, &(0x7f0000000840)={0x1f, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x4, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 946.994526ms ago: executing program 2 (id=536): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='%-[$,\x00', 0x400, 0x0, 0x5, 0x0, 0x0}) r1 = socket$unix(0x1, 0x2, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000700)={&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000006c0)=""/33, 0x21}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000005c0)=0x80000000, 0x4) (async) sendto$unix(r1, 0x0, 0xfffffffffffffceb, 0x0, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 945.335656ms ago: executing program 2 (id=537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@remote}, 0x14) 694.487963ms ago: executing program 4 (id=538): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x6d, &(0x7f00000003c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42d1df", 0x37, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], "96b24e2389907a"}}}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000200)={@remote}, 0x14) 684.538063ms ago: executing program 2 (id=539): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x14d3, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001e40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0xb, 0x0, &(0x7f00000015c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000001ec0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000001f00)=0x7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001700)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001740)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000002040), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000007, 0x2000002, 0x401c031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000001640)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000001680)=[{&(0x7f00000016c0)='?', 0x20000081}], 0x1) 373.580651ms ago: executing program 0 (id=540): setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000003c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x8, 0x224840) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @empty}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd2c, 0x3, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 2.39843ms ago: executing program 0 (id=541): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000001c0)=0xf29, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000440)=""/23, &(0x7f0000000480)=0x17) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffdf5, &(0x7f00000002c0)=0x10000000000002) sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000400), 0x651, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$KDSKBENT(r5, 0x4b47, 0x0) recvmmsg(r3, &(0x7f0000000440), 0x4000087, 0x2, 0x0) r6 = openat$sysfs(0xffffff9c, 0x0, 0x1c9a82, 0x38) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r7, 0x40186e8d, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r8, 0x1, 0x8000, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) sendfile(r6, 0xffffffffffffffff, 0x0, 0xbc44) 0s ago: executing program 2 (id=542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xa}, {0x7, 0x9}, {0xb, 0xf}}}, 0x24}}, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38491}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xa036}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}}, 0x10) sendmmsg(r2, &(0x7f0000000280), 0x40000000000009f, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.pending_reads\x00', 0x89040, 0x180) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x21}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) r5 = dup(r1) write$UHID_INPUT(r5, &(0x7f0000000580)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890c0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074d0936cd3b78130daa61d8e8048500005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0x2c, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e23, @private=0xfffffffe}}) kernel console output (not intermixed with test programs): 34] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.156: invalid block [ 56.783561][ T834] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.156: invalid indirect mapped block 8 (level 2) [ 56.797397][ T834] EXT4-fs (loop0): 1 truncate cleaned up [ 56.803099][ T834] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,nomblk_io_submit,data_err=ignore,max_batch_time=0x0000000000000001,nodelalloc,noauto_da_alloc,,errors=continue. Quota mode: none. [ 56.838329][ T833] xt_hashlimit: size too large, truncated to 1048576 [ 56.851298][ T805] F2FS-fs (loop3): invalid crc value [ 56.873130][ T805] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.926064][ T805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 57.168059][ T845] erofs: (device loop4): mounted with root inode @ nid 36. [ 57.198358][ T847] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.227561][ T847] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 57.243126][ T847] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 57.379811][ T852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 57.396776][ T852] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.417709][ T852] device bridge_slave_1 left promiscuous mode [ 57.428036][ T852] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.542461][ T856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=856 comm=syz.1.159 [ 58.417312][ T860] Zero length message leads to an empty skb [ 58.515311][ T865] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(6) [ 58.582964][ T871] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 58.627359][ T873] set_capacity_and_notify: 6 callbacks suppressed [ 58.627376][ T873] loop3: detected capacity change from 0 to 256 [ 58.658185][ T871] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.665928][ T875] loop1: detected capacity change from 0 to 128 [ 58.680718][ T871] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.168: Block bitmap for bg 0 marked uninitialized [ 58.721364][ T865] loop0: detected capacity change from 0 to 40427 [ 58.728870][ T871] EXT4-fs (loop4): Remounting filesystem read-only [ 58.735505][ T871] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 58.744817][ T871] EXT4-fs (loop4): Remounting filesystem read-only [ 58.751657][ T871] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.168: Block bitmap for bg 0 marked uninitialized [ 58.765015][ T871] EXT4-fs (loop4): Remounting filesystem read-only [ 58.771563][ T871] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 58.780640][ T871] EXT4-fs (loop4): Remounting filesystem read-only [ 58.787462][ T871] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.168: Block bitmap for bg 0 marked uninitialized [ 58.801011][ T875] FAT-fs (loop1): Unrecognized mount option "obâÄÓilQÍD12ø4†[\z«Jãc\¡¼à†örˆŸÔP`@‚¶åõ%¦U8 [ 58.801011][ T875] *5|¥lXâk†8´e._mG€+ Õcˆ" or missing value [ 58.823567][ T871] EXT4-fs (loop4): Remounting filesystem read-only [ 58.830213][ T871] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 58.839287][ T871] EXT4-fs (loop4): Remounting filesystem read-only [ 58.846108][ T871] EXT4-fs (loop4): 1 orphan inode deleted [ 58.852391][ T865] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 58.860882][ T871] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,. Quota mode: none. [ 58.872964][ T865] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.885332][ T865] F2FS-fs (loop0): invalid crc value [ 58.898806][ T865] F2FS-fs (loop0): Mismatch valid blocks 5 vs. 7 [ 58.905669][ T865] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 58.961050][ T883] cgroup: No subsys list or none specified [ 58.965616][ T885] loop1: detected capacity change from 0 to 128 [ 59.003035][ T891] loop4: detected capacity change from 0 to 256 [ 59.249710][ T903] loop0: detected capacity change from 0 to 256 [ 59.263466][ T903] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.274603][ T903] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 59.483560][ T903] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 59.943247][ T913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=913 comm=syz.0.179 [ 60.803070][ T923] loop1: detected capacity change from 0 to 128 [ 60.816755][ T926] loop4: detected capacity change from 0 to 256 [ 60.876226][ T923] FAT-fs (loop1): Unrecognized mount option "obâÄÓilQÍD12ø4†[\z«Jãc\¡¼à†örˆŸÔP`@‚¶åõ%¦U8 [ 60.876226][ T923] *5|¥lXâk†8´e._mG€+ Õcˆ" or missing value [ 60.956275][ T937] loop4: detected capacity change from 0 to 256 [ 61.155905][ T401] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 61.747268][ T401] usb 1-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 61.815600][ T964] loop4: detected capacity change from 0 to 256 [ 61.917578][ T401] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 61.926665][ T401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.935141][ T401] usb 1-1: Product: syz [ 61.939487][ T401] usb 1-1: Manufacturer: syz [ 61.944125][ T401] usb 1-1: SerialNumber: syz [ 62.046801][ T30] kauditd_printk_skb: 316 callbacks suppressed [ 62.046828][ T30] audit: type=1400 audit(1792735750.672:682): avc: denied { create } for pid=965 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.170601][ T970] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 62.198561][ T30] audit: type=1400 audit(1792735750.871:683): avc: denied { view } for pid=971 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 62.331896][ T30] audit: type=1400 audit(1792735751.001:684): avc: denied { block_suspend } for pid=929 comm="syz.0.188" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.365051][ T30] audit: type=1400 audit(1792735751.031:685): avc: denied { remount } for pid=929 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.384972][ T30] audit: type=1400 audit(1792735751.031:686): avc: denied { unmount } for pid=929 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.390360][ T401] usb 1-1: USB disconnect, device number 3 [ 62.431319][ T969] F2FS-fs (loop3): invalid crc value [ 62.437780][ T969] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.463064][ T969] F2FS-fs (loop3): Start checkpoint disabled! [ 62.470131][ T969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 62.810913][ T981] FAT-fs (loop4): Unrecognized mount option "obâÄÓilQÍD12ø4†[\z«Jãc\¡¼à†örˆŸÔP`@‚¶åõ%¦U8 [ 62.810913][ T981] *5|¥lXâk†8´e._mG€+ Õcˆ" or missing value [ 62.883592][ T989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=989 comm=syz.3.209 [ 62.896596][ T989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=989 comm=syz.3.209 [ 62.918715][ T30] audit: type=1400 audit(1792735751.580:687): avc: denied { getopt } for pid=988 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.939225][ T30] audit: type=1400 audit(1792735751.580:688): avc: denied { ioctl } for pid=988 comm="syz.3.209" path="socket:[18911]" dev="sockfs" ino=18911 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.835235][ T1006] set_capacity_and_notify: 5 callbacks suppressed [ 63.835251][ T1006] loop4: detected capacity change from 0 to 256 [ 63.872121][ T1011] loop3: detected capacity change from 0 to 256 [ 63.885166][ T1015] loop1: detected capacity change from 0 to 256 [ 63.966183][ T1027] loop2: detected capacity change from 0 to 256 [ 66.003786][ T1058] loop3: detected capacity change from 0 to 512 [ 66.058856][ T1058] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 66.075759][ T1066] loop2: detected capacity change from 0 to 256 [ 66.082337][ T1058] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 66.102812][ T1058] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #13: comm syz.3.233: iget: bad i_size value: 12154757448730 [ 66.143347][ T1042] loop1: detected capacity change from 0 to 256 [ 66.146673][ T1066] FAT-fs (loop2): Unrecognized mount option "shortname" or missing value [ 66.154272][ T1058] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.233: couldn't read orphan inode 13 (err -117) [ 66.227132][ T1058] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 66.227238][ T1042] exfat: Unknown parameter 'ÿȦü¢²Çjö¬…]ÀHDbemk [ 66.227238][ T1042] L¾ÜïÑÍ´Kè2U×m%^„¦˜' [ 66.258616][ T1066] loop2: detected capacity change from 0 to 8192 [ 66.488092][ T1072] loop4: detected capacity change from 0 to 256 [ 66.539985][ T1075] loop1: detected capacity change from 0 to 256 [ 67.383858][ T1087] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 67.401494][ T30] audit: type=1400 audit(1792735756.061:689): avc: denied { setattr } for pid=1085 comm="syz.3.240" name="file0" dev="loop3" ino=1048665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.678307][ T1068] F2FS-fs (loop2): invalid crc value [ 68.704978][ T1068] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.879340][ T1068] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.887597][ T1110] FAT-fs (loop1): Unrecognized mount option "shortname" or missing value [ 68.939038][ T1115] set_capacity_and_notify: 3 callbacks suppressed [ 68.939064][ T1115] loop3: detected capacity change from 0 to 512 [ 69.012561][ T1115] EXT4-fs (loop3): Test dummy encryption mode enabled [ 69.043040][ T1115] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.248: inode has both inline data and extents flags [ 69.068139][ T1115] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.248: couldn't read orphan inode 15 (err -117) [ 69.079816][ T1122] loop1: detected capacity change from 0 to 256 [ 69.093061][ T1115] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 69.145999][ T1115] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 69.159869][ T30] audit: type=1400 audit(1792735757.807:690): avc: denied { write } for pid=1114 comm="syz.3.248" path="/54/file1/file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.633071][ T1100] loop4: detected capacity change from 0 to 40427 [ 69.729534][ T1100] F2FS-fs (loop4): invalid crc value [ 69.758453][ T1100] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.720352][ T1146] loop3: detected capacity change from 0 to 16 [ 70.727314][ T1100] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.729860][ T1149] netlink: 'syz.0.259': attribute type 4 has an invalid length. [ 70.789328][ T1154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 70.801565][ T1146] erofs: (device loop3): mounted with root inode @ nid 36. [ 70.824282][ T30] audit: type=1400 audit(1792735759.464:691): avc: denied { mounton } for pid=1145 comm="syz.3.258" path="/57/bus/file0" dev="loop3" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.866853][ T30] audit: type=1400 audit(1792735759.494:692): avc: denied { read } for pid=1145 comm="syz.3.258" name="file0" dev="loop3" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.893739][ T30] audit: type=1400 audit(1792735759.494:693): avc: denied { read } for pid=1145 comm="syz.3.258" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.916807][ T30] audit: type=1400 audit(1792735759.494:694): avc: denied { open } for pid=1145 comm="syz.3.258" path="/57/bus/file0/file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.936688][ T1161] loop1: detected capacity change from 0 to 512 [ 70.940893][ T30] audit: type=1400 audit(1792735759.494:695): avc: denied { open } for pid=1145 comm="syz.3.258" path="/57/bus/file0/file0" dev="loop3" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.970863][ T30] audit: type=1400 audit(1792735759.513:696): avc: denied { ioctl } for pid=1145 comm="syz.3.258" path="/57/bus/file0/file0" dev="overlay" ino=49 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.980081][ T1158] loop2: detected capacity change from 0 to 128 [ 71.038824][ T1161] EXT4-fs (loop1): Ignoring removed nobh option [ 71.048583][ T1161] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.095363][ T1161] EXT4-fs (loop1): 1 truncate cleaned up [ 71.100182][ T1158] FAT-fs (loop2): Unrecognized mount option "obâÄÓilQÍD12ø4†[\z«Jãc\¡¼à†örˆŸÔP`@‚¶åõ%¦U8 [ 71.100182][ T1158] *5|¥lXâk†8´e._mG€+ Õcˆ" or missing value [ 71.101314][ T1161] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 72.337287][ T30] audit: type=1400 audit(1792735760.980:697): avc: denied { link } for pid=1153 comm="syz.1.260" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.360439][ T1154] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.374713][ T30] audit: type=1400 audit(1792735761.020:698): avc: denied { bind } for pid=1153 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.379532][ T1154] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 72.572025][ T30] audit: type=1400 audit(1792735761.200:699): avc: denied { relabelto } for pid=1153 comm="syz.1.260" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 72.767576][ T1184] loop3: detected capacity change from 0 to 128 [ 72.786054][ T1184] FAT-fs (loop3): Unrecognized mount option "obâÄÓilQÍD12ø4†[\z«Jãc\¡¼à†örˆŸÔP`@‚¶åõ%¦U8 [ 72.786054][ T1184] *5|¥lXâk†8´e._mG€+ Õcˆ" or missing value [ 73.252734][ T1205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 73.634005][ T1218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1218 comm=syz.1.282 [ 73.663925][ T1218] loop1: detected capacity change from 0 to 256 [ 73.689366][ T1218] exfat: Deprecated parameter 'utf8' [ 73.735178][ T1218] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 73.782049][ T1049] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 73.786483][ T1188] loop4: detected capacity change from 0 to 40427 [ 73.833178][ T1227] loop2: detected capacity change from 0 to 512 [ 73.861752][ T1227] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 73.870234][ T1227] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 73.878890][ T1227] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.287: iget: bad i_size value: 12154757448730 [ 73.891892][ T1227] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.287: couldn't read orphan inode 13 (err -117) [ 73.904148][ T1227] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 73.911600][ T30] audit: type=1400 audit(1792735762.547:700): avc: denied { sys_module } for pid=1236 comm="syz.1.290" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.944274][ T1188] F2FS-fs (loop4): invalid crc value [ 73.982438][ T1188] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.087319][ T1240] loop1: detected capacity change from 0 to 128 [ 74.093786][ T1188] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 74.103584][ T1240] FAT-fs (loop1): Unrecognized mount option "obâÄÓilQÍD12ø4†[\z«Jãc\¡¼à†örˆŸÔP`@‚¶åõ%¦U8 [ 74.103584][ T1240] *5|¥lXâk†8´e._mG€+ Õcˆ" or missing value [ 74.192898][ T1049] usb 4-1: config 232 has an invalid interface number: 85 but max is 0 [ 74.213431][ T1049] usb 4-1: config 232 has no interface number 0 [ 74.463501][ T1049] usb 4-1: language id specifier not provided by device, defaulting to English [ 74.864064][ T1049] usb 4-1: New USB device found, idVendor=19d2, idProduct=0059, bcdDevice=5b.4d [ 74.878207][ T1049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.887509][ T1049] usb 4-1: Product: syz [ 74.891841][ T1049] usb 4-1: Manufacturer: ã©¡é–œè¤âʯ굒鵊챥ꉹ霽캈ë畭胷é‰ã“ŸãŽ†ê…Šæ¶Œã”½â ¯êž‚ï»…ã¥ë†‰á®ƒëŽ°æ®Žì¾¶åµŽçµ¼è£ã‘¼ä‚•æ¾‰âƒ´ã¸‚鑽⯨⭣ᒈើà³á™‚䯾⭜蜷㶭ï¥äˆê’‹â¿˜ì‚”ì˜àª™ê§ºçšâ¯˜ëŠŒá”‘ꊎ癉ﰮ碿çŸæ¶¦è‹·ê“ˆëªâƒ¸á›¬è³¶å”Ÿï²¸æ¤±ê± í‘¸ëŒ¦í‘ ç€ªáµ²è¶°ã—«ã¯£á²²áš»æœ°â¯¥ì«’胤룪軄㬒땬᷒鄅鄗茿삣ì›ã±¢âŸ¯ãŸ½ï…°é±‚çˆî©±é è–†æ ‘ [ 74.933565][ T1049] usb 4-1: SerialNumber: syz [ 75.135312][ T1276] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 75.170124][ T1274] fuse: Bad value for 'fd' [ 75.186089][ T1216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.281'. [ 75.202456][ T1216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 75.230970][ T1216] loop3: detected capacity change from 0 to 512 [ 75.295691][ T1216] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 75.413105][ T30] audit: type=1400 audit(1792735764.044:701): avc: denied { ioctl } for pid=1215 comm="syz.3.281" path="socket:[19398]" dev="sockfs" ino=19398 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.487431][ T1287] loop4: detected capacity change from 0 to 512 [ 75.593396][ T1287] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.310: inode has both inline data and extents flags [ 75.615403][ T1287] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.310: couldn't read orphan inode 15 (err -117) [ 75.639687][ T1287] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.960924][ T1299] loop2: detected capacity change from 0 to 256 [ 75.992226][ T1299] FAT-fs (loop2): Unrecognized mount option "shortname" or missing value [ 76.025700][ T1295] loop1: detected capacity change from 0 to 128 [ 76.088080][ T1295] FAT-fs (loop1): Unrecognized mount option "obâÄÓilQÍD12ø4†[\z«Jãc\¡¼à†örˆŸÔP`@‚¶åõ%¦U8 [ 76.088080][ T1295] *5|¥lXâk†8´e._mG€+ Õcˆ" or missing value [ 76.243708][ T1309] loop2: detected capacity change from 0 to 512 [ 76.267191][ T1309] ------------[ cut here ]------------ [ 76.272804][ T1309] EA inode 11 i_nlink=0 [ 76.272921][ T1309] WARNING: CPU: 1 PID: 1309 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4f9/0x560 [ 76.288085][ T1309] Modules linked in: [ 76.292090][ T1309] CPU: 1 PID: 1309 Comm: syz.2.317 Not tainted syzkaller #0 [ 76.299535][ T1309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.309785][ T1309] RIP: 0010:ext4_xattr_inode_update_ref+0x4f9/0x560 [ 76.316521][ T1309] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 aa bc bd ff 49 8b 34 24 48 c7 c7 c0 93 4f 85 44 89 fa e8 57 0e c0 02 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 76.336542][ T1309] RSP: 0018:ffffc90000cb7240 EFLAGS: 00010246 [ 76.342893][ T1309] RAX: 0640ec643ffad200 RBX: ffff888111e06610 RCX: 0000000000080000 [ 76.351125][ T1309] RDX: ffffc9000233f000 RSI: 0000000000005ea3 RDI: 0000000000005ea4 [ 76.359214][ T1309] RBP: ffffc90000cb7330 R08: ffff8881f7127493 R09: 1ffff1103ee24e92 [ 76.367337][ T1309] R10: dffffc0000000000 R11: ffffed103ee24e93 R12: ffff888111e064f0 [ 76.375636][ T1309] R13: dffffc0000000000 R14: ffff888111e064b0 R15: 0000000000000000 [ 76.383802][ T1309] FS: 00007fcf5dc946c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 76.392876][ T1309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.399626][ T1309] CR2: 00007f94aebee000 CR3: 000000013e3aa000 CR4: 00000000003506a0 [ 76.407740][ T1309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.415885][ T1309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.424073][ T1309] Call Trace: [ 76.427527][ T1309] [ 76.430547][ T1309] ? ext4_xattr_block_csum+0x590/0x590 [ 76.436221][ T1309] ? __ext4_journal_ensure_credits+0x30/0x470 [ 76.442501][ T1309] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 76.448511][ T1309] ? errseq_check+0x41/0x80 [ 76.453147][ T1309] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 76.458901][ T1309] ? __ext4_journal_ensure_credits+0x470/0x470 [ 76.465188][ T1309] ? ext4_get_inode_loc+0x100/0x130 [ 76.470500][ T1309] ext4_xattr_delete_inode+0xada/0xca0 [ 76.476090][ T1309] ? ext4_expand_extra_isize_ea+0x19d0/0x19d0 [ 76.482275][ T1309] ext4_evict_inode+0xe0a/0x1420 [ 76.487368][ T1309] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 76.493427][ T1309] ? _raw_spin_unlock+0x4d/0x70 [ 76.498615][ T1309] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 76.504742][ T1309] evict+0x4b6/0x8b0 [ 76.508763][ T1309] ? proc_nr_inodes+0x310/0x310 [ 76.513898][ T1309] ? _raw_spin_lock+0x94/0xf0 [ 76.518690][ T1309] ? _raw_spin_trylock_bh+0x150/0x150 [ 76.524173][ T1309] ? __kasan_check_write+0x14/0x20 [ 76.529581][ T1309] iput+0x651/0x7e0 [ 76.534448][ T1309] ext4_process_orphan+0x298/0x300 [ 76.539800][ T1309] ext4_orphan_cleanup+0xb8c/0x12a0 [ 76.545085][ T1309] ? ext4_orphan_del+0xc90/0xc90 [ 76.550245][ T1309] ? errseq_check_and_advance+0x66/0x130 [ 76.556572][ T1309] ext4_fill_super+0x84ce/0x8bf0 [ 76.561740][ T1309] ? ext4_mount+0x40/0x40 [ 76.566338][ T1309] ? set_blocksize+0x1e9/0x360 [ 76.571253][ T1309] ? sb_set_blocksize+0xaa/0xf0 [ 76.576347][ T1309] ? ext4_mount+0x40/0x40 [ 76.581449][ T1309] mount_bdev+0x28d/0x3c0 [ 76.585878][ T1309] ? ext4_mount+0x40/0x40 [ 76.590429][ T1309] ext4_mount+0x34/0x40 [ 76.594836][ T1309] legacy_get_tree+0xed/0x190 [ 76.599601][ T1309] ? ext4_errno_to_code+0x160/0x160 [ 76.605175][ T1309] vfs_get_tree+0x89/0x260 [ 77.190370][ T1049] usb 4-1: USB disconnect, device number 3 [ 77.218947][ T1309] do_new_mount+0x251/0xb40 [ 77.227650][ T1309] ? security_capable+0x87/0xb0 [ 77.234243][ T1309] path_mount+0x640/0xff0 [ 77.239345][ T1309] __se_sys_mount+0x320/0x390 [ 77.244162][ T1309] ? __x64_sys_mount+0xd0/0xd0 [ 77.249376][ T1309] __x64_sys_mount+0xbf/0xd0 [ 77.254091][ T1309] x64_sys_call+0x6bf/0x9a0 [ 77.258872][ T1309] do_syscall_64+0x4c/0xa0 [ 77.264316][ T1309] ? clear_bhb_loop+0x50/0xa0 [ 77.269432][ T1309] ? clear_bhb_loop+0x50/0xa0 [ 77.344004][ T1309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.350102][ T1309] RIP: 0033:0x7fcf5f23c7ca [ 77.355749][ T1309] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.375590][ T1309] RSP: 002b:00007fcf5dc93e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.388251][ T1309] RAX: ffffffffffffffda RBX: 00007fcf5dc93ee0 RCX: 00007fcf5f23c7ca [ 77.396373][ T1309] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fcf5dc93ea0 [ 77.404513][ T1309] RBP: 0000200000000180 R08: 00007fcf5dc93ee0 R09: 0000000000000008 [ 77.413087][ T1309] R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000000 [ 77.421408][ T1309] R13: 00007fcf5dc93ea0 R14: 000000000000048d R15: 000000000000002c [ 77.424923][ T1330] loop3: detected capacity change from 0 to 256 [ 77.430010][ T1309] [ 77.439169][ T1309] ---[ end trace c57c04ef62f52da7 ]--- [ 77.444872][ T1309] EXT4-fs (loop2): 1 orphan inode deleted [ 77.450698][ T1309] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,noquota,max_dir_size_kb=0x0000000000200004,debug_want_extra_isize=0x000000000000003a,grpquota,inlinecrypt,nodelalloc,. Quota mode: writeback. [ 77.493927][ T1330] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 77.516233][ T1309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 77.529748][ T1330] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 77.551604][ T30] audit: type=1400 audit(1792735766.190:702): avc: denied { write } for pid=1329 comm="syz.3.325" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.577461][ T30] audit: type=1400 audit(1792735766.210:703): avc: denied { add_name } for pid=1329 comm="syz.3.325" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.598382][ T30] audit: type=1400 audit(1792735766.210:704): avc: denied { create } for pid=1329 comm="syz.3.325" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.619421][ T30] audit: type=1400 audit(1792735766.210:705): avc: denied { associate } for pid=1329 comm="syz.3.325" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.645616][ T30] audit: type=1400 audit(1792735766.210:706): avc: denied { read append open } for pid=1329 comm="syz.3.325" path="/64/bus/bus/file0" dev="loop3" ino=1048667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.834259][ T1330] netlink: 48 bytes leftover after parsing attributes in process `syz.3.325'. [ 78.284144][ T1353] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 78.524771][ T1343] loop3: detected capacity change from 0 to 40427 [ 78.576804][ T1343] F2FS-fs (loop3): invalid crc value [ 78.813318][ T1343] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.849441][ T1370] loop1: detected capacity change from 0 to 512 [ 78.870331][ T1370] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 78.878561][ T1370] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 78.879601][ T30] audit: type=1400 audit(1792735767.517:707): avc: denied { listen } for pid=1371 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.888161][ T1370] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #13: comm syz.1.336: iget: bad i_size value: 12154757448730 [ 78.919987][ T1370] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.336: couldn't read orphan inode 13 (err -117) [ 78.932263][ T1370] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 78.939223][ T30] audit: type=1400 audit(1792735767.537:708): avc: denied { accept } for pid=1371 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.979609][ T1343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.002485][ T30] audit: type=1400 audit(1792735767.607:709): avc: denied { create } for pid=1371 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.058708][ T30] audit: type=1400 audit(1792735767.607:710): avc: denied { setopt } for pid=1371 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.471807][ T1389] netlink: 52 bytes leftover after parsing attributes in process `syz.0.342'. [ 79.597260][ T1395] loop4: detected capacity change from 0 to 512 [ 79.732162][ T1395] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 79.742198][ T1395] FAT-fs (loop4): Filesystem has been set read-only [ 79.756443][ T1395] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 80.858892][ T30] audit: type=1400 audit(1792735769.483:711): avc: denied { mounton } for pid=1409 comm="syz.1.346" path="/63/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 80.859071][ T1410] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.950599][ T30] audit: type=1400 audit(1792735769.573:712): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.008330][ T1422] loop4: detected capacity change from 0 to 256 [ 81.093824][ T30] audit: type=1400 audit(1792735769.623:713): avc: denied { ioctl } for pid=1407 comm="syz.0.351" path="socket:[20629]" dev="sockfs" ino=20629 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.292165][ T1434] loop2: detected capacity change from 0 to 256 [ 81.345540][ T1434] exfat: Unknown parameter '.' [ 81.989798][ T1441] loop4: detected capacity change from 0 to 128 [ 82.070221][ T1441] FAT-fs (loop4): Unrecognized mount option "obâÄÓilQÍD12ø4†[\z«Jãc\¡¼à†örˆŸÔP`@‚¶åõ%¦U8 [ 82.070221][ T1441] *5|¥lXâk†8´e._mG€+ Õcˆ" or missing value [ 82.260617][ T1447] loop1: detected capacity change from 0 to 32768 [ 82.268655][ T1458] syz.1.362 (1458): drop_caches: 0 [ 82.299415][ T334] loop1: p1 p2 p3 < p5 > [ 82.304417][ T334] loop1: p1 size 242222080 extends beyond EOD, truncated [ 82.312816][ T334] loop1: p2 start 4294967295 is beyond EOD, truncated [ 82.323809][ T1447] loop1: p1 p2 p3 < p5 > [ 82.328522][ T1447] loop1: p1 size 242222080 extends beyond EOD, truncated [ 82.338070][ T1447] loop1: p2 start 4294967295 is beyond EOD, truncated [ 82.654677][ T1466] loop3: detected capacity change from 0 to 256 [ 82.801699][ T1473] loop4: detected capacity change from 0 to 256 [ 82.969494][ T1480] loop4: detected capacity change from 0 to 512 [ 83.013130][ T1480] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 83.021169][ T1480] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 83.029327][ T1480] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #13: comm syz.4.373: iget: bad i_size value: 12154757448730 [ 83.042451][ T1480] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.373: couldn't read orphan inode 13 (err -117) [ 83.054788][ T1480] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 83.556055][ T1492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.376'. [ 84.305670][ T1499] loop4: detected capacity change from 0 to 256 [ 84.408196][ T1499] FAT-fs (loop4): Unrecognized mount option "shortname" or missing value [ 84.876440][ T1501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 84.928463][ T1502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1502 comm=syz.1.379 [ 84.961331][ T1485] loop2: detected capacity change from 0 to 40427 [ 84.998899][ T1510] netlink: 'syz.1.383': attribute type 4 has an invalid length. [ 85.004269][ T1291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.018307][ T30] audit: type=1400 audit(1792735773.635:714): avc: denied { search } for pid=1509 comm="syz.1.383" name="/" dev="configfs" ino=2686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.045341][ T1485] F2FS-fs (loop2): invalid crc value [ 85.060566][ T1485] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.132393][ T1485] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.525345][ T1291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.526344][ T1519] loop2: detected capacity change from 0 to 256 [ 85.558957][ T1508] loop4: detected capacity change from 0 to 131072 [ 85.605575][ T1291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.610199][ T1508] F2FS-fs (loop4): Test dummy encryption mode enabled [ 85.615856][ T1291] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.632530][ T1291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 85.635533][ T1508] F2FS-fs (loop4): invalid crc value [ 85.650195][ T1508] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.674788][ T1508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.687858][ T30] audit: type=1400 audit(1792735774.304:715): avc: denied { create } for pid=1507 comm="syz.4.382" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.708446][ T30] audit: type=1400 audit(1792735774.304:716): avc: denied { read write open } for pid=1507 comm="syz.4.382" path="/77/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.731922][ T30] audit: type=1400 audit(1792735774.304:717): avc: denied { ioctl } for pid=1507 comm="syz.4.382" path="/77/file1/file1" dev="loop4" ino=10 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.825011][ T1291] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 85.834947][ T1291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.848086][ T1291] usb 4-1: Product: syz [ 85.852286][ T1291] usb 4-1: Manufacturer: syz [ 85.857112][ T1291] usb 4-1: SerialNumber: syz [ 86.208979][ T1291] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 86.243761][ T1291] usb 4-1: USB disconnect, device number 4 [ 86.266000][ T1538] loop4: detected capacity change from 0 to 256 [ 86.338525][ T1538] FAT-fs (loop4): Unrecognized mount option "shortname" or missing value [ 86.402772][ T30] audit: type=1400 audit(1792735775.013:718): avc: denied { create } for pid=1542 comm="syz.4.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 86.421853][ T1548] netlink: 'syz.4.394': attribute type 4 has an invalid length. [ 86.444971][ T1550] Illegal XDP return value 4294967274, expect packet loss! [ 86.495984][ T30] audit: type=1400 audit(1792735775.062:719): avc: denied { read } for pid=1549 comm="syz.2.395" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.504738][ T1554] netlink: 165 bytes leftover after parsing attributes in process `syz.2.395'. [ 86.519751][ T30] audit: type=1400 audit(1792735775.062:720): avc: denied { open } for pid=1549 comm="syz.2.395" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.596572][ T1552] loop4: detected capacity change from 0 to 16 [ 86.627495][ T1552] erofs: (device loop4): mounted with root inode @ nid 36. [ 86.742451][ T1562] loop3: detected capacity change from 0 to 256 [ 86.759415][ T1562] FAT-fs (loop3): Unrecognized mount option "shortname" or missing value [ 86.768155][ T1567] loop4: detected capacity change from 0 to 256 [ 86.781198][ T1568] loop2: detected capacity change from 0 to 512 [ 86.800652][ T1570] loop3: detected capacity change from 0 to 256 [ 86.882294][ T1568] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 86.909317][ T1568] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.033659][ T1595] loop3: detected capacity change from 0 to 8192 [ 88.133038][ T1601] FAT-fs (loop4): Unrecognized mount option "shortname" or missing value [ 88.310776][ T306] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 88.422359][ T1611] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.472831][ T30] audit: type=1326 audit(1792735777.089:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.416" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf782c5559 code=0x7ffc0000 [ 88.512448][ T30] audit: type=1326 audit(1792735777.089:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.416" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf782c5559 code=0x7ffc0000 [ 88.545744][ T1607] x_tables: unsorted underflow at hook 4 [ 88.581180][ T30] audit: type=1326 audit(1792735777.089:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1606 comm="syz.4.416" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fcf782c5559 code=0x7ffc0000 [ 88.881838][ T306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.960934][ T1623] F2FS-fs (loop4): invalid crc value [ 88.973896][ T1623] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.002053][ T306] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 89.013170][ T306] usb 4-1: can't read configurations, error -71 [ 89.031138][ T1623] F2FS-fs (loop4): Start checkpoint disabled! [ 89.075648][ T1623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 89.477465][ T402] attempt to access beyond end of device [ 89.477465][ T402] loop4: rw=1, want=80240, limit=40427 [ 89.600974][ T1642] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.425: Failed to acquire dquot type 0 [ 89.614368][ T1642] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 89.633460][ T1642] EXT4-fs (loop2): 1 truncate cleaned up [ 89.639166][ T1642] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.786897][ T402] attempt to access beyond end of device [ 89.786897][ T402] loop4: rw=1, want=81920, limit=40427 [ 89.804173][ T1645] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.831003][ T402] attempt to access beyond end of device [ 89.831003][ T402] loop4: rw=1, want=51416, limit=40427 [ 89.848054][ T402] attempt to access beyond end of device [ 89.848054][ T402] loop4: rw=1, want=53248, limit=40427 [ 89.870454][ T402] attempt to access beyond end of device [ 89.870454][ T402] loop4: rw=1, want=75776, limit=40427 [ 89.888096][ T402] attempt to access beyond end of device [ 89.888096][ T402] loop4: rw=1, want=77824, limit=40427 [ 89.913003][ T402] attempt to access beyond end of device [ 89.913003][ T402] loop4: rw=1, want=84024, limit=40427 [ 89.949237][ T402] attempt to access beyond end of device [ 89.949237][ T402] loop4: rw=1, want=86016, limit=40427 [ 89.973510][ T402] attempt to access beyond end of device [ 89.973510][ T402] loop4: rw=1, want=86024, limit=40427 [ 89.985502][ T402] attempt to access beyond end of device [ 89.985502][ T402] loop4: rw=1, want=86032, limit=40427 [ 90.630683][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 90.630868][ T30] audit: type=1400 audit(1792735779.135:775): avc: denied { mount } for pid=1657 comm="syz.2.432" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 90.809165][ T30] audit: type=1400 audit(1792735779.135:776): avc: denied { search } for pid=1657 comm="syz.2.432" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.854660][ T30] audit: type=1400 audit(1792735779.135:777): avc: denied { read write } for pid=1657 comm="syz.2.432" name="trigger" dev="tracefs" ino=2557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 90.898389][ T30] audit: type=1400 audit(1792735779.145:778): avc: denied { open } for pid=1657 comm="syz.2.432" path="/74/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=2557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 90.979186][ T1649] set_capacity_and_notify: 4 callbacks suppressed [ 90.979204][ T1649] loop1: detected capacity change from 0 to 40427 [ 91.049609][ T1649] F2FS-fs (loop1): invalid crc value [ 91.063360][ T1649] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.138172][ T1674] loop4: detected capacity change from 0 to 512 [ 91.169460][ T1674] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 91.200587][ T1674] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 91.210461][ T1674] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 91.220260][ T1674] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 91.354333][ T30] audit: type=1400 audit(1792735779.953:779): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 91.409450][ T1674] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 91.417568][ T1674] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e11c, mo2=0000] [ 91.425532][ T1674] EXT4-fs (loop4): failed to initialize system zone (-117) [ 91.433088][ T1674] EXT4-fs (loop4): mount failed [ 91.469048][ T1653] loop3: detected capacity change from 0 to 40427 [ 91.482282][ T1649] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.490439][ T1673] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 91.522555][ T1653] F2FS-fs (loop3): invalid crc value [ 91.546424][ T1653] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.595059][ T1653] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.687189][ T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.752687][ T1688] loop1: detected capacity change from 0 to 256 [ 92.741897][ T1701] loop3: detected capacity change from 0 to 1024 [ 92.803034][ T1688] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 92.869564][ T1688] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 92.876516][ T1701] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 92.888219][ T1701] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 92.897796][ T1701] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.440: Failed to acquire dquot type 0 [ 92.909798][ T1701] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 92.925124][ T1701] EXT4-fs (loop3): 1 truncate cleaned up [ 92.931301][ T1701] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.931683][ T1711] loop4: detected capacity change from 0 to 128 [ 93.029675][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 93.071202][ T30] audit: type=1400 audit(1792735781.680:780): avc: denied { create } for pid=1703 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.146644][ T1714] mmap: syz.1.447 (1714) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 93.152159][ T30] audit: type=1326 audit(1792735781.750:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.1.447" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b4827559 code=0x7ffc0000 [ 93.180088][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.183429][ T30] audit: type=1326 audit(1792735781.750:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1713 comm="syz.1.447" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f82b4827559 code=0x7ffc0000 [ 93.200014][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.371059][ T1722] FAULT_INJECTION: forcing a failure. [ 93.371059][ T1722] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.411365][ T1722] CPU: 1 PID: 1722 Comm: syz.1.450 Tainted: G W syzkaller #0 [ 93.420103][ T1722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.430269][ T1722] Call Trace: [ 93.433568][ T1722] [ 93.436513][ T1722] __dump_stack+0x21/0x30 [ 93.440869][ T1722] dump_stack_lvl+0x110/0x170 [ 93.445652][ T1722] ? show_regs_print_info+0x20/0x20 [ 93.450869][ T1722] ? stack_trace_save+0xa6/0xf0 [ 93.455736][ T1722] ? __stack_depot_save+0x34/0x480 [ 93.460965][ T1722] ? path_openat+0x284f/0x2f80 [ 93.465831][ T1722] dump_stack+0x15/0x20 [ 93.470260][ T1722] should_fail+0x3ab/0x500 [ 93.474714][ T1722] should_fail_usercopy+0x1a/0x20 [ 93.479760][ T1722] _copy_from_user+0x20/0xd0 [ 93.484360][ T1722] __copy_msghdr_from_user+0xc9/0x630 [ 93.489750][ T1722] ? _kstrtoull+0x3bb/0x4c0 [ 93.494265][ T1722] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 93.499571][ T1722] ? kstrtouint_from_user+0x1c4/0x220 [ 93.504958][ T1722] ___sys_sendmsg+0x19a/0x2e0 [ 93.509647][ T1722] ? __sys_sendmsg+0x280/0x280 [ 93.514516][ T1722] ? __fdget+0x1a1/0x230 [ 93.518768][ T1722] __x64_sys_sendmsg+0x201/0x2d0 [ 93.523734][ T1722] ? ___sys_sendmsg+0x2e0/0x2e0 [ 93.528619][ T1722] ? ksys_write+0x1fa/0x260 [ 93.533224][ T1722] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 93.539314][ T1722] x64_sys_call+0x4b/0x9a0 [ 93.543861][ T1722] do_syscall_64+0x4c/0xa0 [ 93.548297][ T1722] ? clear_bhb_loop+0x50/0xa0 [ 93.553001][ T1722] ? clear_bhb_loop+0x50/0xa0 [ 93.557794][ T1722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.560752][ T60] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 93.563709][ T1722] RIP: 0033:0x7f82b4827559 [ 93.563731][ T1722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.579373][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.596789][ T1722] RSP: 002b:00007f82b3280028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.596820][ T1722] RAX: ffffffffffffffda RBX: 00007f82b4aaefa0 RCX: 00007f82b4827559 [ 93.596833][ T1722] RDX: 0000000000000000 RSI: 0000200000001900 RDI: 0000000000000003 [ 93.596846][ T1722] RBP: 00007f82b3280090 R08: 0000000000000000 R09: 0000000000000000 [ 93.596858][ T1722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.596869][ T1722] R13: 00007f82b4aaf038 R14: 00007f82b4aaefa0 R15: 00007fff6c5bc548 [ 93.596886][ T1722] [ 93.630969][ T60] usb 3-1: Product: syz [ 93.687166][ T1725] loop1: detected capacity change from 0 to 256 [ 93.702365][ T60] usb 3-1: Manufacturer: syz [ 93.726365][ T60] usb 3-1: SerialNumber: syz [ 93.869975][ T1726] loop3: detected capacity change from 0 to 40427 [ 94.138506][ T1726] F2FS-fs (loop3): invalid crc value [ 94.208544][ T1726] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.299417][ T1726] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 94.745710][ T1749] loop1: detected capacity change from 0 to 512 [ 94.756368][ T1754] loop2: detected capacity change from 0 to 128 [ 94.815017][ T1759] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 94.833262][ T60] usb 3-1: unit 6 not found! [ 94.838395][ T60] usb 3-1: unit 0: unexpected type 0x0d [ 94.850082][ T60] usb 3-1: USB disconnect, device number 3 [ 94.862873][ T1754] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.895508][ T1754] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.952211][ T1763] ip_tables: iptables: counters copy to user failed while replacing table [ 95.041132][ T1751] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 95.049107][ T1751] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 95.058420][ T1751] F2FS-fs (loop4): invalid crc value [ 95.065222][ T1751] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 95.074240][ T479] udevd[479]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.109241][ T1751] F2FS-fs (loop4): recover fsync data on readonly fs [ 95.191028][ T1751] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 95.202002][ T1751] F2FS-fs (loop4): checkpoint=disable on readonly fs [ 95.506904][ T1787] netlink: 44 bytes leftover after parsing attributes in process `syz.1.468'. [ 96.093516][ T1807] ip_tables: iptables: counters copy to user failed while replacing table [ 96.137270][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 96.137287][ T30] audit: type=1400 audit(1792735784.734:801): avc: denied { bind } for pid=1810 comm="syz.2.478" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.178675][ T1812] set_capacity_and_notify: 1 callbacks suppressed [ 96.178692][ T1812] loop3: detected capacity change from 0 to 128 [ 96.182277][ T30] audit: type=1400 audit(1792735784.734:802): avc: denied { name_bind } for pid=1810 comm="syz.2.478" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 96.216669][ T1812] FAT-fs (loop3): Unrecognized mount option "obâÄÓilQÍD12ø4†[\z«Jãc\¡¼à†örˆŸÔP`@‚¶åõ%¦U8 [ 96.216669][ T1812] *5|¥lXâk†8´e._mG€+ Õcˆ" or missing value [ 96.226338][ T30] audit: type=1400 audit(1792735784.734:803): avc: denied { node_bind } for pid=1810 comm="syz.2.478" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 96.284197][ T1818] loop2: detected capacity change from 0 to 512 [ 96.336871][ T30] audit: type=1400 audit(1792735784.934:804): avc: denied { mounton } for pid=1817 comm="syz.2.481" path="/syzcgroup/unified/syz2/bus" dev="cgroup2" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 96.371403][ T30] audit: type=1400 audit(1792735784.964:805): avc: denied { watch } for pid=1815 comm="syz.0.480" path="/119/file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.450328][ T1824] ip_tables: iptables: counters copy to user failed while replacing table [ 96.460369][ T1818] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.468187][ T1818] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 96.477420][ T1818] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 96.496241][ T1818] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.481: Failed to acquire dquot type 0 [ 96.516258][ T1818] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 96.526256][ T1818] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 96.540436][ T1818] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.481: Failed to acquire dquot type 0 [ 96.564110][ T1818] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.481: bg 0: block 64: padding at end of block bitmap is not set [ 96.592586][ T1818] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 96.611261][ T1818] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 96.629184][ T1818] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.481: Failed to acquire dquot type 0 [ 96.652861][ T1818] EXT4-fs (loop2): 1 orphan inode deleted [ 96.665368][ T1818] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback. [ 96.737153][ T1829] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(6) [ 97.000419][ T1839] loop3: detected capacity change from 0 to 512 [ 97.049824][ T1845] tipc: Enabling of bearer rejected, failed to enable media [ 97.072770][ T1845] tipc: New replicast peer: 255.255.255.255 [ 97.079430][ T1845] tipc: Enabled bearer , priority 10 [ 97.090283][ T1845] loop4: detected capacity change from 0 to 512 [ 97.122120][ T1845] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 97.132931][ T1845] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.140345][ T1845] EXT4-fs error (device loop4): ext4_quota_enable:6435: inode #15: comm syz.4.492: iget: bad i_size value: 360287970189639690 [ 97.154554][ T1845] EXT4-fs error (device loop4): ext4_quota_enable:6438: comm syz.4.492: Bad quota inode: 15, type: 2 [ 97.167587][ T1845] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 97.182562][ T1845] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 97.189366][ T1845] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 97.309067][ T1827] loop1: detected capacity change from 0 to 131072 [ 97.359404][ T1868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 97.367852][ T1827] F2FS-fs (loop1): invalid crc value ¹[ 97.409544][ T1827] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.460196][ T1827] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 97.468892][ T1876] netlink: 'syz.0.501': attribute type 4 has an invalid length. [ 97.477062][ T1827] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 97.508112][ T1049] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.668943][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 97.675231][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 97.684193][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.694272][ T286] Call Trace: [ 97.697627][ T286] [ 97.700587][ T286] __dump_stack+0x21/0x30 [ 97.704970][ T286] dump_stack_lvl+0x110/0x170 [ 97.710030][ T286] ? show_regs_print_info+0x20/0x20 [ 97.715249][ T286] ? page_cache_prev_miss+0x290/0x290 [ 97.720645][ T286] dump_stack+0x15/0x20 [ 97.724842][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 97.730338][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 97.735830][ T286] ? f2fs_get_block+0x140/0x140 [ 97.740720][ T286] f2fs_find_data_page+0x189/0x3c0 [ 97.745846][ T286] ? f2fs_readdir+0x3bb/0x9e0 [ 97.750769][ T286] f2fs_readdir+0x4b4/0x9e0 [ 97.755307][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 97.760539][ T286] ? down_read_killable+0xc1/0x110 [ 97.765763][ T286] ? security_file_permission+0x83/0xa0 [ 97.771368][ T286] iterate_dir+0x25c/0x600 [ 97.775806][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 97.781024][ T286] __se_sys_getdents64+0xf2/0x250 [ 97.786066][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 97.791289][ T286] ? filldir+0x660/0x660 [ 97.795616][ T286] ? debug_smp_processor_id+0x17/0x20 [ 97.800980][ T286] __x64_sys_getdents64+0x7b/0x90 [ 97.805991][ T286] x64_sys_call+0x592/0x9a0 [ 97.810493][ T286] do_syscall_64+0x4c/0xa0 [ 97.814921][ T286] ? clear_bhb_loop+0x50/0xa0 [ 97.819591][ T286] ? clear_bhb_loop+0x50/0xa0 [ 97.824275][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.830344][ T286] RIP: 0033:0x7f82b484fef3 [ 97.834752][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 97.854347][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 97.862756][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 97.868824][ T1049] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.870815][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 97.870840][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 97.880665][ T1049] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.888532][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 97.888552][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 97.888569][ T286] [ 97.926786][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 97.937792][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 97.946686][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.956754][ T286] Call Trace: [ 97.960049][ T286] [ 97.962993][ T286] __dump_stack+0x21/0x30 [ 97.967347][ T286] dump_stack_lvl+0x110/0x170 [ 97.972052][ T286] ? show_regs_print_info+0x20/0x20 [ 97.977243][ T286] ? page_cache_prev_miss+0x290/0x290 [ 97.982616][ T286] dump_stack+0x15/0x20 [ 97.986851][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 97.992220][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 97.997792][ T286] ? f2fs_get_block+0x140/0x140 [ 98.002674][ T286] ? may_link+0x3e8/0x560 [ 98.007041][ T286] ? may_create+0x440/0x440 [ 98.011569][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 98.016968][ T286] f2fs_empty_dir+0xa6/0x230 [ 98.021617][ T286] f2fs_rmdir+0x3f/0x70 [ 98.025788][ T286] vfs_rmdir+0x1ae/0x450 [ 98.030047][ T286] do_rmdir+0x261/0x6b0 [ 98.034314][ T286] ? d_delete_notify+0x160/0x160 [ 98.039269][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 98.044133][ T286] x64_sys_call+0x4c0/0x9a0 [ 98.048652][ T286] do_syscall_64+0x4c/0xa0 [ 98.053117][ T286] ? clear_bhb_loop+0x50/0xa0 [ 98.057790][ T286] ? clear_bhb_loop+0x50/0xa0 [ 98.062466][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.068442][ T286] RIP: 0033:0x7f82b4826677 [ 98.072852][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.092468][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 98.100888][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 98.108856][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 98.116821][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 98.124787][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 98.132759][ T286] R13: 00007f82b48bdefb R14: 0000000000017cf7 R15: 00007fff6c5bc940 [ 98.140853][ T286] [ 98.191866][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 98.211173][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 98.220079][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.230144][ T286] Call Trace: [ 98.233430][ T286] [ 98.236369][ T286] __dump_stack+0x21/0x30 [ 98.240715][ T286] dump_stack_lvl+0x110/0x170 [ 98.245400][ T286] ? show_regs_print_info+0x20/0x20 [ 98.250612][ T286] ? page_cache_prev_miss+0x290/0x290 [ 98.256003][ T286] dump_stack+0x15/0x20 [ 98.260176][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 98.265586][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 98.271076][ T286] ? f2fs_get_block+0x140/0x140 [ 98.275945][ T286] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 98.281606][ T286] f2fs_find_data_page+0x189/0x3c0 [ 98.286919][ T286] f2fs_readdir+0x4b4/0x9e0 [ 98.291647][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 98.296869][ T286] ? down_read_killable+0xc1/0x110 [ 98.302001][ T286] ? security_file_permission+0x83/0xa0 [ 98.307651][ T286] iterate_dir+0x25c/0x600 [ 98.312259][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 98.317570][ T286] __se_sys_getdents64+0xf2/0x250 [ 98.322623][ T286] ? release_firmware_map_entry+0x190/0x190 [ 98.328545][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 98.333748][ T286] ? filldir+0x660/0x660 [ 98.337994][ T286] ? __kasan_check_write+0x14/0x20 [ 98.343103][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 98.348216][ T286] __x64_sys_getdents64+0x7b/0x90 [ 98.353251][ T286] x64_sys_call+0x592/0x9a0 [ 98.357759][ T286] do_syscall_64+0x4c/0xa0 [ 98.362191][ T286] ? clear_bhb_loop+0x50/0xa0 [ 98.367220][ T286] ? clear_bhb_loop+0x50/0xa0 [ 98.372086][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.378074][ T286] RIP: 0033:0x7f82b484fef3 [ 98.382496][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 98.402365][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 98.410903][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 98.418897][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 98.426865][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 98.434922][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 98.442892][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 98.450885][ T286] [ 98.457647][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.465656][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.480164][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 98.486236][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 98.495115][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.505293][ T286] Call Trace: [ 98.508588][ T286] [ 98.510095][ T1049] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 98.511539][ T286] __dump_stack+0x21/0x30 [ 98.523843][ T1049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.524989][ T286] dump_stack_lvl+0x110/0x170 [ 98.537647][ T286] ? show_regs_print_info+0x20/0x20 [ 98.539180][ T1049] usb 5-1: Product: syz [ 98.542859][ T286] ? page_cache_prev_miss+0x290/0x290 [ 98.542883][ T286] dump_stack+0x15/0x20 [ 98.542900][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 98.560499][ T1049] usb 5-1: Manufacturer: syz [ 98.567940][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 98.578390][ T286] ? f2fs_get_block+0x140/0x140 [ 98.578825][ T1049] usb 5-1: SerialNumber: syz [ 98.583275][ T286] ? may_link+0x3e8/0x560 [ 98.583300][ T286] ? may_create+0x440/0x440 [ 98.583317][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 98.583334][ T286] f2fs_empty_dir+0xa6/0x230 [ 98.583353][ T286] f2fs_rmdir+0x3f/0x70 [ 98.611327][ T286] vfs_rmdir+0x1ae/0x450 [ 98.615593][ T286] do_rmdir+0x261/0x6b0 [ 98.619890][ T286] ? d_delete_notify+0x160/0x160 [ 98.624933][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 98.629797][ T286] x64_sys_call+0x4c0/0x9a0 [ 98.630865][ T1049] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 98.634321][ T286] do_syscall_64+0x4c/0xa0 [ 98.634345][ T286] ? clear_bhb_loop+0x50/0xa0 [ 98.650288][ T286] ? clear_bhb_loop+0x50/0xa0 [ 98.655082][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.661102][ T286] RIP: 0033:0x7f82b4826677 [ 98.665541][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.685361][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 98.693833][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 98.701970][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 98.705488][ T1890] loop3: detected capacity change from 0 to 40427 [ 98.710420][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 98.710438][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 98.710451][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 98.710467][ T286] [ 98.720644][ T1049] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 98.720644][ T1049] Please send a copy of this message to and [ 98.733924][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 98.776335][ T1888] syz.0.506 (1888) used greatest stack depth: 20672 bytes left [ 98.784193][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 98.793335][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.803456][ T286] Call Trace: [ 98.806847][ T286] [ 98.809878][ T286] __dump_stack+0x21/0x30 [ 98.814317][ T286] dump_stack_lvl+0x110/0x170 [ 98.819107][ T286] ? show_regs_print_info+0x20/0x20 [ 98.824398][ T286] ? page_cache_prev_miss+0x290/0x290 [ 98.829777][ T286] dump_stack+0x15/0x20 [ 98.833959][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 98.839333][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 98.844789][ T286] ? f2fs_get_block+0x140/0x140 [ 98.849643][ T286] ? memcpy+0x56/0x70 [ 98.853641][ T286] f2fs_find_data_page+0x189/0x3c0 [ 98.858877][ T286] f2fs_readdir+0x4b4/0x9e0 [ 98.863745][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 98.868943][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 98.874375][ T286] ? down_read_killable+0xc1/0x110 [ 98.879499][ T286] ? security_file_permission+0x83/0xa0 [ 98.885050][ T286] iterate_dir+0x25c/0x600 [ 98.889467][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 98.894665][ T286] __se_sys_getdents64+0xf2/0x250 [ 98.899775][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 98.904968][ T286] ? filldir+0x660/0x660 [ 98.909231][ T286] ? __x64_sys_umount+0x12d/0x170 [ 98.914363][ T286] ? debug_smp_processor_id+0x17/0x20 [ 98.919821][ T286] __x64_sys_getdents64+0x7b/0x90 [ 98.924858][ T286] x64_sys_call+0x592/0x9a0 [ 98.929378][ T286] do_syscall_64+0x4c/0xa0 [ 98.933908][ T286] ? clear_bhb_loop+0x50/0xa0 [ 98.938582][ T286] ? clear_bhb_loop+0x50/0xa0 [ 98.943256][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.949146][ T286] RIP: 0033:0x7f82b484fef3 [ 98.953745][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 98.973348][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 98.981850][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 98.989914][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 98.997971][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 99.006038][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 99.014028][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 99.022406][ T286] [ 99.035475][ T1890] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 99.051074][ T1890] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 99.060069][ T1909] netlink: 'syz.2.512': attribute type 4 has an invalid length. [ 99.068634][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 99.075291][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 99.084170][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.094366][ T286] Call Trace: [ 99.097649][ T286] [ 99.100582][ T286] __dump_stack+0x21/0x30 [ 99.104938][ T286] dump_stack_lvl+0x110/0x170 [ 99.109617][ T286] ? show_regs_print_info+0x20/0x20 [ 99.114818][ T286] ? page_cache_prev_miss+0x290/0x290 [ 99.120275][ T286] dump_stack+0x15/0x20 [ 99.124449][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 99.129820][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 99.135276][ T286] ? f2fs_get_block+0x140/0x140 [ 99.140220][ T286] ? may_link+0x3e8/0x560 [ 99.144556][ T286] ? may_create+0x440/0x440 [ 99.149058][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 99.154471][ T286] f2fs_empty_dir+0xa6/0x230 [ 99.159064][ T286] f2fs_rmdir+0x3f/0x70 [ 99.163307][ T286] vfs_rmdir+0x1ae/0x450 [ 99.167550][ T286] do_rmdir+0x261/0x6b0 [ 99.171713][ T286] ? d_delete_notify+0x160/0x160 [ 99.176658][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 99.181806][ T286] x64_sys_call+0x4c0/0x9a0 [ 99.186319][ T286] do_syscall_64+0x4c/0xa0 [ 99.190738][ T286] ? clear_bhb_loop+0x50/0xa0 [ 99.195509][ T286] ? clear_bhb_loop+0x50/0xa0 [ 99.200198][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.206756][ T286] RIP: 0033:0x7f82b4826677 [ 99.211265][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.230881][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 99.239389][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 99.247366][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 99.255341][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 99.263417][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 99.272289][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 99.280284][ T286] [ 99.294245][ T1890] F2FS-fs (loop3): invalid crc value [ 99.305451][ T1890] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.347197][ T1890] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 99.371656][ T1890] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.412901][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 99.418952][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 99.427912][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.438082][ T286] Call Trace: [ 99.441556][ T286] [ 99.444507][ T286] __dump_stack+0x21/0x30 [ 99.448884][ T286] dump_stack_lvl+0x110/0x170 [ 99.453581][ T286] ? show_regs_print_info+0x20/0x20 [ 99.458805][ T286] ? page_cache_prev_miss+0x290/0x290 [ 99.464201][ T286] dump_stack+0x15/0x20 [ 99.468553][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 99.474126][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 99.479691][ T286] ? f2fs_get_block+0x140/0x140 [ 99.484586][ T286] ? memcpy+0x56/0x70 [ 99.488651][ T286] f2fs_find_data_page+0x189/0x3c0 [ 99.493752][ T286] f2fs_readdir+0x4b4/0x9e0 [ 99.498252][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 99.503875][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 99.509365][ T286] ? down_read_killable+0xc1/0x110 [ 99.515073][ T286] ? security_file_permission+0x83/0xa0 [ 99.520916][ T286] iterate_dir+0x25c/0x600 [ 99.525338][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 99.530634][ T286] __se_sys_getdents64+0xf2/0x250 [ 99.535680][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 99.540911][ T286] ? filldir+0x660/0x660 [ 99.545359][ T286] ? __x64_sys_umount+0x12d/0x170 [ 99.550406][ T286] ? debug_smp_processor_id+0x17/0x20 [ 99.555799][ T286] __x64_sys_getdents64+0x7b/0x90 [ 99.561031][ T286] x64_sys_call+0x592/0x9a0 [ 99.565648][ T286] do_syscall_64+0x4c/0xa0 [ 99.570168][ T286] ? clear_bhb_loop+0x50/0xa0 [ 99.574862][ T286] ? clear_bhb_loop+0x50/0xa0 [ 99.579570][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.585832][ T286] RIP: 0033:0x7f82b484fef3 [ 99.590280][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 99.610166][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 99.618876][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 99.626951][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 99.634939][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 99.643009][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 99.651136][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 99.659323][ T286] [ 99.665194][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 99.671363][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 99.680318][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.690512][ T286] Call Trace: [ 99.693808][ T286] [ 99.696748][ T286] __dump_stack+0x21/0x30 [ 99.701102][ T286] dump_stack_lvl+0x110/0x170 [ 99.705801][ T286] ? show_regs_print_info+0x20/0x20 [ 99.711120][ T286] ? page_cache_prev_miss+0x290/0x290 [ 99.716515][ T286] dump_stack+0x15/0x20 [ 99.720772][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 99.726342][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 99.731911][ T286] ? f2fs_get_block+0x140/0x140 [ 99.736780][ T286] ? may_link+0x3e8/0x560 [ 99.741125][ T286] ? may_create+0x440/0x440 [ 99.745648][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 99.751226][ T286] f2fs_empty_dir+0xa6/0x230 [ 99.756629][ T286] f2fs_rmdir+0x3f/0x70 [ 99.761210][ T286] vfs_rmdir+0x1ae/0x450 [ 99.765959][ T286] do_rmdir+0x261/0x6b0 [ 99.771676][ T286] ? d_delete_notify+0x160/0x160 [ 99.776935][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 99.782053][ T286] x64_sys_call+0x4c0/0x9a0 [ 99.786772][ T286] do_syscall_64+0x4c/0xa0 [ 99.791249][ T286] ? clear_bhb_loop+0x50/0xa0 [ 99.796052][ T286] ? clear_bhb_loop+0x50/0xa0 [ 99.800838][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.806928][ T286] RIP: 0033:0x7f82b4826677 [ 99.811634][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.831751][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 99.840192][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 99.848183][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 99.856267][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 99.864263][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 99.872249][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 99.880413][ T286] [ 99.885632][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 99.891650][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 99.900523][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.910623][ T286] Call Trace: [ 99.913936][ T286] [ 99.916878][ T286] __dump_stack+0x21/0x30 [ 99.921233][ T286] dump_stack_lvl+0x110/0x170 [ 99.925924][ T286] ? show_regs_print_info+0x20/0x20 [ 99.931140][ T286] ? page_cache_prev_miss+0x290/0x290 [ 99.936536][ T286] dump_stack+0x15/0x20 [ 99.940807][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 99.946204][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 99.951768][ T286] ? f2fs_get_block+0x140/0x140 [ 99.956642][ T286] ? memcpy+0x56/0x70 [ 99.960656][ T286] f2fs_find_data_page+0x189/0x3c0 [ 99.965791][ T286] f2fs_readdir+0x4b4/0x9e0 [ 99.970315][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 99.975530][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 99.980664][ T286] ? down_read_killable+0xc1/0x110 [ 99.985922][ T286] ? security_file_permission+0x83/0xa0 [ 99.991489][ T286] iterate_dir+0x25c/0x600 [ 99.996037][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 100.001267][ T286] __se_sys_getdents64+0xf2/0x250 [ 100.006428][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 100.011988][ T286] ? filldir+0x660/0x660 [ 100.016356][ T286] ? __x64_sys_umount+0x12d/0x170 [ 100.021403][ T286] ? debug_smp_processor_id+0x17/0x20 [ 100.026802][ T286] __x64_sys_getdents64+0x7b/0x90 [ 100.031925][ T286] x64_sys_call+0x592/0x9a0 [ 100.036444][ T286] do_syscall_64+0x4c/0xa0 [ 100.040891][ T286] ? clear_bhb_loop+0x50/0xa0 [ 100.045673][ T286] ? clear_bhb_loop+0x50/0xa0 [ 100.050369][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.056385][ T286] RIP: 0033:0x7f82b484fef3 [ 100.060844][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 100.081087][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 100.089532][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 100.097621][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 100.105729][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 100.114001][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 100.122250][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 100.130546][ T286] [ 100.135901][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 100.142004][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 100.151049][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.161228][ T286] Call Trace: [ 100.164795][ T286] [ 100.167744][ T286] __dump_stack+0x21/0x30 [ 100.172194][ T286] dump_stack_lvl+0x110/0x170 [ 100.176972][ T286] ? show_regs_print_info+0x20/0x20 [ 100.182186][ T286] ? page_cache_prev_miss+0x290/0x290 [ 100.187577][ T286] dump_stack+0x15/0x20 [ 100.191747][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 100.197145][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 100.202967][ T286] ? f2fs_get_block+0x140/0x140 [ 100.207918][ T286] ? may_link+0x3e8/0x560 [ 100.212361][ T286] ? may_create+0x440/0x440 [ 100.216967][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 100.222353][ T286] f2fs_empty_dir+0xa6/0x230 [ 100.226962][ T286] f2fs_rmdir+0x3f/0x70 [ 100.231142][ T286] vfs_rmdir+0x1ae/0x450 [ 100.235397][ T286] do_rmdir+0x261/0x6b0 [ 100.239566][ T286] ? d_delete_notify+0x160/0x160 [ 100.244749][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 100.249734][ T286] x64_sys_call+0x4c0/0x9a0 [ 100.254404][ T286] do_syscall_64+0x4c/0xa0 [ 100.258869][ T286] ? clear_bhb_loop+0x50/0xa0 [ 100.263706][ T286] ? clear_bhb_loop+0x50/0xa0 [ 100.268698][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.275057][ T286] RIP: 0033:0x7f82b4826677 [ 100.279775][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.299922][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 100.308897][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 100.317075][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 100.325156][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 100.333153][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 100.341148][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 100.349229][ T286] [ 100.358353][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 100.364763][ T1049] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 100.376920][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 100.385938][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.396017][ T286] Call Trace: [ 100.399314][ T286] [ 100.402222][ T1049] usb 5-1: USB disconnect, device number 4 [ 100.402258][ T286] __dump_stack+0x21/0x30 [ 100.412406][ T286] dump_stack_lvl+0x110/0x170 [ 100.417292][ T286] ? show_regs_print_info+0x20/0x20 [ 100.422513][ T286] ? page_cache_prev_miss+0x290/0x290 [ 100.427903][ T286] dump_stack+0x15/0x20 [ 100.432081][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 100.437524][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 100.443011][ T286] ? f2fs_get_block+0x140/0x140 [ 100.447887][ T286] ? memcpy+0x56/0x70 [ 100.452065][ T286] f2fs_find_data_page+0x189/0x3c0 [ 100.457292][ T286] f2fs_readdir+0x4b4/0x9e0 [ 100.459967][ T1937] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(6) [ 100.461986][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 100.476816][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 100.481957][ T286] ? down_read_killable+0xc1/0x110 [ 100.487098][ T286] ? security_file_permission+0x83/0xa0 [ 100.492672][ T286] iterate_dir+0x25c/0x600 [ 100.497101][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 100.502503][ T286] __se_sys_getdents64+0xf2/0x250 [ 100.507554][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 100.512972][ T286] ? filldir+0x660/0x660 [ 100.517247][ T286] ? __x64_sys_umount+0x12d/0x170 [ 100.522387][ T286] ? debug_smp_processor_id+0x17/0x20 [ 100.527969][ T286] __x64_sys_getdents64+0x7b/0x90 [ 100.533143][ T286] x64_sys_call+0x592/0x9a0 [ 100.537772][ T286] do_syscall_64+0x4c/0xa0 [ 100.542215][ T286] ? clear_bhb_loop+0x50/0xa0 [ 100.546912][ T286] ? clear_bhb_loop+0x50/0xa0 [ 100.551739][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.558605][ T286] RIP: 0033:0x7f82b484fef3 [ 100.563157][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 100.583495][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 100.592036][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 100.600393][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 100.608396][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 100.616684][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 100.624774][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 100.632785][ T286] [ 100.638429][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 100.645643][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 100.654537][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.662425][ T1937] loop3: detected capacity change from 0 to 40427 [ 100.664606][ T286] Call Trace: [ 100.664613][ T286] [ 100.664619][ T286] __dump_stack+0x21/0x30 [ 100.664642][ T286] dump_stack_lvl+0x110/0x170 [ 100.664678][ T286] ? show_regs_print_info+0x20/0x20 [ 100.685756][ T1937] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3) [ 100.686432][ T286] ? page_cache_prev_miss+0x290/0x290 [ 100.695635][ T1937] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.699369][ T286] dump_stack+0x15/0x20 [ 100.699396][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 100.708342][ T1937] F2FS-fs (loop3): invalid crc value [ 100.713091][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 100.718468][ T1937] F2FS-fs (loop3): Mismatch valid blocks 5 vs. 7 [ 100.722661][ T286] ? f2fs_get_block+0x140/0x140 [ 100.728622][ T1937] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 100.733412][ T286] ? may_link+0x3e8/0x560 [ 100.733438][ T286] ? may_create+0x440/0x440 [ 100.761473][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 100.766970][ T286] f2fs_empty_dir+0xa6/0x230 [ 100.771592][ T286] f2fs_rmdir+0x3f/0x70 [ 100.776222][ T286] vfs_rmdir+0x1ae/0x450 [ 100.780715][ T286] do_rmdir+0x261/0x6b0 [ 100.784935][ T286] ? d_delete_notify+0x160/0x160 [ 100.789891][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 100.794747][ T286] x64_sys_call+0x4c0/0x9a0 [ 100.799248][ T286] do_syscall_64+0x4c/0xa0 [ 100.803661][ T286] ? clear_bhb_loop+0x50/0xa0 [ 100.808535][ T286] ? clear_bhb_loop+0x50/0xa0 [ 100.813299][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.819292][ T286] RIP: 0033:0x7f82b4826677 [ 100.823714][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.843320][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 100.851732][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 100.859701][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 100.867668][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 100.875646][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 100.883625][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 100.891595][ T286] [ 100.896860][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 100.903780][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 100.912664][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.922746][ T286] Call Trace: [ 100.926049][ T286] [ 100.928999][ T286] __dump_stack+0x21/0x30 [ 100.933465][ T286] dump_stack_lvl+0x110/0x170 [ 100.938245][ T286] ? show_regs_print_info+0x20/0x20 [ 100.943447][ T286] ? page_cache_prev_miss+0x290/0x290 [ 100.948823][ T286] dump_stack+0x15/0x20 [ 100.953057][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 100.958421][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 100.963959][ T286] ? f2fs_get_block+0x140/0x140 [ 100.968904][ T286] ? memcpy+0x56/0x70 [ 100.972880][ T286] f2fs_find_data_page+0x189/0x3c0 [ 100.977996][ T286] f2fs_readdir+0x4b4/0x9e0 [ 100.982524][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 100.987734][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 100.992848][ T286] ? down_read_killable+0xc1/0x110 [ 100.998041][ T286] ? security_file_permission+0x83/0xa0 [ 101.003691][ T286] iterate_dir+0x25c/0x600 [ 101.008394][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 101.013647][ T286] __se_sys_getdents64+0xf2/0x250 [ 101.018780][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 101.024023][ T286] ? filldir+0x660/0x660 [ 101.028290][ T286] ? debug_smp_processor_id+0x17/0x20 [ 101.033780][ T286] __x64_sys_getdents64+0x7b/0x90 [ 101.038802][ T286] x64_sys_call+0x592/0x9a0 [ 101.043302][ T286] do_syscall_64+0x4c/0xa0 [ 101.047728][ T286] ? clear_bhb_loop+0x50/0xa0 [ 101.052408][ T286] ? clear_bhb_loop+0x50/0xa0 [ 101.057085][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.062991][ T286] RIP: 0033:0x7f82b484fef3 [ 101.067423][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 101.087382][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 101.096007][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 101.104042][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 101.112274][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 101.120364][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 101.128342][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 101.136325][ T286] [ 101.141556][ T1940] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 101.144263][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 101.155934][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 101.164820][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.175075][ T286] Call Trace: [ 101.178459][ T286] [ 101.181503][ T286] __dump_stack+0x21/0x30 [ 101.185865][ T286] dump_stack_lvl+0x110/0x170 [ 101.190567][ T286] ? show_regs_print_info+0x20/0x20 [ 101.196063][ T286] ? page_cache_prev_miss+0x290/0x290 [ 101.201459][ T286] dump_stack+0x15/0x20 [ 101.205807][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 101.211315][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 101.216923][ T286] ? f2fs_get_block+0x140/0x140 [ 101.221774][ T286] ? may_link+0x3e8/0x560 [ 101.226135][ T286] ? may_create+0x440/0x440 [ 101.230641][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 101.236105][ T286] f2fs_empty_dir+0xa6/0x230 [ 101.240713][ T286] f2fs_rmdir+0x3f/0x70 [ 101.245039][ T286] vfs_rmdir+0x1ae/0x450 [ 101.249280][ T286] do_rmdir+0x261/0x6b0 [ 101.253438][ T286] ? d_delete_notify+0x160/0x160 [ 101.258393][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 101.263343][ T286] x64_sys_call+0x4c0/0x9a0 [ 101.267864][ T286] do_syscall_64+0x4c/0xa0 [ 101.272389][ T286] ? clear_bhb_loop+0x50/0xa0 [ 101.277071][ T286] ? clear_bhb_loop+0x50/0xa0 [ 101.282378][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.288401][ T286] RIP: 0033:0x7f82b4826677 [ 101.292819][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.312730][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 101.321245][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 101.329223][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 101.337248][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 101.345240][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 101.353228][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 101.361219][ T286] [ 101.367872][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 101.374637][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 101.383595][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.393778][ T286] Call Trace: [ 101.397070][ T286] [ 101.400293][ T286] __dump_stack+0x21/0x30 [ 101.404630][ T286] dump_stack_lvl+0x110/0x170 [ 101.409500][ T286] ? show_regs_print_info+0x20/0x20 [ 101.414733][ T286] ? page_cache_prev_miss+0x290/0x290 [ 101.420106][ T286] dump_stack+0x15/0x20 [ 101.424527][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 101.430016][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 101.435482][ T286] ? f2fs_get_block+0x140/0x140 [ 101.440330][ T286] ? memcpy+0x56/0x70 [ 101.444343][ T286] f2fs_find_data_page+0x189/0x3c0 [ 101.449451][ T286] f2fs_readdir+0x4b4/0x9e0 [ 101.453962][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 101.459180][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 101.464290][ T286] ? down_read_killable+0xc1/0x110 [ 101.469406][ T286] ? security_file_permission+0x83/0xa0 [ 101.474953][ T286] iterate_dir+0x25c/0x600 [ 101.479366][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 101.484572][ T286] __se_sys_getdents64+0xf2/0x250 [ 101.489595][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 101.494803][ T286] ? filldir+0x660/0x660 [ 101.499049][ T286] ? __x64_sys_umount+0x12d/0x170 [ 101.504080][ T286] ? debug_smp_processor_id+0x17/0x20 [ 101.509641][ T286] __x64_sys_getdents64+0x7b/0x90 [ 101.515056][ T286] x64_sys_call+0x592/0x9a0 [ 101.520119][ T286] do_syscall_64+0x4c/0xa0 [ 101.524580][ T286] ? clear_bhb_loop+0x50/0xa0 [ 101.529441][ T286] ? clear_bhb_loop+0x50/0xa0 [ 101.534155][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.540062][ T286] RIP: 0033:0x7f82b484fef3 [ 101.544505][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 101.564118][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 101.572723][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 101.580716][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 101.588926][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 101.597037][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 101.605098][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 101.613268][ T286] [ 101.620307][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 101.655836][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 101.664986][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.675244][ T286] Call Trace: [ 101.678548][ T286] [ 101.681545][ T286] __dump_stack+0x21/0x30 [ 101.685991][ T286] dump_stack_lvl+0x110/0x170 [ 101.690694][ T286] ? show_regs_print_info+0x20/0x20 [ 101.695919][ T286] ? page_cache_prev_miss+0x290/0x290 [ 101.701327][ T286] dump_stack+0x15/0x20 [ 101.705513][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 101.711180][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 101.716757][ T286] ? f2fs_get_block+0x140/0x140 [ 101.721641][ T286] ? may_link+0x3e8/0x560 [ 101.725995][ T286] ? may_create+0x440/0x440 [ 101.730515][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 101.735990][ T286] f2fs_empty_dir+0xa6/0x230 [ 101.740611][ T286] f2fs_rmdir+0x3f/0x70 [ 101.744924][ T286] vfs_rmdir+0x1ae/0x450 [ 101.749196][ T286] do_rmdir+0x261/0x6b0 [ 101.754172][ T286] ? d_delete_notify+0x160/0x160 [ 101.759132][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 101.764011][ T286] x64_sys_call+0x4c0/0x9a0 [ 101.768551][ T286] do_syscall_64+0x4c/0xa0 [ 101.772996][ T286] ? clear_bhb_loop+0x50/0xa0 [ 101.777763][ T286] ? clear_bhb_loop+0x50/0xa0 [ 101.782466][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.788378][ T286] RIP: 0033:0x7f82b4826677 [ 101.792810][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.812977][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 101.821724][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 101.829724][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 101.837722][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 101.845815][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 101.854111][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 101.862257][ T286] [ 101.866904][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 101.877343][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 101.886247][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.889279][ T1967] FAULT_INJECTION: forcing a failure. [ 101.889279][ T1967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.896504][ T286] Call Trace: [ 101.896513][ T286] [ 101.896519][ T286] __dump_stack+0x21/0x30 [ 101.896542][ T286] dump_stack_lvl+0x110/0x170 [ 101.896559][ T286] ? show_regs_print_info+0x20/0x20 [ 101.930298][ T286] ? page_cache_prev_miss+0x290/0x290 [ 101.935722][ T286] dump_stack+0x15/0x20 [ 101.939899][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 101.945283][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 101.950743][ T286] ? f2fs_get_block+0x140/0x140 [ 101.955685][ T286] ? memcpy+0x56/0x70 [ 101.959674][ T286] f2fs_find_data_page+0x189/0x3c0 [ 101.964784][ T286] f2fs_readdir+0x4b4/0x9e0 [ 101.969296][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 101.974494][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 101.979629][ T286] ? down_read_killable+0xc1/0x110 [ 101.984745][ T286] ? security_file_permission+0x83/0xa0 [ 101.990593][ T286] iterate_dir+0x25c/0x600 [ 101.995037][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 102.000346][ T286] __se_sys_getdents64+0xf2/0x250 [ 102.005475][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 102.010841][ T286] ? filldir+0x660/0x660 [ 102.015207][ T286] ? __x64_sys_umount+0x12d/0x170 [ 102.021530][ T286] ? debug_smp_processor_id+0x17/0x20 [ 102.027117][ T286] __x64_sys_getdents64+0x7b/0x90 [ 102.032142][ T286] x64_sys_call+0x592/0x9a0 [ 102.036644][ T286] do_syscall_64+0x4c/0xa0 [ 102.041060][ T286] ? clear_bhb_loop+0x50/0xa0 [ 102.045743][ T286] ? clear_bhb_loop+0x50/0xa0 [ 102.050416][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.056494][ T286] RIP: 0033:0x7f82b484fef3 [ 102.061045][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 102.080649][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 102.089217][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 102.097320][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 102.105433][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 102.113423][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 102.121674][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 102.129662][ T286] [ 102.133150][ T1967] CPU: 1 PID: 1967 Comm: syz.3.531 Tainted: G W syzkaller #0 [ 102.141944][ T1967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.152027][ T1967] Call Trace: [ 102.152677][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 102.155410][ T1967] [ 102.155418][ T1967] __dump_stack+0x21/0x30 [ 102.168948][ T1967] dump_stack_lvl+0x110/0x170 [ 102.173713][ T1967] ? show_regs_print_info+0x20/0x20 [ 102.178913][ T1967] ? vfs_write+0xc72/0xfd0 [ 102.183336][ T1967] dump_stack+0x15/0x20 [ 102.187493][ T1967] should_fail+0x3ab/0x500 [ 102.191927][ T1967] should_fail_usercopy+0x1a/0x20 [ 102.197045][ T1967] _copy_from_user+0x20/0xd0 [ 102.201638][ T1967] __se_sys_mount_setattr+0x24f/0x8b0 [ 102.207130][ T1967] ? __kasan_check_write+0x14/0x20 [ 102.212347][ T1967] ? fput_many+0x15a/0x1a0 [ 102.216867][ T1967] ? __x64_sys_mount_setattr+0xd0/0xd0 [ 102.222348][ T1967] ? ksys_write+0x1fa/0x260 [ 102.226869][ T1967] ? __ia32_sys_read+0x90/0x90 [ 102.231678][ T1967] __x64_sys_mount_setattr+0xbf/0xd0 [ 102.236976][ T1967] x64_sys_call+0x545/0x9a0 [ 102.241491][ T1967] do_syscall_64+0x4c/0xa0 [ 102.245928][ T1967] ? clear_bhb_loop+0x50/0xa0 [ 102.250648][ T1967] ? clear_bhb_loop+0x50/0xa0 [ 102.255993][ T1967] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.261997][ T1967] RIP: 0033:0x7ff4205a5559 [ 102.266689][ T1967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.286505][ T1967] RSP: 002b:00007ff41effe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 102.295431][ T1967] RAX: ffffffffffffffda RBX: 00007ff42082cfa0 RCX: 00007ff4205a5559 [ 102.303947][ T1967] RDX: 0000000000009000 RSI: 0000200000000780 RDI: 0000000000000003 [ 102.312020][ T1967] RBP: 00007ff41effe090 R08: 0000000000000020 R09: 0000000000000000 [ 102.320263][ T1967] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 102.328857][ T1967] R13: 00007ff42082d038 R14: 00007ff42082cfa0 R15: 00007fff98368c68 [ 102.336871][ T1967] [ 102.361222][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 102.370431][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.380725][ T286] Call Trace: [ 102.384511][ T286] [ 102.387479][ T286] __dump_stack+0x21/0x30 [ 102.392091][ T286] dump_stack_lvl+0x110/0x170 [ 102.396794][ T286] ? show_regs_print_info+0x20/0x20 [ 102.402109][ T286] ? page_cache_prev_miss+0x290/0x290 [ 102.407508][ T286] dump_stack+0x15/0x20 [ 102.411680][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 102.417070][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 102.422838][ T286] ? f2fs_get_block+0x140/0x140 [ 102.427717][ T286] ? may_link+0x3e8/0x560 [ 102.432062][ T286] ? may_create+0x440/0x440 [ 102.436582][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 102.441970][ T286] f2fs_empty_dir+0xa6/0x230 [ 102.446608][ T286] f2fs_rmdir+0x3f/0x70 [ 102.451516][ T286] vfs_rmdir+0x1ae/0x450 [ 102.455968][ T286] do_rmdir+0x261/0x6b0 [ 102.460485][ T286] ? d_delete_notify+0x160/0x160 [ 102.465498][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 102.470550][ T286] x64_sys_call+0x4c0/0x9a0 [ 102.475065][ T286] do_syscall_64+0x4c/0xa0 [ 102.479584][ T286] ? clear_bhb_loop+0x50/0xa0 [ 102.484288][ T286] ? clear_bhb_loop+0x50/0xa0 [ 102.488994][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.494919][ T286] RIP: 0033:0x7f82b4826677 [ 102.499362][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.519569][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 102.528365][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 102.536818][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 102.537256][ T1965] loop4: detected capacity change from 0 to 40427 [ 102.545019][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 102.545034][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 102.545046][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 102.545060][ T286] [ 102.560221][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 102.585659][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 102.594547][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.604633][ T286] Call Trace: [ 102.607993][ T286] [ 102.611000][ T286] __dump_stack+0x21/0x30 [ 102.615420][ T286] dump_stack_lvl+0x110/0x170 [ 102.620098][ T286] ? show_regs_print_info+0x20/0x20 [ 102.625291][ T286] ? page_cache_prev_miss+0x290/0x290 [ 102.630660][ T286] dump_stack+0x15/0x20 [ 102.634815][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 102.640190][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 102.645637][ T286] ? f2fs_get_block+0x140/0x140 [ 102.650491][ T286] ? memcpy+0x56/0x70 [ 102.654480][ T286] f2fs_find_data_page+0x189/0x3c0 [ 102.659604][ T286] f2fs_readdir+0x4b4/0x9e0 [ 102.664196][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 102.669393][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 102.674497][ T286] ? down_read_killable+0xc1/0x110 [ 102.679710][ T286] ? security_file_permission+0x83/0xa0 [ 102.685261][ T286] iterate_dir+0x25c/0x600 [ 102.689675][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 102.694976][ T286] __se_sys_getdents64+0xf2/0x250 [ 102.699990][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 102.705172][ T286] ? filldir+0x660/0x660 [ 102.709418][ T286] ? __x64_sys_umount+0x12d/0x170 [ 102.714445][ T286] ? debug_smp_processor_id+0x17/0x20 [ 102.719939][ T286] __x64_sys_getdents64+0x7b/0x90 [ 102.724980][ T286] x64_sys_call+0x592/0x9a0 [ 102.729605][ T286] do_syscall_64+0x4c/0xa0 [ 102.734104][ T286] ? clear_bhb_loop+0x50/0xa0 [ 102.738771][ T286] ? clear_bhb_loop+0x50/0xa0 [ 102.743449][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.749330][ T286] RIP: 0033:0x7f82b484fef3 [ 102.753882][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 102.773619][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 102.782031][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 102.790005][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 102.798075][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 102.806047][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 102.814094][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 102.822058][ T286] [ 102.826055][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 102.832659][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 102.833196][ T1965] F2FS-fs (loop4): invalid crc value [ 102.841530][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.841545][ T286] Call Trace: [ 102.841551][ T286] [ 102.841558][ T286] __dump_stack+0x21/0x30 [ 102.841581][ T286] dump_stack_lvl+0x110/0x170 [ 102.841597][ T286] ? show_regs_print_info+0x20/0x20 [ 102.841614][ T286] ? page_cache_prev_miss+0x290/0x290 [ 102.868189][ T1965] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.872363][ T286] dump_stack+0x15/0x20 [ 102.893330][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 102.898817][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 102.901932][ T1965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.904294][ T286] ? f2fs_get_block+0x140/0x140 [ 102.916624][ T286] ? may_link+0x3e8/0x560 [ 102.920982][ T286] ? may_create+0x440/0x440 [ 102.925508][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 102.930914][ T286] f2fs_empty_dir+0xa6/0x230 [ 102.935533][ T286] f2fs_rmdir+0x3f/0x70 [ 102.939859][ T286] vfs_rmdir+0x1ae/0x450 [ 102.944124][ T286] do_rmdir+0x261/0x6b0 [ 102.948308][ T286] ? d_delete_notify+0x160/0x160 [ 102.953360][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 102.958421][ T286] x64_sys_call+0x4c0/0x9a0 [ 102.962992][ T286] do_syscall_64+0x4c/0xa0 [ 102.967444][ T286] ? clear_bhb_loop+0x50/0xa0 [ 102.972151][ T286] ? clear_bhb_loop+0x50/0xa0 [ 102.976854][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.982883][ T286] RIP: 0033:0x7f82b4826677 [ 102.987418][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.007242][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 103.015863][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 103.023945][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 103.031926][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 103.039887][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 103.047847][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 103.055823][ T286] [ 103.068564][ T289] ------------[ cut here ]------------ [ 103.074418][ T289] WARNING: CPU: 0 PID: 289 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 103.082723][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 103.088540][ T289] Modules linked in: [ 103.093666][ T289] CPU: 0 PID: 289 Comm: syz-executor Tainted: G W syzkaller #0 [ 103.102493][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 103.111674][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.121738][ T286] Call Trace: [ 103.125033][ T286] [ 103.127983][ T286] __dump_stack+0x21/0x30 [ 103.132326][ T286] dump_stack_lvl+0x110/0x170 [ 103.137098][ T286] ? show_regs_print_info+0x20/0x20 [ 103.142398][ T286] ? page_cache_prev_miss+0x290/0x290 [ 103.147786][ T286] dump_stack+0x15/0x20 [ 103.152023][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 103.157397][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 103.162855][ T286] ? f2fs_get_block+0x140/0x140 [ 103.167708][ T286] ? memcpy+0x56/0x70 [ 103.171691][ T286] f2fs_find_data_page+0x189/0x3c0 [ 103.176803][ T286] f2fs_readdir+0x4b4/0x9e0 [ 103.181416][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 103.186620][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 103.191741][ T286] ? down_read_killable+0xc1/0x110 [ 103.196851][ T286] ? security_file_permission+0x83/0xa0 [ 103.202405][ T286] iterate_dir+0x25c/0x600 [ 103.206821][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 103.212193][ T286] __se_sys_getdents64+0xf2/0x250 [ 103.217219][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 103.222498][ T286] ? filldir+0x660/0x660 [ 103.226734][ T286] ? __x64_sys_umount+0x12d/0x170 [ 103.231753][ T286] ? debug_smp_processor_id+0x17/0x20 [ 103.237144][ T286] __x64_sys_getdents64+0x7b/0x90 [ 103.242173][ T286] x64_sys_call+0x592/0x9a0 [ 103.246765][ T286] do_syscall_64+0x4c/0xa0 [ 103.251187][ T286] ? clear_bhb_loop+0x50/0xa0 [ 103.255887][ T286] ? clear_bhb_loop+0x50/0xa0 [ 103.260570][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.266758][ T286] RIP: 0033:0x7f82b484fef3 [ 103.271331][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 103.291373][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 103.299788][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 103.307861][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 103.315920][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 103.324120][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 103.332182][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 103.340165][ T286] [ 103.344912][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.368702][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 103.373629][ T289] RIP: 0010:drop_nlink+0xc5/0x110 [ 103.377849][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 103.388645][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.389391][ T289] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 07 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb 84 b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 103.398894][ T286] Call Trace: [ 103.398901][ T286] [ 103.398908][ T286] __dump_stack+0x21/0x30 [ 103.398929][ T286] dump_stack_lvl+0x110/0x170 [ 103.398947][ T286] ? show_regs_print_info+0x20/0x20 [ 103.439566][ T286] ? page_cache_prev_miss+0x290/0x290 [ 103.443246][ T289] RSP: 0018:ffffc90000a97cd0 EFLAGS: 00010293 [ 103.444973][ T286] dump_stack+0x15/0x20 [ 103.455408][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 103.459071][ T289] RAX: ffffffff81b756f5 RBX: ffff88811056eab0 RCX: ffff888107bd2800 [ 103.460809][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 103.468864][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.474339][ T286] ? f2fs_get_block+0x140/0x140 [ 103.474360][ T286] ? may_link+0x3e8/0x560 [ 103.474377][ T286] ? may_create+0x440/0x440 [ 103.489148][ T289] RBP: ffffc90000a97cf8 R08: 0000000000000003 R09: 0000000000000004 [ 103.491816][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 103.496308][ T289] R10: dffffc0000000000 R11: fffff52000152f88 R12: dffffc0000000000 [ 103.504298][ T286] f2fs_empty_dir+0xa6/0x230 [ 103.504319][ T286] f2fs_rmdir+0x3f/0x70 [ 103.504335][ T286] vfs_rmdir+0x1ae/0x450 [ 103.530987][ T286] do_rmdir+0x261/0x6b0 [ 103.535166][ T286] ? d_delete_notify+0x160/0x160 [ 103.540194][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 103.545164][ T286] x64_sys_call+0x4c0/0x9a0 [ 103.549861][ T286] do_syscall_64+0x4c/0xa0 [ 103.554362][ T286] ? clear_bhb_loop+0x50/0xa0 [ 103.559036][ T286] ? clear_bhb_loop+0x50/0xa0 [ 103.563718][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.569791][ T286] RIP: 0033:0x7f82b4826677 [ 103.574272][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.593875][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 103.602310][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 103.610380][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 103.618439][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 103.626414][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 103.634480][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 103.642468][ T286] [ 103.647801][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 103.654654][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 103.663606][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.673659][ T286] Call Trace: [ 103.676934][ T286] [ 103.679861][ T286] __dump_stack+0x21/0x30 [ 103.684288][ T286] dump_stack_lvl+0x110/0x170 [ 103.688960][ T286] ? show_regs_print_info+0x20/0x20 [ 103.694242][ T286] ? page_cache_prev_miss+0x290/0x290 [ 103.699636][ T286] dump_stack+0x15/0x20 [ 103.703795][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 103.709185][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 103.714667][ T286] ? f2fs_get_block+0x140/0x140 [ 103.719526][ T286] ? memcpy+0x56/0x70 [ 103.723921][ T286] f2fs_find_data_page+0x189/0x3c0 [ 103.729034][ T286] f2fs_readdir+0x4b4/0x9e0 [ 103.733538][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 103.738742][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 103.743852][ T286] ? down_read_killable+0xc1/0x110 [ 103.749063][ T286] ? security_file_permission+0x83/0xa0 [ 103.754618][ T286] iterate_dir+0x25c/0x600 [ 103.759043][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 103.764257][ T286] __se_sys_getdents64+0xf2/0x250 [ 103.769280][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 103.774740][ T286] ? filldir+0x660/0x660 [ 103.778996][ T286] ? __x64_sys_umount+0x12d/0x170 [ 103.784019][ T286] ? debug_smp_processor_id+0x17/0x20 [ 103.789564][ T286] __x64_sys_getdents64+0x7b/0x90 [ 103.794589][ T286] x64_sys_call+0x592/0x9a0 [ 103.799086][ T286] do_syscall_64+0x4c/0xa0 [ 103.803591][ T286] ? clear_bhb_loop+0x50/0xa0 [ 103.808265][ T286] ? clear_bhb_loop+0x50/0xa0 [ 103.812938][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.818860][ T286] RIP: 0033:0x7f82b484fef3 [ 103.823364][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 103.843132][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 103.851548][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 103.859614][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 103.867581][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 103.875551][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 103.883523][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 103.891501][ T286] [ 103.899943][ T289] R13: 1ffff110220add5f R14: ffff88811056eaf8 R15: 0000000000000000 [ 103.914614][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 103.920872][ T289] FS: 00005555594b5500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 103.920900][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.920955][ T289] CR2: 0000001b2e817ff8 CR3: 0000000127a3d000 CR4: 00000000003506b0 [ 103.920975][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.953013][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.960009][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 103.961260][ T289] Call Trace: [ 103.970136][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.970148][ T286] Call Trace: [ 103.970154][ T286] [ 103.970160][ T286] __dump_stack+0x21/0x30 [ 103.970183][ T286] dump_stack_lvl+0x110/0x170 [ 103.970200][ T286] ? show_regs_print_info+0x20/0x20 [ 103.974821][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 103.974835][ T30] audit: type=1400 audit(1792735792.560:830): avc: denied { associate } for pid=1977 comm="syz.0.534" name="file1" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 103.983536][ T286] ? page_cache_prev_miss+0x290/0x290 [ 103.983563][ T286] dump_stack+0x15/0x20 [ 103.983581][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 103.983601][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 103.983620][ T286] ? f2fs_get_block+0x140/0x140 [ 103.990060][ T289] [ 103.994163][ T286] ? may_link+0x3e8/0x560 [ 104.009879][ T289] shmem_rmdir+0x5b/0x90 [ 104.010183][ T286] ? may_create+0x440/0x440 [ 104.010204][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.010222][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.050185][ T289] vfs_rmdir+0x1ae/0x450 [ 104.052078][ T286] f2fs_rmdir+0x3f/0x70 [ 104.056922][ T289] incfs_kill_sb+0xfe/0x210 [ 104.059852][ T286] vfs_rmdir+0x1ae/0x450 [ 104.100408][ T286] do_rmdir+0x261/0x6b0 [ 104.104596][ T286] ? d_delete_notify+0x160/0x160 [ 104.109603][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.114459][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.119053][ T286] do_syscall_64+0x4c/0xa0 [ 104.123586][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.128355][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.133210][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.139103][ T286] RIP: 0033:0x7f82b4826677 [ 104.143691][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.163381][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.171877][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.179846][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.187831][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.195844][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.203988][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.212065][ T286] [ 104.215325][ T289] deactivate_locked_super+0xa0/0x100 [ 104.221424][ T289] deactivate_super+0xaf/0xe0 [ 104.227462][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.234069][ T289] cleanup_mnt+0x44f/0x500 [ 104.234233][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 104.238653][ T289] __cleanup_mnt+0x19/0x20 [ 104.247474][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.247487][ T286] Call Trace: [ 104.247492][ T286] [ 104.247498][ T286] __dump_stack+0x21/0x30 [ 104.247517][ T286] dump_stack_lvl+0x110/0x170 [ 104.247534][ T286] ? show_regs_print_info+0x20/0x20 [ 104.247559][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.270556][ T289] task_work_run+0x127/0x190 [ 104.272568][ T286] dump_stack+0x15/0x20 [ 104.283396][ T289] exit_to_user_mode_loop+0xd0/0xe0 [ 104.287998][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.288032][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.293380][ T289] exit_to_user_mode_prepare+0x87/0xd0 [ 104.296813][ T286] ? f2fs_get_block+0x140/0x140 [ 104.302372][ T289] syscall_exit_to_user_mode+0x1a/0x30 [ 104.307510][ T286] ? memcpy+0x56/0x70 [ 104.307538][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.313418][ T289] do_syscall_64+0x58/0xa0 [ 104.318626][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.323693][ T289] ? clear_bhb_loop+0x50/0xa0 [ 104.329208][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.333447][ T289] ? clear_bhb_loop+0x50/0xa0 [ 104.338300][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 104.338337][ T286] ? down_read_killable+0xc1/0x110 [ 104.359448][ T289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.362138][ T286] ? security_file_permission+0x83/0xa0 [ 104.362164][ T286] iterate_dir+0x25c/0x600 [ 104.362183][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.370417][ T289] RIP: 0033:0x7ff4205a6797 [ 104.372403][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.372425][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.372440][ T286] ? filldir+0x660/0x660 [ 104.372464][ T286] ? __x64_sys_umount+0x12d/0x170 [ 104.384232][ T289] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 104.388403][ T286] ? debug_smp_processor_id+0x17/0x20 [ 104.388428][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.388456][ T286] x64_sys_call+0x592/0x9a0 [ 104.388474][ T286] do_syscall_64+0x4c/0xa0 [ 104.388490][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.388508][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.388526][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.388545][ T286] RIP: 0033:0x7f82b484fef3 [ 104.388560][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.388575][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.388597][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.388611][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.388623][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.388636][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.388648][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.388665][ T286] [ 104.589558][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.595662][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W syzkaller #0 [ 104.604557][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.609555][ T1998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1998 comm=syz.2.542 [ 104.614627][ T286] Call Trace: [ 104.614638][ T286] [ 104.614645][ T286] __dump_stack+0x21/0x30 [ 104.614669][ T286] dump_stack_lvl+0x110/0x170 [ 104.614686][ T286] ? show_regs_print_info+0x20/0x20 [ 104.647565][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.651274][ T289] RSP: 002b:00007fff98367ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.652968][ T286] dump_stack+0x15/0x20 [ 104.665872][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.666865][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff4205a6797 [ 104.671283][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.671307][ T286] ? f2fs_get_block+0x140/0x140 [ 104.689612][ T286] ? may_link+0x3e8/0x560 [ 104.691644][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff98367f90 [ 104.693967][ T286] ? may_create+0x440/0x440 [ 104.706619][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.712014][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.713535][ T289] RBP: 00007fff98367f90 R08: 00007fff98368f90 R09: 00000000ffffffff [ 104.716632][ T286] f2fs_rmdir+0x3f/0x70 [ 104.716654][ T286] vfs_rmdir+0x1ae/0x450 [ 104.728742][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff98369020 [ 104.728775][ T286] do_rmdir+0x261/0x6b0 [ 104.728800][ T286] ? d_delete_notify+0x160/0x160 [ 104.733097][ T289] R13: 00007ff42063befb R14: 0000000000019013 R15: 00007fff98369060 [ 104.741094][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.741115][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.746555][ T289] [ 104.750193][ T286] do_syscall_64+0x4c/0xa0 [ 104.758415][ T289] ---[ end trace c57c04ef62f52da8 ]--- [ 104.763010][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.763032][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.767754][ T289] ================================================================== [ 104.770563][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.775013][ T289] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 104.780483][ T286] RIP: 0033:0x7f82b4826677 [ 104.785148][ T289] Write of size 4 at addr 0000000000000170 by task syz-executor/289 [ 104.789925][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.798237][ T289] ** 43 printk messages dropped ** [ 104.845401][ T289] R13: 00007ff42063befb R14: 0000000000019013 R15: 00007fff98369060 [ 104.845414][ T289] [ 104.845419][ T289] ================================================================== [ 104.845425][ T289] Disabling lock debugging due to kernel taint [ 104.850052][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.850086][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.850105][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.850116][ T286] Call Trace: [ 104.850121][ T286] [ 104.850128][ T286] __dump_stack+0x21/0x30 [ 104.850149][ T286] dump_stack_lvl+0x110/0x170 [ 104.850167][ T286] ? show_regs_print_info+0x20/0x20 [ 104.850188][ T286] dump_stack+0x15/0x20 [ 104.850204][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.850227][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.850246][ T286] ? f2fs_get_block+0x140/0x140 [ 104.850266][ T286] ? f2fs_readdir+0x141/0x9e0 [ 104.850288][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.850306][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.850330][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.850351][ T286] ? down_read_killable+0xc1/0x110 [ 104.850373][ T286] ? security_file_permission+0x83/0xa0 [ 104.850394][ T286] iterate_dir+0x25c/0x600 [ 104.850415][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.850436][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.850452][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.850468][ T286] ? filldir+0x660/0x660 [ 104.850486][ T286] ? __kasan_check_write+0x14/0x20 [ 104.850506][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.850524][ T286] x64_sys_call+0x592/0x9a0 [ 104.850542][ T286] do_syscall_64+0x4c/0xa0 [ 104.850558][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.850576][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.850594][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.850615][ T286] RIP: 0033:0x7f82b484fef3 [ 104.850630][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.850646][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.850667][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.850681][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.850693][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.850706][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.850718][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.850734][ T286] [ 104.851099][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.851126][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.851145][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.851155][ T286] Call Trace: [ 104.851160][ T286] [ 104.851166][ T286] __dump_stack+0x21/0x30 [ 104.851183][ T286] dump_stack_lvl+0x110/0x170 [ 104.851200][ T286] ? show_regs_print_info+0x20/0x20 [ 104.851220][ T286] dump_stack+0x15/0x20 [ 104.851236][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.851259][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.851278][ T286] ? f2fs_get_block+0x140/0x140 [ 104.851296][ T286] ? may_link+0x3e8/0x560 [ 104.851314][ T286] ? may_create+0x440/0x440 [ 104.851332][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.851350][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.851370][ T286] f2fs_rmdir+0x3f/0x70 [ 104.851387][ T286] vfs_rmdir+0x1ae/0x450 [ 104.851406][ T286] do_rmdir+0x261/0x6b0 [ 104.851424][ T286] ? d_delete_notify+0x160/0x160 [ 104.851442][ T286] ? __x64_sys_unlinkat+0xbd/0xf0 [ 104.851463][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.851482][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.851499][ T286] do_syscall_64+0x4c/0xa0 [ 104.851514][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.851532][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.851550][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.851571][ T286] RIP: 0033:0x7f82b4826677 [ 104.851583][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.851596][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.851614][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.851626][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.851637][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.851648][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.851659][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.851675][ T286] [ 104.852241][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.852268][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.852287][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.852297][ T286] Call Trace: [ 104.852302][ T286] [ 104.852308][ T286] __dump_stack+0x21/0x30 [ 104.852326][ T286] dump_stack_lvl+0x110/0x170 [ 104.852344][ T286] ? show_regs_print_info+0x20/0x20 [ 104.852361][ T286] ? sysvec_reschedule_ipi+0x78/0x80 [ 104.852380][ T286] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 104.852400][ T286] dump_stack+0x15/0x20 [ 104.852417][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.852438][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.852454][ T286] ? f2fs_get_block+0x140/0x140 [ 104.852469][ T286] ? __kasan_check_write+0x14/0x20 [ 104.852486][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.852505][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.852527][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.852546][ T286] ? __schedule+0xbd7/0x14a0 [ 104.852565][ T286] ? down_read_killable+0xc1/0x110 [ 104.852586][ T286] ? security_file_permission+0x83/0xa0 [ 104.852608][ T286] iterate_dir+0x25c/0x600 [ 104.852627][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.852648][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.852665][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.852682][ T286] ? filldir+0x660/0x660 [ 104.852698][ T286] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 104.852719][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.852734][ T286] x64_sys_call+0x592/0x9a0 [ 104.852752][ T286] do_syscall_64+0x4c/0xa0 [ 104.852768][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.852786][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.852805][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.852824][ T286] RIP: 0033:0x7f82b484fef3 [ 104.852837][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.852851][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.852874][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.852888][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.852901][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.852914][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.852926][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.852951][ T286] [ 104.853260][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.853287][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.853305][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.853315][ T286] Call Trace: [ 104.853320][ T286] [ 104.853326][ T286] __dump_stack+0x21/0x30 [ 104.853343][ T286] dump_stack_lvl+0x110/0x170 [ 104.853361][ T286] ? show_regs_print_info+0x20/0x20 [ 104.853379][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.853400][ T286] dump_stack+0x15/0x20 [ 104.853416][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.853438][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.853456][ T286] ? f2fs_get_block+0x140/0x140 [ 104.853474][ T286] ? __cond_resched+0xd0/0xd0 [ 104.853491][ T286] ? may_link+0x3e8/0x560 [ 104.853510][ T286] ? irqentry_exit_cond_resched+0x29/0x30 [ 104.853530][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.853549][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.853570][ T286] f2fs_rmdir+0x3f/0x70 [ 104.853587][ T286] vfs_rmdir+0x1ae/0x450 [ 104.853605][ T286] do_rmdir+0x261/0x6b0 [ 104.853624][ T286] ? d_delete_notify+0x160/0x160 [ 104.853644][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.853661][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.853679][ T286] do_syscall_64+0x4c/0xa0 [ 104.853695][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.853713][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.853732][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.853751][ T286] RIP: 0033:0x7f82b4826677 [ 104.853764][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.853778][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.853797][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.853810][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.853822][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.853836][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.853848][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.853864][ T286] [ 104.854368][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.854383][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.854400][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.854410][ T286] Call Trace: [ 104.854415][ T286] [ 104.854421][ T286] __dump_stack+0x21/0x30 [ 104.854439][ T286] dump_stack_lvl+0x110/0x170 [ 104.854455][ T286] ? show_regs_print_info+0x20/0x20 [ 104.854474][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.854495][ T286] dump_stack+0x15/0x20 [ 104.854511][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.854533][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.854551][ T286] ? f2fs_get_block+0x140/0x140 [ 104.854570][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.854591][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.854610][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.854633][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.854654][ T286] ? down_read_killable+0xc1/0x110 [ 104.854677][ T286] ? security_file_permission+0x83/0xa0 [ 104.854698][ T286] iterate_dir+0x25c/0x600 [ 104.854717][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.854738][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.854754][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.854773][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.854789][ T286] ? filldir+0x660/0x660 [ 104.854806][ T286] ? __kasan_check_write+0x14/0x20 [ 104.854824][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.854844][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.854860][ T286] x64_sys_call+0x592/0x9a0 [ 104.854877][ T286] do_syscall_64+0x4c/0xa0 [ 104.854893][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.854912][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.854930][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.854958][ T286] RIP: 0033:0x7f82b484fef3 [ 104.854972][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.854986][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.855004][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.855017][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.855029][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.855041][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.855058][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.855075][ T286] [ 104.855352][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.855379][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.855396][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.855406][ T286] Call Trace: [ 104.855411][ T286] [ 104.855417][ T286] __dump_stack+0x21/0x30 [ 104.855434][ T286] dump_stack_lvl+0x110/0x170 [ 104.855450][ T286] ? show_regs_print_info+0x20/0x20 [ 104.855468][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.855487][ T286] dump_stack+0x15/0x20 [ 104.855504][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.855526][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.855545][ T286] ? f2fs_get_block+0x140/0x140 [ 104.855563][ T286] ? may_link+0x3e8/0x560 [ 104.855581][ T286] ? may_create+0x440/0x440 [ 104.855599][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.855617][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.855637][ T286] f2fs_rmdir+0x3f/0x70 [ 104.855654][ T286] vfs_rmdir+0x1ae/0x450 [ 104.855673][ T286] do_rmdir+0x261/0x6b0 [ 104.855692][ T286] ? d_delete_notify+0x160/0x160 [ 104.855713][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.855732][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.855748][ T286] do_syscall_64+0x4c/0xa0 [ 104.855764][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.855782][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.855800][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.855819][ T286] RIP: 0033:0x7f82b4826677 [ 104.855832][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.855847][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.855865][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.855878][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.855890][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.855901][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.855912][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.855928][ T286] [ 104.856436][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.856463][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.856482][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.856492][ T286] Call Trace: [ 104.856497][ T286] [ 104.856502][ T286] __dump_stack+0x21/0x30 [ 104.856520][ T286] dump_stack_lvl+0x110/0x170 [ 104.856537][ T286] ? show_regs_print_info+0x20/0x20 [ 104.856557][ T286] dump_stack+0x15/0x20 [ 104.856574][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.856596][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.856615][ T286] ? f2fs_get_block+0x140/0x140 [ 104.856636][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.856654][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.856675][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.856695][ T286] ? sysvec_reschedule_ipi+0x78/0x80 [ 104.856714][ T286] ? down_read_killable+0xc1/0x110 [ 104.856735][ T286] ? iterate_dir+0x11f/0x600 [ 104.856756][ T286] iterate_dir+0x25c/0x600 [ 104.856775][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.856796][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.856812][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.856832][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.856848][ T286] ? filldir+0x660/0x660 [ 104.856865][ T286] ? __kasan_check_write+0x14/0x20 [ 104.856884][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.856904][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.856921][ T286] x64_sys_call+0x592/0x9a0 [ 104.856948][ T286] do_syscall_64+0x4c/0xa0 [ 104.856963][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.856981][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.856999][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.857018][ T286] RIP: 0033:0x7f82b484fef3 [ 104.857032][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.857047][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.857066][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.857080][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.857092][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.857104][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.857116][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.857132][ T286] [ 104.857432][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.857458][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.857477][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.857486][ T286] Call Trace: [ 104.857491][ T286] [ 104.857497][ T286] __dump_stack+0x21/0x30 [ 104.857515][ T286] dump_stack_lvl+0x110/0x170 [ 104.857533][ T286] ? show_regs_print_info+0x20/0x20 [ 104.857553][ T286] dump_stack+0x15/0x20 [ 104.857570][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.857590][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.857609][ T286] ? f2fs_get_block+0x140/0x140 [ 104.857627][ T286] ? may_link+0x3e8/0x560 [ 104.857645][ T286] ? may_create+0x440/0x440 [ 104.857662][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.857682][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.857702][ T286] f2fs_rmdir+0x3f/0x70 [ 104.857719][ T286] vfs_rmdir+0x1ae/0x450 [ 104.857737][ T286] do_rmdir+0x261/0x6b0 [ 104.857755][ T286] ? d_delete_notify+0x160/0x160 [ 104.857776][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.857794][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.857811][ T286] do_syscall_64+0x4c/0xa0 [ 104.857828][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.857845][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.857863][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.857881][ T286] RIP: 0033:0x7f82b4826677 [ 104.857894][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.857910][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.857929][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.857951][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.857964][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.857977][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.857989][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.858005][ T286] [ 104.858504][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.858532][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.858550][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.858560][ T286] Call Trace: [ 104.858565][ T286] [ 104.858571][ T286] __dump_stack+0x21/0x30 [ 104.858588][ T286] dump_stack_lvl+0x110/0x170 [ 104.858605][ T286] ? show_regs_print_info+0x20/0x20 [ 104.858623][ T286] ? unlock_page+0x41/0xa0 [ 104.858641][ T286] ? kasan_check_range+0x89/0x2a0 [ 104.858660][ T286] dump_stack+0x15/0x20 [ 104.858676][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.858697][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.858716][ T286] ? f2fs_get_block+0x140/0x140 [ 104.858734][ T286] ? finish_task_switch+0x16b/0x790 [ 104.858754][ T286] ? switch_mm_irqs_off+0x730/0x960 [ 104.858774][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.858792][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.858815][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.858836][ T286] ? down_read_killable+0xc1/0x110 [ 104.858858][ T286] ? security_file_permission+0x83/0xa0 [ 104.858879][ T286] iterate_dir+0x25c/0x600 [ 104.858898][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.858919][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.858936][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.858961][ T286] ? filldir+0x660/0x660 [ 104.858978][ T286] ? __kasan_check_write+0x14/0x20 [ 104.858997][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.859018][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.859035][ T286] x64_sys_call+0x592/0x9a0 [ 104.859051][ T286] do_syscall_64+0x4c/0xa0 [ 104.859068][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.859086][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.859105][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.859124][ T286] RIP: 0033:0x7f82b484fef3 [ 104.859138][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.859152][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.859172][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.859184][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.859195][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.859209][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.859221][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.859237][ T286] [ 104.859497][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.859524][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.859542][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.859552][ T286] Call Trace: [ 104.859557][ T286] [ 104.859562][ T286] __dump_stack+0x21/0x30 [ 104.859580][ T286] dump_stack_lvl+0x110/0x170 [ 104.859598][ T286] ? show_regs_print_info+0x20/0x20 [ 104.859616][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.859635][ T286] dump_stack+0x15/0x20 [ 104.859652][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.859674][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.859692][ T286] ? f2fs_get_block+0x140/0x140 [ 104.859710][ T286] ? may_link+0x3e8/0x560 [ 104.859727][ T286] ? __kasan_check_read+0x11/0x20 [ 104.859746][ T286] ? may_create+0x440/0x440 [ 104.859764][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.859782][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.859801][ T286] f2fs_rmdir+0x3f/0x70 [ 104.859818][ T286] vfs_rmdir+0x1ae/0x450 [ 104.859836][ T286] do_rmdir+0x261/0x6b0 [ 104.859854][ T286] ? d_delete_notify+0x160/0x160 [ 104.859874][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.859893][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.859910][ T286] do_syscall_64+0x4c/0xa0 [ 104.859926][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.859951][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.859970][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.859989][ T286] RIP: 0033:0x7f82b4826677 [ 104.860002][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.860016][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.860035][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.860048][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.860061][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.860074][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.860086][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.860102][ T286] [ 104.860565][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.860592][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.860611][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.860620][ T286] Call Trace: [ 104.860625][ T286] [ 104.860631][ T286] __dump_stack+0x21/0x30 [ 104.860649][ T286] dump_stack_lvl+0x110/0x170 [ 104.860666][ T286] ? show_regs_print_info+0x20/0x20 [ 104.860685][ T286] dump_stack+0x15/0x20 [ 104.860702][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.860723][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.860742][ T286] ? f2fs_get_block+0x140/0x140 [ 104.860761][ T286] ? __kasan_check_read+0x11/0x20 [ 104.860780][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.860799][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.860820][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.860838][ T286] ? __sanitizer_cov_trace_pc+0x30/0x60 [ 104.860859][ T286] ? down_read_killable+0xc1/0x110 [ 104.860881][ T286] ? security_file_permission+0x83/0xa0 [ 104.860902][ T286] iterate_dir+0x25c/0x600 [ 104.860922][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.860953][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.860969][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.860989][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.861006][ T286] ? filldir+0x660/0x660 [ 104.861023][ T286] ? __kasan_check_write+0x14/0x20 [ 104.861042][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.861062][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.861079][ T286] x64_sys_call+0x592/0x9a0 [ 104.861096][ T286] do_syscall_64+0x4c/0xa0 [ 104.861112][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.861129][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.861147][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.861167][ T286] RIP: 0033:0x7f82b484fef3 [ 104.861180][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.861196][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.861215][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.861229][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.861241][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.861253][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.861264][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.861281][ T286] [ 104.861557][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.861628][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.861647][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.861656][ T286] Call Trace: [ 104.861660][ T286] [ 104.861666][ T286] __dump_stack+0x21/0x30 [ 104.861682][ T286] dump_stack_lvl+0x110/0x170 [ 104.861698][ T286] ? show_regs_print_info+0x20/0x20 [ 104.861717][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.861736][ T286] dump_stack+0x15/0x20 [ 104.861753][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.861775][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.861793][ T286] ? f2fs_get_block+0x140/0x140 [ 104.861811][ T286] ? may_link+0x3e8/0x560 [ 104.861829][ T286] ? may_create+0x440/0x440 [ 104.861846][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.861865][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.861885][ T286] f2fs_rmdir+0x3f/0x70 [ 104.861902][ T286] vfs_rmdir+0x1ae/0x450 [ 104.861920][ T286] do_rmdir+0x261/0x6b0 [ 104.861947][ T286] ? d_delete_notify+0x160/0x160 [ 104.861968][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.861987][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.862003][ T286] do_syscall_64+0x4c/0xa0 [ 104.862018][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.862034][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.862051][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.862070][ T286] RIP: 0033:0x7f82b4826677 [ 104.862083][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.862098][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.862116][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.862128][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.862141][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.862153][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.862164][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.862180][ T286] [ 104.862640][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.862667][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.862685][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.862694][ T286] Call Trace: [ 104.862699][ T286] [ 104.862704][ T286] __dump_stack+0x21/0x30 [ 104.862722][ T286] dump_stack_lvl+0x110/0x170 [ 104.862738][ T286] ? show_regs_print_info+0x20/0x20 [ 104.862756][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.862775][ T286] dump_stack+0x15/0x20 [ 104.862791][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.862812][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.862831][ T286] ? f2fs_get_block+0x140/0x140 [ 104.862850][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.862871][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.862889][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.862910][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.862930][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.862959][ T286] ? down_read_killable+0xc1/0x110 [ 104.862981][ T286] ? security_file_permission+0x83/0xa0 [ 104.863002][ T286] iterate_dir+0x25c/0x600 [ 104.863021][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.863042][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.863058][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.863077][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.863093][ T286] ? filldir+0x660/0x660 [ 104.863110][ T286] ? __kasan_check_write+0x14/0x20 [ 104.863128][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.863148][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.863165][ T286] x64_sys_call+0x592/0x9a0 [ 104.863182][ T286] do_syscall_64+0x4c/0xa0 [ 104.863199][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.863216][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.863234][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.863252][ T286] RIP: 0033:0x7f82b484fef3 [ 104.863265][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.863281][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.863299][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.863313][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.863325][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.863338][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.863351][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.863367][ T286] [ 104.863673][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.863700][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.863719][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.863728][ T286] Call Trace: [ 104.863733][ T286] [ 104.863740][ T286] __dump_stack+0x21/0x30 [ 104.863757][ T286] dump_stack_lvl+0x110/0x170 [ 104.863775][ T286] ? show_regs_print_info+0x20/0x20 [ 104.863794][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.863813][ T286] dump_stack+0x15/0x20 [ 104.863876][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.863898][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.863916][ T286] ? f2fs_get_block+0x140/0x140 [ 104.863934][ T286] ? may_link+0x3e8/0x560 [ 104.863960][ T286] ? may_create+0x440/0x440 [ 104.863994][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.864013][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.864033][ T286] f2fs_rmdir+0x3f/0x70 [ 104.864051][ T286] vfs_rmdir+0x1ae/0x450 [ 104.864070][ T286] do_rmdir+0x261/0x6b0 [ 104.864090][ T286] ? d_delete_notify+0x160/0x160 [ 104.864110][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.864128][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.864146][ T286] do_syscall_64+0x4c/0xa0 [ 104.864163][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.864181][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.864199][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.864219][ T286] RIP: 0033:0x7f82b4826677 [ 104.864232][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.864247][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.864265][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.864277][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.864291][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.864304][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.864316][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.864332][ T286] [ 104.864792][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.864820][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.864838][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.864847][ T286] Call Trace: [ 104.864851][ T286] [ 104.864857][ T286] __dump_stack+0x21/0x30 [ 104.864883][ T286] dump_stack_lvl+0x110/0x170 [ 104.864901][ T286] ? show_regs_print_info+0x20/0x20 [ 104.864921][ T286] dump_stack+0x15/0x20 [ 104.864945][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.864967][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.864985][ T286] ? f2fs_get_block+0x140/0x140 [ 104.865004][ T286] ? finish_task_switch+0x16b/0x790 [ 104.865023][ T286] ? switch_mm_irqs_off+0x730/0x960 [ 104.865043][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.865062][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.865084][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.865105][ T286] ? down_read_killable+0xc1/0x110 [ 104.865127][ T286] ? security_file_permission+0x83/0xa0 [ 104.865147][ T286] iterate_dir+0x25c/0x600 [ 104.865166][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.865188][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.865205][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.865222][ T286] ? filldir+0x660/0x660 [ 104.865240][ T286] ? __kasan_check_write+0x14/0x20 [ 104.865259][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.865278][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.865294][ T286] x64_sys_call+0x592/0x9a0 [ 104.865312][ T286] do_syscall_64+0x4c/0xa0 [ 104.865330][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.865348][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.865366][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.865384][ T286] RIP: 0033:0x7f82b484fef3 [ 104.865398][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.865412][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.865431][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.865443][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.865455][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.865468][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.865480][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.865497][ T286] [ 104.865794][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.865820][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.865837][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.865847][ T286] Call Trace: [ 104.865853][ T286] [ 104.865859][ T286] __dump_stack+0x21/0x30 [ 104.865876][ T286] dump_stack_lvl+0x110/0x170 [ 104.865893][ T286] ? show_regs_print_info+0x20/0x20 [ 104.865911][ T286] ? sysvec_reschedule_ipi+0x78/0x80 [ 104.865930][ T286] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 104.865958][ T286] dump_stack+0x15/0x20 [ 104.865974][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.865996][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.866015][ T286] ? f2fs_get_block+0x140/0x140 [ 104.866034][ T286] ? may_link+0x3e8/0x560 [ 104.866050][ T286] ? __kasan_check_read+0x11/0x20 [ 104.866068][ T286] ? may_create+0x440/0x440 [ 104.866085][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.866104][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.866125][ T286] f2fs_rmdir+0x3f/0x70 [ 104.866141][ T286] vfs_rmdir+0x1ae/0x450 [ 104.866160][ T286] do_rmdir+0x261/0x6b0 [ 104.866179][ T286] ? d_delete_notify+0x160/0x160 [ 104.866199][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.866217][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.866233][ T286] do_syscall_64+0x4c/0xa0 [ 104.866249][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.866267][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.866285][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.866303][ T286] RIP: 0033:0x7f82b4826677 [ 104.866316][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.866332][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.866351][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.866364][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.866376][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.866389][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.866402][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.866418][ T286] [ 104.866826][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.866854][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.866873][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.866882][ T286] Call Trace: [ 104.866888][ T286] [ 104.866893][ T286] __dump_stack+0x21/0x30 [ 104.866911][ T286] dump_stack_lvl+0x110/0x170 [ 104.866928][ T286] ? show_regs_print_info+0x20/0x20 [ 104.866957][ T286] dump_stack+0x15/0x20 [ 104.866974][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.866996][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.867015][ T286] ? f2fs_get_block+0x140/0x140 [ 104.867037][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.867055][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.867077][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.867098][ T286] ? fsnotify_perm+0x29/0x5b0 [ 104.867118][ T286] ? down_read_killable+0xc1/0x110 [ 104.867140][ T286] ? security_file_permission+0x83/0xa0 [ 104.867161][ T286] iterate_dir+0x25c/0x600 [ 104.867181][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.867202][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.867219][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.867240][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.867257][ T286] ? filldir+0x660/0x660 [ 104.867273][ T286] ? __kasan_check_write+0x14/0x20 [ 104.867292][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.867313][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.867330][ T286] x64_sys_call+0x592/0x9a0 [ 104.867347][ T286] do_syscall_64+0x4c/0xa0 [ 104.867363][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.867381][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.867400][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.867420][ T286] RIP: 0033:0x7f82b484fef3 [ 104.867434][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.867448][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.867467][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.867480][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.867493][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.867504][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.867516][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.867533][ T286] [ 104.867816][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.867842][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.867860][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.867870][ T286] Call Trace: [ 104.867875][ T286] [ 104.867881][ T286] __dump_stack+0x21/0x30 [ 104.867899][ T286] dump_stack_lvl+0x110/0x170 [ 104.867917][ T286] ? show_regs_print_info+0x20/0x20 [ 104.867945][ T286] dump_stack+0x15/0x20 [ 104.867961][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.867982][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.868001][ T286] ? f2fs_get_block+0x140/0x140 [ 104.868019][ T286] ? may_link+0x3e8/0x560 [ 104.868037][ T286] ? may_create+0x440/0x440 [ 104.868054][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.868073][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.868093][ T286] f2fs_rmdir+0x3f/0x70 [ 104.868109][ T286] vfs_rmdir+0x1ae/0x450 [ 104.868127][ T286] do_rmdir+0x261/0x6b0 [ 104.868146][ T286] ? d_delete_notify+0x160/0x160 [ 104.868167][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.868187][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.868204][ T286] do_syscall_64+0x4c/0xa0 [ 104.868221][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.868238][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.868255][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.868274][ T286] RIP: 0033:0x7f82b4826677 [ 104.868287][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.868302][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.868321][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.868334][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.868346][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.868359][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.868371][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.868387][ T286] [ 104.868774][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.868802][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.868820][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.868829][ T286] Call Trace: [ 104.868835][ T286] [ 104.868840][ T286] __dump_stack+0x21/0x30 [ 104.868858][ T286] dump_stack_lvl+0x110/0x170 [ 104.868875][ T286] ? show_regs_print_info+0x20/0x20 [ 104.868895][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.868915][ T286] dump_stack+0x15/0x20 [ 104.868931][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.868993][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.869012][ T286] ? f2fs_get_block+0x140/0x140 [ 104.869030][ T286] ? memcpy+0x56/0x70 [ 104.869057][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.869075][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.869098][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.869118][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 104.869140][ T286] ? down_read_killable+0xc1/0x110 [ 104.869161][ T286] ? security_file_permission+0x83/0xa0 [ 104.869182][ T286] iterate_dir+0x25c/0x600 [ 104.869201][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.869222][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.869238][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.869255][ T286] ? filldir+0x660/0x660 [ 104.869272][ T286] ? debug_smp_processor_id+0x17/0x20 [ 104.869293][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.869310][ T286] x64_sys_call+0x592/0x9a0 [ 104.869327][ T286] do_syscall_64+0x4c/0xa0 [ 104.869344][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.869362][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.869378][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.869397][ T286] RIP: 0033:0x7f82b484fef3 [ 104.869411][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.869425][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.869444][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.869456][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.869468][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.869481][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.869492][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.869509][ T286] [ 104.869791][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.869817][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.869835][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.869844][ T286] Call Trace: [ 104.869849][ T286] [ 104.869856][ T286] __dump_stack+0x21/0x30 [ 104.869874][ T286] dump_stack_lvl+0x110/0x170 [ 104.869891][ T286] ? show_regs_print_info+0x20/0x20 [ 104.869912][ T286] dump_stack+0x15/0x20 [ 104.869928][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.869959][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.869977][ T286] ? f2fs_get_block+0x140/0x140 [ 104.869993][ T286] ? may_link+0x3e8/0x560 [ 104.870011][ T286] ? rwsem_write_trylock+0xfa/0x300 [ 104.870031][ T286] ? may_create+0x440/0x440 [ 104.870049][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.870068][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.870088][ T286] f2fs_rmdir+0x3f/0x70 [ 104.870105][ T286] vfs_rmdir+0x1ae/0x450 [ 104.870123][ T286] do_rmdir+0x261/0x6b0 [ 104.870141][ T286] ? d_delete_notify+0x160/0x160 [ 104.870161][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.870180][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.870197][ T286] do_syscall_64+0x4c/0xa0 [ 104.870213][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.870231][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.870249][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.870267][ T286] RIP: 0033:0x7f82b4826677 [ 104.870280][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.870294][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.870312][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.870325][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.870339][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.870351][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.870364][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.870381][ T286] [ 104.870806][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.870834][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.870853][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.870862][ T286] Call Trace: [ 104.870868][ T286] [ 104.870874][ T286] __dump_stack+0x21/0x30 [ 104.870892][ T286] dump_stack_lvl+0x110/0x170 [ 104.870910][ T286] ? show_regs_print_info+0x20/0x20 [ 104.870929][ T286] ? sysvec_reschedule_ipi+0x78/0x80 [ 104.870956][ T286] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 104.870975][ T286] dump_stack+0x15/0x20 [ 104.870991][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.871013][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.871032][ T286] ? f2fs_get_block+0x140/0x140 [ 104.871051][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.871073][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.871091][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.871112][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.871133][ T286] ? down_read_killable+0xc1/0x110 [ 104.871155][ T286] ? security_file_permission+0x83/0xa0 [ 104.871176][ T286] iterate_dir+0x25c/0x600 [ 104.871196][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.871217][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.871234][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.871254][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.871270][ T286] ? filldir+0x660/0x660 [ 104.871287][ T286] ? __kasan_check_write+0x14/0x20 [ 104.871306][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.871326][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.871344][ T286] x64_sys_call+0x592/0x9a0 [ 104.871362][ T286] do_syscall_64+0x4c/0xa0 [ 104.871378][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.871396][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.871413][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.871432][ T286] RIP: 0033:0x7f82b484fef3 [ 104.871444][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.871459][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.871477][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.871491][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.871503][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.871516][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.871528][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.871544][ T286] [ 104.872666][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.872694][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.872713][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.872723][ T286] Call Trace: [ 104.872728][ T286] [ 104.872734][ T286] __dump_stack+0x21/0x30 [ 104.872753][ T286] dump_stack_lvl+0x110/0x170 [ 104.872771][ T286] ? show_regs_print_info+0x20/0x20 [ 104.872789][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.872809][ T286] dump_stack+0x15/0x20 [ 104.872824][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.872846][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.872866][ T286] ? f2fs_get_block+0x140/0x140 [ 104.872884][ T286] ? may_link+0x3e8/0x560 [ 104.872902][ T286] ? may_create+0x440/0x440 [ 104.872920][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.872948][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.872967][ T286] f2fs_rmdir+0x3f/0x70 [ 104.872985][ T286] vfs_rmdir+0x1ae/0x450 [ 104.873004][ T286] do_rmdir+0x261/0x6b0 [ 104.873022][ T286] ? d_delete_notify+0x160/0x160 [ 104.873042][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.873062][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.873079][ T286] do_syscall_64+0x4c/0xa0 [ 104.873095][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.873113][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.873131][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.873151][ T286] RIP: 0033:0x7f82b4826677 [ 104.873165][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.873181][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.873205][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.873219][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.873232][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.873244][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.873255][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.873272][ T286] [ 104.873733][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.873761][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.873779][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.873788][ T286] Call Trace: [ 104.873793][ T286] [ 104.873799][ T286] __dump_stack+0x21/0x30 [ 104.873816][ T286] dump_stack_lvl+0x110/0x170 [ 104.873834][ T286] ? show_regs_print_info+0x20/0x20 [ 104.873853][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.873873][ T286] dump_stack+0x15/0x20 [ 104.873889][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.873910][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.873929][ T286] ? f2fs_get_block+0x140/0x140 [ 104.873957][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.873978][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.873997][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.874020][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.874041][ T286] ? down_read_killable+0xc1/0x110 [ 104.874063][ T286] ? security_file_permission+0x83/0xa0 [ 104.874085][ T286] iterate_dir+0x25c/0x600 [ 104.874103][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.874124][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.874141][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.874162][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.874178][ T286] ? filldir+0x660/0x660 [ 104.874195][ T286] ? __kasan_check_write+0x14/0x20 [ 104.874214][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.874234][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.874251][ T286] x64_sys_call+0x592/0x9a0 [ 104.874268][ T286] do_syscall_64+0x4c/0xa0 [ 104.874284][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.874303][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.874322][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.874344][ T286] RIP: 0033:0x7f82b484fef3 [ 104.874358][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.874373][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.874392][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.874415][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.874426][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.874438][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.874449][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.874462][ T286] [ 104.874735][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.874763][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.874780][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.874790][ T286] Call Trace: [ 104.874795][ T286] [ 104.874802][ T286] __dump_stack+0x21/0x30 [ 104.874821][ T286] dump_stack_lvl+0x110/0x170 [ 104.874838][ T286] ? show_regs_print_info+0x20/0x20 [ 104.874857][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.874877][ T286] dump_stack+0x15/0x20 [ 104.874893][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.874915][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.874935][ T286] ? f2fs_get_block+0x140/0x140 [ 104.874961][ T286] ? may_link+0x3e8/0x560 [ 104.874979][ T286] ? may_create+0x440/0x440 [ 104.874997][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.875017][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.875036][ T286] f2fs_rmdir+0x3f/0x70 [ 104.875053][ T286] vfs_rmdir+0x1ae/0x450 [ 104.875072][ T286] do_rmdir+0x261/0x6b0 [ 104.875091][ T286] ? d_delete_notify+0x160/0x160 [ 104.875112][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.875131][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.875148][ T286] do_syscall_64+0x4c/0xa0 [ 104.875165][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.875183][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.875203][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.875223][ T286] RIP: 0033:0x7f82b4826677 [ 104.875237][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.875253][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.875273][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.875287][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.875301][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.875313][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.875326][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.875343][ T286] [ 104.875782][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.875809][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.875829][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.875838][ T286] Call Trace: [ 104.875844][ T286] [ 104.875850][ T286] __dump_stack+0x21/0x30 [ 104.875868][ T286] dump_stack_lvl+0x110/0x170 [ 104.875886][ T286] ? show_regs_print_info+0x20/0x20 [ 104.875905][ T286] ? f2fs_is_valid_blkaddr+0x49d/0x1220 [ 104.875928][ T286] dump_stack+0x15/0x20 [ 104.875954][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.875976][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.875996][ T286] ? f2fs_get_block+0x140/0x140 [ 104.876015][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.876036][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.876056][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.876079][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.876101][ T286] ? down_read_killable+0xc1/0x110 [ 104.876124][ T286] ? security_file_permission+0x83/0xa0 [ 104.876145][ T286] iterate_dir+0x25c/0x600 [ 104.876164][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.876185][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.876202][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.876223][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.876240][ T286] ? filldir+0x660/0x660 [ 104.876258][ T286] ? __kasan_check_write+0x14/0x20 [ 104.876277][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.876298][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.876315][ T286] x64_sys_call+0x592/0x9a0 [ 104.876332][ T286] do_syscall_64+0x4c/0xa0 [ 104.876350][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.876369][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.876388][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.876408][ T286] RIP: 0033:0x7f82b484fef3 [ 104.876439][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.876454][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.876474][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.876487][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.876499][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.876513][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.876526][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.876544][ T286] [ 104.876823][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.876850][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.876869][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.876880][ T286] Call Trace: [ 104.876885][ T286] [ 104.876892][ T286] __dump_stack+0x21/0x30 [ 104.876910][ T286] dump_stack_lvl+0x110/0x170 [ 104.876928][ T286] ? show_regs_print_info+0x20/0x20 [ 104.876955][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.876976][ T286] dump_stack+0x15/0x20 [ 104.876993][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.877015][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.877035][ T286] ? f2fs_get_block+0x140/0x140 [ 104.877054][ T286] ? may_link+0x3e8/0x560 [ 104.877072][ T286] ? may_create+0x440/0x440 [ 104.877089][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.877109][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.877129][ T286] f2fs_rmdir+0x3f/0x70 [ 104.877147][ T286] vfs_rmdir+0x1ae/0x450 [ 104.877166][ T286] do_rmdir+0x261/0x6b0 [ 104.877185][ T286] ? d_delete_notify+0x160/0x160 [ 104.877207][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.877226][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.877243][ T286] do_syscall_64+0x4c/0xa0 [ 104.877260][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.877279][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.877298][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.877318][ T286] RIP: 0033:0x7f82b4826677 [ 104.877332][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.877348][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.877368][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.877382][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.877395][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.877407][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.877420][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.877437][ T286] [ 104.877935][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.877973][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.877992][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.878002][ T286] Call Trace: [ 104.878008][ T286] [ 104.878014][ T286] __dump_stack+0x21/0x30 [ 104.878033][ T286] dump_stack_lvl+0x110/0x170 [ 104.878051][ T286] ? show_regs_print_info+0x20/0x20 [ 104.878070][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.878090][ T286] dump_stack+0x15/0x20 [ 104.878107][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.878128][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.878156][ T286] ? f2fs_get_block+0x140/0x140 [ 104.878178][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.878198][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.878221][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.878242][ T286] ? sysvec_reschedule_ipi+0x78/0x80 [ 104.878262][ T286] ? down_read_killable+0xc1/0x110 [ 104.878283][ T286] ? iterate_dir+0xb6/0x600 [ 104.878305][ T286] iterate_dir+0x25c/0x600 [ 104.878325][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.878354][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.878373][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.878394][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.878411][ T286] ? filldir+0x660/0x660 [ 104.878428][ T286] ? __kasan_check_write+0x14/0x20 [ 104.878447][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.878468][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.878486][ T286] x64_sys_call+0x592/0x9a0 [ 104.878504][ T286] do_syscall_64+0x4c/0xa0 [ 104.878522][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.878541][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.878561][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.878580][ T286] RIP: 0033:0x7f82b484fef3 [ 104.878594][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.878611][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.878631][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.878646][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.878664][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.878677][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.878690][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.878708][ T286] [ 104.879018][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.879045][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.879064][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.879074][ T286] Call Trace: [ 104.879080][ T286] [ 104.879087][ T286] __dump_stack+0x21/0x30 [ 104.879105][ T286] dump_stack_lvl+0x110/0x170 [ 104.879124][ T286] ? show_regs_print_info+0x20/0x20 [ 104.879144][ T286] dump_stack+0x15/0x20 [ 104.879161][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.879184][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.879202][ T286] ? f2fs_get_block+0x140/0x140 [ 104.879222][ T286] ? may_link+0x3e8/0x560 [ 104.879240][ T286] ? may_create+0x440/0x440 [ 104.879259][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.879278][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.879300][ T286] f2fs_rmdir+0x3f/0x70 [ 104.879318][ T286] vfs_rmdir+0x1ae/0x450 [ 104.879337][ T286] do_rmdir+0x261/0x6b0 [ 104.879356][ T286] ? d_delete_notify+0x160/0x160 [ 104.879378][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.879398][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.879416][ T286] do_syscall_64+0x4c/0xa0 [ 104.879433][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.879450][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.879469][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.879488][ T286] RIP: 0033:0x7f82b4826677 [ 104.879502][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.879517][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.879538][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.879552][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.879565][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.879578][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.879592][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.879609][ T286] [ 104.879979][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.880008][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.880028][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.880038][ T286] Call Trace: [ 104.880044][ T286] [ 104.880050][ T286] __dump_stack+0x21/0x30 [ 104.880068][ T286] dump_stack_lvl+0x110/0x170 [ 104.880086][ T286] ? show_regs_print_info+0x20/0x20 [ 104.880106][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.880126][ T286] dump_stack+0x15/0x20 [ 104.880142][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.880165][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.880184][ T286] ? f2fs_get_block+0x140/0x140 [ 104.880204][ T286] ? memcpy+0x56/0x70 [ 104.880224][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.880244][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.880267][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.880287][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 104.880309][ T286] ? down_read_killable+0xc1/0x110 [ 104.880331][ T286] ? security_file_permission+0x83/0xa0 [ 104.880352][ T286] iterate_dir+0x25c/0x600 [ 104.880372][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.880394][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.880412][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.880430][ T286] ? filldir+0x660/0x660 [ 104.880445][ T286] ? debug_smp_processor_id+0x17/0x20 [ 104.880467][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.880485][ T286] x64_sys_call+0x592/0x9a0 [ 104.880503][ T286] do_syscall_64+0x4c/0xa0 [ 104.880520][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.880539][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.880558][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.880578][ T286] RIP: 0033:0x7f82b484fef3 [ 104.880590][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.880605][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.880625][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.880639][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.880652][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.880665][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.880678][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.880695][ T286] [ 104.880955][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.880982][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.881001][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.881011][ T286] Call Trace: [ 104.881016][ T286] [ 104.881023][ T286] __dump_stack+0x21/0x30 [ 104.881041][ T286] dump_stack_lvl+0x110/0x170 [ 104.881059][ T286] ? show_regs_print_info+0x20/0x20 [ 104.881078][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.881099][ T286] dump_stack+0x15/0x20 [ 104.881116][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.881138][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.881157][ T286] ? f2fs_get_block+0x140/0x140 [ 104.881175][ T286] ? may_link+0x3e8/0x560 [ 104.881192][ T286] ? HAS_UNMAPPED_ID+0x199/0x240 [ 104.881212][ T286] ? may_create+0x440/0x440 [ 104.881230][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.881250][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.881279][ T286] f2fs_rmdir+0x3f/0x70 [ 104.881297][ T286] vfs_rmdir+0x1ae/0x450 [ 104.881315][ T286] do_rmdir+0x261/0x6b0 [ 104.881335][ T286] ? d_delete_notify+0x160/0x160 [ 104.881355][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.881375][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.881393][ T286] do_syscall_64+0x4c/0xa0 [ 104.881410][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.881429][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.881446][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.881465][ T286] RIP: 0033:0x7f82b4826677 [ 104.881479][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.881495][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.881515][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.881529][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.881543][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.881556][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.881569][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.881586][ T286] [ 104.881826][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.881921][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.881949][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.881959][ T286] Call Trace: [ 104.881964][ T286] [ 104.881970][ T286] __dump_stack+0x21/0x30 [ 104.881989][ T286] dump_stack_lvl+0x110/0x170 [ 104.882007][ T286] ? show_regs_print_info+0x20/0x20 [ 104.882027][ T286] ? f2fs_is_valid_blkaddr+0x3c6/0x1220 [ 104.882049][ T286] dump_stack+0x15/0x20 [ 104.882067][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.882089][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.882109][ T286] ? f2fs_get_block+0x140/0x140 [ 104.882128][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.882150][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.882169][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.882193][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.882215][ T286] ? down_read_killable+0xc1/0x110 [ 104.882238][ T286] ? security_file_permission+0x83/0xa0 [ 104.882259][ T286] iterate_dir+0x25c/0x600 [ 104.882279][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.882301][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.882319][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.882339][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.882357][ T286] ? filldir+0x660/0x660 [ 104.882375][ T286] ? __kasan_check_write+0x14/0x20 [ 104.882395][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.882415][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.882432][ T286] x64_sys_call+0x592/0x9a0 [ 104.882449][ T286] do_syscall_64+0x4c/0xa0 [ 104.882466][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.882484][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.882503][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.882522][ T286] RIP: 0033:0x7f82b484fef3 [ 104.882536][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.882553][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.882572][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.882586][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.882600][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.882613][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.882627][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.882644][ T286] [ 104.882831][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.882859][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.882879][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.882889][ T286] Call Trace: [ 104.882895][ T286] [ 104.882906][ T286] __dump_stack+0x21/0x30 [ 104.882925][ T286] dump_stack_lvl+0x110/0x170 [ 104.882951][ T286] ? show_regs_print_info+0x20/0x20 [ 104.882971][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.882990][ T286] dump_stack+0x15/0x20 [ 104.883008][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.883030][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.883049][ T286] ? f2fs_get_block+0x140/0x140 [ 104.883068][ T286] ? may_link+0x3e8/0x560 [ 104.883086][ T286] ? may_create+0x440/0x440 [ 104.883105][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.883124][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.883146][ T286] f2fs_rmdir+0x3f/0x70 [ 104.883163][ T286] vfs_rmdir+0x1ae/0x450 [ 104.883182][ T286] do_rmdir+0x261/0x6b0 [ 104.883202][ T286] ? d_delete_notify+0x160/0x160 [ 104.883224][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.883244][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.883260][ T286] do_syscall_64+0x4c/0xa0 [ 104.883277][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.883296][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.883315][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.883334][ T286] RIP: 0033:0x7f82b4826677 [ 104.883349][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.883365][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.883384][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.883398][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.883411][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.883424][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.883437][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.883454][ T286] [ 104.883889][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.883916][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.883936][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.883955][ T286] Call Trace: [ 104.883960][ T286] [ 104.883967][ T286] __dump_stack+0x21/0x30 [ 104.883993][ T286] dump_stack_lvl+0x110/0x170 [ 104.884012][ T286] ? show_regs_print_info+0x20/0x20 [ 104.884032][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.884052][ T286] dump_stack+0x15/0x20 [ 104.884070][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.884093][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.884112][ T286] ? f2fs_get_block+0x140/0x140 [ 104.884134][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.884153][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.884177][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.884199][ T286] ? down_read_killable+0xc1/0x110 [ 104.884222][ T286] ? security_file_permission+0x83/0xa0 [ 104.884243][ T286] iterate_dir+0x25c/0x600 [ 104.884262][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.884284][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.884301][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.884322][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.884340][ T286] ? filldir+0x660/0x660 [ 104.884357][ T286] ? __kasan_check_write+0x14/0x20 [ 104.884378][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.884398][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.884415][ T286] x64_sys_call+0x592/0x9a0 [ 104.884434][ T286] do_syscall_64+0x4c/0xa0 [ 104.884450][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.884469][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.884489][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.884509][ T286] RIP: 0033:0x7f82b484fef3 [ 104.884527][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.884544][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.884563][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.884577][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.884590][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.884604][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.884618][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.884635][ T286] [ 104.884895][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.884923][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.884950][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.884961][ T286] Call Trace: [ 104.884967][ T286] [ 104.884973][ T286] __dump_stack+0x21/0x30 [ 104.884992][ T286] dump_stack_lvl+0x110/0x170 [ 104.885009][ T286] ? show_regs_print_info+0x20/0x20 [ 104.885028][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.885049][ T286] dump_stack+0x15/0x20 [ 104.885067][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.885090][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.885109][ T286] ? f2fs_get_block+0x140/0x140 [ 104.885128][ T286] ? may_link+0x3e8/0x560 [ 104.885144][ T286] ? __kasan_check_read+0x11/0x20 [ 104.885164][ T286] ? may_create+0x440/0x440 [ 104.885183][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.885203][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.885224][ T286] f2fs_rmdir+0x3f/0x70 [ 104.885242][ T286] vfs_rmdir+0x1ae/0x450 [ 104.885261][ T286] do_rmdir+0x261/0x6b0 [ 104.885280][ T286] ? d_delete_notify+0x160/0x160 [ 104.885300][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.885319][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.885338][ T286] do_syscall_64+0x4c/0xa0 [ 104.885355][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.885373][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.885392][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.885412][ T286] RIP: 0033:0x7f82b4826677 [ 104.885426][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.885441][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.885459][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.885473][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.885486][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.885499][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.885513][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.885530][ T286] [ 104.885994][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.886022][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.886041][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.886051][ T286] Call Trace: [ 104.886057][ T286] [ 104.886064][ T286] __dump_stack+0x21/0x30 [ 104.886082][ T286] dump_stack_lvl+0x110/0x170 [ 104.886101][ T286] ? show_regs_print_info+0x20/0x20 [ 104.886120][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.886141][ T286] dump_stack+0x15/0x20 [ 104.886158][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.886181][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.886200][ T286] ? f2fs_get_block+0x140/0x140 [ 104.886222][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.886241][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.886261][ T286] ? __kasan_check_read+0x11/0x20 [ 104.886285][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.886307][ T286] ? down_read_killable+0x107/0x110 [ 104.886329][ T286] ? security_file_permission+0x83/0xa0 [ 104.886351][ T286] iterate_dir+0x25c/0x600 [ 104.886370][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.886393][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.886411][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.886432][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.886448][ T286] ? filldir+0x660/0x660 [ 104.886466][ T286] ? __kasan_check_write+0x14/0x20 [ 104.886485][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.886505][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.886523][ T286] x64_sys_call+0x592/0x9a0 [ 104.886540][ T286] do_syscall_64+0x4c/0xa0 [ 104.886558][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.886576][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.886596][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.886615][ T286] RIP: 0033:0x7f82b484fef3 [ 104.886629][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.886644][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.886664][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.886679][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.886692][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.886705][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.886718][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.886736][ T286] [ 104.887028][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.887055][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.887074][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.887084][ T286] Call Trace: [ 104.887089][ T286] [ 104.887096][ T286] __dump_stack+0x21/0x30 [ 104.887115][ T286] dump_stack_lvl+0x110/0x170 [ 104.887134][ T286] ? show_regs_print_info+0x20/0x20 [ 104.887156][ T286] dump_stack+0x15/0x20 [ 104.887173][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.887196][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.887216][ T286] ? f2fs_get_block+0x140/0x140 [ 104.887234][ T286] ? may_link+0x3e8/0x560 [ 104.887251][ T286] ? irqentry_exit_cond_resched+0x29/0x30 [ 104.887271][ T286] ? may_create+0x440/0x440 [ 104.887290][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.887310][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.887331][ T286] f2fs_rmdir+0x3f/0x70 [ 104.887350][ T286] vfs_rmdir+0x1ae/0x450 [ 104.887369][ T286] do_rmdir+0x261/0x6b0 [ 104.887387][ T286] ? d_delete_notify+0x160/0x160 [ 104.887409][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.887429][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.887446][ T286] do_syscall_64+0x4c/0xa0 [ 104.887464][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.887483][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.887503][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.887523][ T286] RIP: 0033:0x7f82b4826677 [ 104.887536][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.887552][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.887573][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.887587][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.887600][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.887613][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.887626][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.887644][ T286] [ 104.888052][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.888080][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.888099][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.888108][ T286] Call Trace: [ 104.888114][ T286] [ 104.888121][ T286] __dump_stack+0x21/0x30 [ 104.888140][ T286] dump_stack_lvl+0x110/0x170 [ 104.888158][ T286] ? show_regs_print_info+0x20/0x20 [ 104.888177][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.888196][ T286] dump_stack+0x15/0x20 [ 104.888213][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.888236][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.888256][ T286] ? f2fs_get_block+0x140/0x140 [ 104.888276][ T286] ? memcpy+0x56/0x70 [ 104.888296][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.888316][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.888338][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.888359][ T286] ? __se_sys_newfstat+0x2fc/0x3b0 [ 104.888382][ T286] ? down_read_killable+0xc1/0x110 [ 104.888404][ T286] ? security_file_permission+0x83/0xa0 [ 104.888426][ T286] iterate_dir+0x25c/0x600 [ 104.888445][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.888467][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.888485][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.888503][ T286] ? filldir+0x660/0x660 [ 104.888520][ T286] ? debug_smp_processor_id+0x17/0x20 [ 104.888541][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.888559][ T286] x64_sys_call+0x592/0x9a0 [ 104.888578][ T286] do_syscall_64+0x4c/0xa0 [ 104.888595][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.888615][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.888635][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.888655][ T286] RIP: 0033:0x7f82b484fef3 [ 104.888668][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.888685][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.888705][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.888719][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.888732][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.888746][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.888759][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.888776][ T286] [ 104.889077][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.889105][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.889124][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.889134][ T286] Call Trace: [ 104.889139][ T286] [ 104.889146][ T286] __dump_stack+0x21/0x30 [ 104.889165][ T286] dump_stack_lvl+0x110/0x170 [ 104.889183][ T286] ? show_regs_print_info+0x20/0x20 [ 104.889203][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.889223][ T286] dump_stack+0x15/0x20 [ 104.889241][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.889263][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.889282][ T286] ? f2fs_get_block+0x140/0x140 [ 104.889301][ T286] ? may_link+0x3e8/0x560 [ 104.889318][ T286] ? __kasan_check_read+0x11/0x20 [ 104.889338][ T286] ? may_create+0x440/0x440 [ 104.889357][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.889377][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.889399][ T286] f2fs_rmdir+0x3f/0x70 [ 104.889416][ T286] vfs_rmdir+0x1ae/0x450 [ 104.889436][ T286] do_rmdir+0x261/0x6b0 [ 104.889454][ T286] ? d_delete_notify+0x160/0x160 [ 104.889474][ T286] ? __sanitizer_cov_trace_const_cmp2+0x90/0x90 [ 104.889499][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.889518][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.889536][ T286] do_syscall_64+0x4c/0xa0 [ 104.889554][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.889571][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.889590][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.889611][ T286] RIP: 0033:0x7f82b4826677 [ 104.889624][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.889641][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.889661][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.889675][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.889689][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.889702][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.889714][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.889731][ T286] [ 104.890179][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.890205][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.890224][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.890234][ T286] Call Trace: [ 104.890239][ T286] [ 104.890246][ T286] __dump_stack+0x21/0x30 [ 104.890264][ T286] dump_stack_lvl+0x110/0x170 [ 104.890282][ T286] ? show_regs_print_info+0x20/0x20 [ 104.890301][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.890321][ T286] dump_stack+0x15/0x20 [ 104.890338][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.890361][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.890381][ T286] ? f2fs_get_block+0x140/0x140 [ 104.890402][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.890421][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.890441][ T286] ? __kasan_check_read+0x11/0x20 [ 104.890463][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.890485][ T286] ? down_read_killable+0x107/0x110 [ 104.890508][ T286] ? security_file_permission+0x83/0xa0 [ 104.890529][ T286] iterate_dir+0x25c/0x600 [ 104.890549][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.890570][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.890588][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.890619][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.890637][ T286] ? filldir+0x660/0x660 [ 104.890654][ T286] ? __kasan_check_write+0x14/0x20 [ 104.890674][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.890695][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.890712][ T286] x64_sys_call+0x592/0x9a0 [ 104.890730][ T286] do_syscall_64+0x4c/0xa0 [ 104.890747][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.890766][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.890785][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.890806][ T286] RIP: 0033:0x7f82b484fef3 [ 104.890828][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.890844][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.890863][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.890877][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.890890][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.890903][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.890916][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.890944][ T286] [ 104.891126][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.891154][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.891173][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.891183][ T286] Call Trace: [ 104.891189][ T286] [ 104.891196][ T286] __dump_stack+0x21/0x30 [ 104.891214][ T286] dump_stack_lvl+0x110/0x170 [ 104.891233][ T286] ? show_regs_print_info+0x20/0x20 [ 104.891251][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.891271][ T286] dump_stack+0x15/0x20 [ 104.891288][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.891311][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.891330][ T286] ? f2fs_get_block+0x140/0x140 [ 104.891349][ T286] ? may_link+0x3e8/0x560 [ 104.891368][ T286] ? may_create+0x440/0x440 [ 104.891387][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.891406][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.891427][ T286] f2fs_rmdir+0x3f/0x70 [ 104.891444][ T286] vfs_rmdir+0x1ae/0x450 [ 104.891464][ T286] do_rmdir+0x261/0x6b0 [ 104.891483][ T286] ? d_delete_notify+0x160/0x160 [ 104.891505][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.891525][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.891543][ T286] do_syscall_64+0x4c/0xa0 [ 104.891559][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.891578][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.891597][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.891617][ T286] RIP: 0033:0x7f82b4826677 [ 104.891642][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.891656][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.891675][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.891688][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.891701][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.891714][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.891728][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.891746][ T286] [ 104.892300][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.892328][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.892347][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.892357][ T286] Call Trace: [ 104.892363][ T286] [ 104.892369][ T286] __dump_stack+0x21/0x30 [ 104.892386][ T286] dump_stack_lvl+0x110/0x170 [ 104.892404][ T286] ? show_regs_print_info+0x20/0x20 [ 104.892425][ T286] dump_stack+0x15/0x20 [ 104.892442][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.892463][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.892483][ T286] ? f2fs_get_block+0x140/0x140 [ 104.892503][ T286] ? __kasan_check_read+0x11/0x20 [ 104.892524][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.892543][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.892567][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.892587][ T286] ? kasan_check_range+0x7c/0x2a0 [ 104.892607][ T286] ? down_read_killable+0xc1/0x110 [ 104.892630][ T286] ? security_file_permission+0x83/0xa0 [ 104.892651][ T286] iterate_dir+0x25c/0x600 [ 104.892672][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.892693][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.892710][ T286] ? release_firmware_map_entry+0x190/0x190 [ 104.892732][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.892749][ T286] ? filldir+0x660/0x660 [ 104.892767][ T286] ? __kasan_check_write+0x14/0x20 [ 104.892794][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.892815][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.892833][ T286] x64_sys_call+0x592/0x9a0 [ 104.892851][ T286] do_syscall_64+0x4c/0xa0 [ 104.892869][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.892887][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.892906][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.892927][ T286] RIP: 0033:0x7f82b484fef3 [ 104.892949][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.892966][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.892985][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.893000][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006 [ 104.893013][ T286] RBP: 000055555c563980 R08: 00007f82b4a7fe20 R09: 0000000000000001 [ 104.893026][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555c563954 [ 104.893039][ T286] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fff6c5bc940 [ 104.893056][ T286] [ 104.893318][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.893345][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.893364][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.893375][ T286] Call Trace: [ 104.893380][ T286] [ 104.893387][ T286] __dump_stack+0x21/0x30 [ 104.893406][ T286] dump_stack_lvl+0x110/0x170 [ 104.893424][ T286] ? show_regs_print_info+0x20/0x20 [ 104.893442][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.893462][ T286] dump_stack+0x15/0x20 [ 104.893479][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.893502][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.893521][ T286] ? f2fs_get_block+0x140/0x140 [ 104.893539][ T286] ? may_link+0x3e8/0x560 [ 104.893558][ T286] ? may_create+0x440/0x440 [ 104.893575][ T286] f2fs_get_lock_data_page+0x59/0x230 [ 104.893595][ T286] f2fs_empty_dir+0xa6/0x230 [ 104.893617][ T286] f2fs_rmdir+0x3f/0x70 [ 104.893635][ T286] vfs_rmdir+0x1ae/0x450 [ 104.893654][ T286] do_rmdir+0x261/0x6b0 [ 104.893674][ T286] ? d_delete_notify+0x160/0x160 [ 104.893696][ T286] __x64_sys_unlinkat+0xc7/0xf0 [ 104.893716][ T286] x64_sys_call+0x4c0/0x9a0 [ 104.893733][ T286] do_syscall_64+0x4c/0xa0 [ 104.893750][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.893769][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.893789][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.893809][ T286] RIP: 0033:0x7f82b4826677 [ 104.893824][ T286] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.893840][ T286] RSP: 002b:00007fff6c5b95d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.893859][ T286] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f82b4826677 [ 104.893873][ T286] RDX: 0000000000000200 RSI: 00007fff6c5ba780 RDI: 00000000ffffff9c [ 104.893887][ T286] RBP: 00007f82b48bdefb R08: 0000000000008680 R09: 0000000000000001 [ 104.893899][ T286] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff6c5ba780 [ 104.893912][ T286] R13: 00007f82b48bdefb R14: 000055555c5404e8 R15: 00007fff6c5bc940 [ 104.893930][ T286] [ 104.894381][ T286] F2FS-fs (loop1): access invalid blkaddr:36 [ 104.894409][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G B W syzkaller #0 [ 104.894428][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.894437][ T286] Call Trace: [ 104.894442][ T286] [ 104.894448][ T286] __dump_stack+0x21/0x30 [ 104.894466][ T286] dump_stack_lvl+0x110/0x170 [ 104.894485][ T286] ? show_regs_print_info+0x20/0x20 [ 104.894504][ T286] ? page_cache_prev_miss+0x290/0x290 [ 104.894525][ T286] dump_stack+0x15/0x20 [ 104.894542][ T286] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 104.894565][ T286] f2fs_get_read_data_page+0x43f/0x6e0 [ 104.894584][ T286] ? f2fs_get_block+0x140/0x140 [ 104.894603][ T286] ? __kasan_check_write+0x14/0x20 [ 104.894624][ T286] f2fs_find_data_page+0x189/0x3c0 [ 104.894644][ T286] f2fs_readdir+0x4b4/0x9e0 [ 104.894667][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.894690][ T286] ? down_read_killable+0xc1/0x110 [ 104.894713][ T286] ? security_file_permission+0x83/0xa0 [ 104.894734][ T286] iterate_dir+0x25c/0x600 [ 104.894753][ T286] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 104.894775][ T286] __se_sys_getdents64+0xf2/0x250 [ 104.894793][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 104.894810][ T286] ? filldir+0x660/0x660 [ 104.894829][ T286] ? __kasan_check_write+0x14/0x20 [ 104.894849][ T286] ? switch_fpu_return+0x15d/0x2c0 [ 104.894870][ T286] __x64_sys_getdents64+0x7b/0x90 [ 104.894888][ T286] x64_sys_call+0x592/0x9a0 [ 104.894905][ T286] do_syscall_64+0x4c/0xa0 [ 104.894923][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.894950][ T286] ? clear_bhb_loop+0x50/0xa0 [ 104.894970][ T286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.894990][ T286] RIP: 0033:0x7f82b484fef3 [ 104.895004][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 104.895021][ T286] RSP: 002b:00007fff6c5b95a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 104.895040][ T286] RAX: ffffffffffffffda RBX: 000055555c563950 RCX: 00007f82b484fef3 [ 104.895055][ T286] RDX: 0000000000008000 RSI: 000055555c563980 RDI: 0000000000000006