last executing test programs:

7.690448119s ago: executing program 4 (id=5):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r0, 0x6, &(0x7f00000007c0)={0x0, 0x2, 0x37, 0x1})

7.666034341s ago: executing program 4 (id=6):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x6, 0x4, 0xefffffffffffffff, 0x2, 0x1000, 0x2000000, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41900})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.328548629s ago: executing program 4 (id=8):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f00000003c0)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f00000009c0)=""/223, 0xdf}, {&(0x7f0000001bc0)=""/4110, 0x100e}, {&(0x7f0000000000)=""/248, 0xf8}, {&(0x7f0000000800)=""/139, 0x8b}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000900)=""/144, 0x90}], 0x8}, 0x10001}], 0x1, 0x0, 0x0)

6.446175251s ago: executing program 1 (id=13):
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
sendfile(r1, r1, 0x0, 0x80000000)
r2 = open(0x0, 0x145142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r4 = dup(r0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x20200}, 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}})
bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, &(0x7f00000002c0), {[{{@ip={@local, @loopback, 0xff000000, 0xffff00, 'pimreg\x00', 'geneve1\x00', {0xff}, {}, 0x5e, 0x3, 0x20}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000414b47fd4701d524faf41663821700"/29, @ANYRES32], 0x58)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r8)
umount2(&(0x7f0000000180)='./cgroup\x00', 0x5)
accept4$unix(r4, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x80800)
chdir(&(0x7f0000000100)='./file0\x00')

6.154784545s ago: executing program 3 (id=18):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @loopback, 0x7}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

6.145840376s ago: executing program 3 (id=19):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&\x00'], 0xb)

6.107294819s ago: executing program 3 (id=20):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache'])
chdir(&(0x7f0000000000)='./file0\x00')
fchownat(0xffffffffffffff9c, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000280)='./mnt\x00', 0x2200c10, &(0x7f0000002880)={[{@resgid}]}, 0x0, 0x256, &(0x7f0000000c40)="$eJzs3U1oFHcYB+B3ZnebJllK2l4KpR9QSmkDob0VekkvLQRKCKUU2kJKKb20JIU0obfEkxcPelbJyUsQb0aPkkvwogieouYQL4oGDwYPeliZnY3EfBjJrjuSeR6YZGfn4/0PO7935jJMAKU1EBHDEVGJiMGIqEVEsnWFj/NpoDU737s8HtFo/Pggaa6Xz+c2t+uPiLmI+DoiltIk/q5GzCz+uvZo5fvPjk3XPj2z+EtvVw+yZX1t9YeN06NHz498NXP1+r3RJIaj/txxdV6yy3fVJOKdV1HsNZFUix4BL2Ps/3M3sty/GxGfNPNfizTyH+/41BtLtfji1F7bnrh/7f1ujhXovEajll0D5xpA6aQRUY8kHWrd+9cjTYeG8nv4m5W+9J/Jqf8G/5qcnviz6E4FdEo9YvW7iz0X+rfkP+sFdyp5/oHDK8v/T2MLt7LPG5WiRwN0xQf5vyz/g7/Pfh7yD6Uj/1Be8g/ltWf+a8WNCegO138oL/mHw6uxT6blH8pL/qG85B8Ot54XLJN/KK+t+QcAyqXRU/QTyEBRiu4/AAAAAAAAAAAAAAAAAADATvO9y+ObU7dqXj4Zsf5tRFR3q19pvo844s3m376HSbbaM0m+WVt++6jNHbTpbMFPX791u9j6Vz4stv7sRMTckdbJtOP8S1rn38FfiPP2Pstrfxx41weSbJv/5ufu1t/uyUKx9UdWIi5l/efL3fpPGu/F3T37T70Dr0r693GbOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBrngYAAP//131ucA==")

6.001250268s ago: executing program 1 (id=24):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x0)

5.941086983s ago: executing program 3 (id=28):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x90}}, 0x4000040)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

5.940468553s ago: executing program 0 (id=29):
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x30000008})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.85370161s ago: executing program 3 (id=30):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000200)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x2000000}}, {@checkpoint_diasble}, {@inline_data}, {@alloc_mode_def}, {@fsync_mode_strict}, {@discard_unit_section}, {@errors_continue}]}, 0x1f, 0x5548, &(0x7f00000058c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x5d9f61795f7ff7ff)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xf519, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)

5.853532s ago: executing program 1 (id=31):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[], 0x1, 0x1506, &(0x7f0000002ac0)="$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")
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

5.769032257s ago: executing program 1 (id=34):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x80, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x833, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x3, 0x6}}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x54}}, 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0)

5.669636065s ago: executing program 4 (id=35):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x90}}, 0x4000040)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

5.669373985s ago: executing program 32 (id=35):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x90}}, 0x4000040)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

5.583630062s ago: executing program 2 (id=37):
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
sendfile(r1, r1, 0x0, 0x80000000)
r2 = open(0x0, 0x145142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r4 = dup(r0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x20200}, 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}})
bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, &(0x7f00000002c0), {[{{@ip={@local, @loopback, 0xff000000, 0xffff00, 'pimreg\x00', 'geneve1\x00', {0xff}, {}, 0x5e, 0x3, 0x20}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000414b47fd4701d524faf41663821700"/29, @ANYRES32], 0x58)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r8)
umount2(&(0x7f0000000180)='./cgroup\x00', 0x5)
accept4$unix(r4, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x80800)
chdir(&(0x7f0000000100)='./file0\x00')

5.415169796s ago: executing program 3 (id=38):
syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000010600)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x105f2, &(0x7f0000020c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)

5.404295697s ago: executing program 2 (id=39):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache'])
chdir(&(0x7f0000000000)='./file0\x00')
fchownat(0xffffffffffffff9c, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000280)='./mnt\x00', 0x2200c10, &(0x7f0000002880)={[{@resgid}]}, 0x0, 0x256, &(0x7f0000000c40)="$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")

5.205526963s ago: executing program 2 (id=40):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)

5.129841469s ago: executing program 2 (id=41):
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000200)="e5000a03d847879268683cf525db15416a954cb1d7e227", 0x17}], 0x2)

5.097497842s ago: executing program 0 (id=42):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x315000})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000080)={0x3000, 0x100000})

5.054848495s ago: executing program 0 (id=43):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18}, 0xfffffdef)

4.318533886s ago: executing program 0 (id=44):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

3.524318901s ago: executing program 5 (id=36):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

3.356750675s ago: executing program 5 (id=45):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10)
connect$inet(r4, 0x0, 0x0)
close(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x10000, @private0, 0x5}, 0x1c)
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, 0x0)

3.356414855s ago: executing program 0 (id=46):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22, 0x12}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x801)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000340))
socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

2.210979699s ago: executing program 0 (id=47):
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
lsetxattr$security_capability(&(0x7f00000000c0)='./control\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000100)='./control\x00')
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0))
keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0)
preadv(r0, &(0x7f0000000c40)=[{&(0x7f0000000b00)=""/217, 0xd9}], 0x1, 0x7, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @local, [0xff000000, 0xff, 0xff], [0xff, 0xffffff00, 0xff, 0xff], 'vlan1\x00', 'ipvlan1\x00', {}, {0xff}, 0x33, 0x0, 0x8, 0x18}, 0x0, 0xa8, 0x110, 0x700}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x4, 0x14b, 0x1, 'syz1\x00', 'syz1\x00', {0x100000001}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x4010, 0xffffffffffffffff, 0x8bf48000)

1.954403801s ago: executing program 5 (id=48):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40)

1.9536586s ago: executing program 5 (id=49):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file0\x00', 0x8, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.389673087s ago: executing program 1 (id=50):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x570, &(0x7f0000000680)="$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")
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50)
listen(0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r5, &(0x7f0000000480), &(0x7f0000000540)=@tcp}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r5, &(0x7f0000000080), 0x20000000}, 0x20)
open(0x0, 0x4827e, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x4000054)

1.389446237s ago: executing program 2 (id=51):
pipe2(0x0, 0x0)
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x30000008})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

281.26µs ago: executing program 2 (id=52):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x20, 0x1, 0x11, "1a62d7b942ba4a955a01eed4e134c3ba2e"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0})

0s ago: executing program 1 (id=53):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts.
[   18.955624][   T30] audit: type=1400 audit(1756423145.234:64): avc:  denied  { mounton } for  pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   18.956717][  T273] cgroup: Unknown subsys name 'net'
[   18.958807][   T30] audit: type=1400 audit(1756423145.234:65): avc:  denied  { mount } for  pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.962591][   T30] audit: type=1400 audit(1756423145.234:66): avc:  denied  { unmount } for  pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.962735][  T273] cgroup: Unknown subsys name 'devices'
[   19.085933][  T273] cgroup: Unknown subsys name 'hugetlb'
[   19.091525][  T273] cgroup: Unknown subsys name 'rlimit'
[   19.289715][   T30] audit: type=1400 audit(1756423145.564:67): avc:  denied  { setattr } for  pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   19.313111][   T30] audit: type=1400 audit(1756423145.564:68): avc:  denied  { mounton } for  pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   19.338037][   T30] audit: type=1400 audit(1756423145.564:69): avc:  denied  { mount } for  pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   19.343965][  T275] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   19.369989][   T30] audit: type=1400 audit(1756423145.644:70): avc:  denied  { relabelto } for  pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.395398][   T30] audit: type=1400 audit(1756423145.644:71): avc:  denied  { write } for  pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.426880][   T30] audit: type=1400 audit(1756423145.704:72): avc:  denied  { read } for  pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.428197][  T273] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   19.452458][   T30] audit: type=1400 audit(1756423145.704:73): avc:  denied  { open } for  pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.245699][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.252754][  T282] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.260253][  T282] device bridge_slave_0 entered promiscuous mode
[   20.281860][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.288927][  T282] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.296356][  T282] device bridge_slave_1 entered promiscuous mode
[   20.312373][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.319567][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.326965][  T281] device bridge_slave_0 entered promiscuous mode
[   20.353142][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.360378][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.367747][  T281] device bridge_slave_1 entered promiscuous mode
[   20.395923][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.403136][  T284] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.410611][  T284] device bridge_slave_0 entered promiscuous mode
[   20.418502][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.425568][  T284] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.432962][  T284] device bridge_slave_1 entered promiscuous mode
[   20.456955][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.464270][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.471537][  T285] device bridge_slave_0 entered promiscuous mode
[   20.487338][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.494408][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.501720][  T285] device bridge_slave_1 entered promiscuous mode
[   20.556208][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.563267][  T283] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.570547][  T283] device bridge_slave_0 entered promiscuous mode
[   20.590825][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.597982][  T283] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.605349][  T283] device bridge_slave_1 entered promiscuous mode
[   20.706105][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.713153][  T281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.720559][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.727588][  T281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.764791][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.771842][  T284] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.779144][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.786177][  T284] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.794511][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.801567][  T282] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.808859][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.816067][  T282] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.843218][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.851283][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.859203][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.866381][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.873882][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.881158][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.889030][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.907418][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.915755][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.922778][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.932499][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.947461][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   20.955907][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.963083][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.972478][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.980748][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.987796][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.998382][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   21.005864][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.035024][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.043142][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.050186][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.057916][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.066076][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.074087][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.082246][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.091645][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.099886][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.106921][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.146142][  T285] device veth0_vlan entered promiscuous mode
[   21.153561][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.161294][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.170521][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.179368][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.187608][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.195221][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.202980][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.211386][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.218520][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.225982][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.234174][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.241173][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.248725][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.256946][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.264097][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.271420][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.279547][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.287848][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.294911][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.302285][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.310486][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.318835][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.325867][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.333494][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.341393][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.349902][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   21.357638][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   21.374945][  T281] device veth0_vlan entered promiscuous mode
[   21.383199][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.391609][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.400037][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.408300][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.416392][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   21.424368][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.433991][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.441454][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.451842][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.460288][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.474926][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   21.483007][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.496519][  T285] device veth1_macvtap entered promiscuous mode
[   21.505541][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.513883][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.522156][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.530188][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.538781][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.547383][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.555546][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.563920][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.571350][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.584313][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.592590][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.601158][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.609218][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.617309][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.625583][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.634689][  T284] device veth0_vlan entered promiscuous mode
[   21.642238][  T281] device veth1_macvtap entered promiscuous mode
[   21.653998][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.661465][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.668947][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.677050][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.685409][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.692961][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.701380][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.709771][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.717717][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.725749][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.733189][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.745949][  T282] device veth0_vlan entered promiscuous mode
[   21.752176][  T283] device veth0_vlan entered promiscuous mode
[   21.771352][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.779897][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.780148][  T285] request_module fs-gadgetfs succeeded, but still no fs?
[   21.796142][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.805063][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.813695][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.821790][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.834377][  T282] device veth1_macvtap entered promiscuous mode
[   21.842184][  T284] device veth1_macvtap entered promiscuous mode
[   21.859282][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.867447][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.880608][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.891260][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.899095][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.900704][  T337] loop4: detected capacity change from 0 to 2048
[   21.907935][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.921992][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.930447][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.942260][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.950657][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.959238][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.967680][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.976725][  T337] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   21.992294][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   22.001580][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.015160][  T283] device veth1_macvtap entered promiscuous mode
[   22.022374][  T337] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,noblock_validity,dioread_nolock,. Quota mode: writeback.
[   22.057064][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   22.066900][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.077396][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.084737][  T337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   22.086170][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.110460][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.218292][  T354] loop0: detected capacity change from 0 to 2048
[   22.429208][  T358] loop2: detected capacity change from 0 to 512
[   22.435836][  T285] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 9: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   22.468858][  T360] loop1: detected capacity change from 0 to 256
[   22.485240][  T354] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none.
[   22.565629][  T358] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   22.584248][  T360] FAT-fs (loop1): Unrecognized mount option "iochFrÒ¹³¶set=ascii" or missing value
[   22.595043][  T358] EXT4-fs (loop2): Ignoring removed bh option
[   22.601490][   T10] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   22.617475][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   22.628018][  T358] EXT4-fs (loop2): orphan cleanup on readonly fs
[   22.643665][  T285] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 9: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   22.665455][  T358] EXT4-fs error (device loop2): __ext4_iget:4925: inode #14: block 1886221359: comm syz.2.10: invalid block
[   22.677741][   T10] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[   22.700443][  T358] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.10: couldn't read orphan inode 14 (err -117)
[   22.712847][   T10] EXT4-fs (loop0): This should not happen!! Data will be lost
[   22.712847][   T10] 
[   22.733612][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   22.740263][  T285] EXT4-fs error (device loop4): empty_inline_dir:1869: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0
[   22.759453][   T10] EXT4-fs (loop0): Total free blocks count 0
[   22.781458][  T358] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,mblk_io_submit,nodiscard,nouid32,sysvgroups,acl,stripe=0x0000000000010001,bh,,errors=continue. Quota mode: writeback.
[   22.833338][   T10] EXT4-fs (loop0): Free/Dirty block details
[   22.839270][   T10] EXT4-fs (loop0): free_blocks=2415919104
[   22.855207][  T366] loop1: detected capacity change from 0 to 256
[   22.871717][   T10] EXT4-fs (loop0): dirty_blocks=16
[   22.901394][  T358] netlink: 'syz.2.10': attribute type 2 has an invalid length.
[   22.912003][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   22.923307][   T10] EXT4-fs (loop0): Block reservation details
[   22.934174][  T366] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   22.943115][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   22.948538][   T10] EXT4-fs (loop0): i_reserved_data_blocks=1
[   22.959270][  T285] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 9: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   22.968089][  T358] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[   22.987453][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   22.998294][  T366] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[   23.000233][  T285] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 9: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   23.034202][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   23.040870][  T285] EXT4-fs error (device loop4): empty_inline_dir:1869: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0
[   23.074550][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   23.081116][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   23.101351][  T285] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 9: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   23.122191][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   23.129076][  T285] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 9: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   23.167406][  T373] loop1: detected capacity change from 0 to 1024
[   23.181960][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   23.192962][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   23.201164][  T373] =======================================================
[   23.201164][  T373] WARNING: The mand mount option has been deprecated and
[   23.201164][  T373]          and is ignored by this kernel. Remove the mand
[   23.201164][  T373]          option from the mount to silence this warning.
[   23.201164][  T373] =======================================================
[   23.201720][  T285] EXT4-fs error (device loop4): empty_inline_dir:1869: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0
[   23.263659][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   23.282096][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   23.291006][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   23.299403][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   23.302919][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   23.308044][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   23.314921][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   23.344126][  T285] EXT4-fs error (device loop4): ext4_read_inline_dir:1614: inode #12: block 9: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   23.352333][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   23.376697][  T373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   23.379040][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   23.407381][  T285] EXT4-fs (loop4): Remounting filesystem read-only
[   23.419851][  T373] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.13: Allocating blocks 449-513 which overlap fs metadata
[   23.435012][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   23.454497][  T373] EXT4-fs (loop1): shut down requested (1)
[   23.465510][  T392] 9pnet: Insufficient options for proto=fd
[   23.471727][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   23.488270][  T392] loop3: detected capacity change from 0 to 128
[   23.494909][  T374] syz.0.11 (374) used greatest stack depth: 21856 bytes left
[   23.503081][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   23.504977][  T372] EXT4-fs (loop1): pa ffff88811191a0a8: logic 48, phys. 177, len 21
[   23.518444][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   23.543354][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   23.560160][  T392] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   23.571332][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   23.606505][  T285] EXT4-fs warning (device loop4): empty_inline_dir:1876: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[   23.663201][  T412] loop1: detected capacity change from 0 to 256
[   23.685037][  T412] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[   23.833349][  T285] syz-executor (285) used greatest stack depth: 21792 bytes left
[   23.889785][  T414] loop3: detected capacity change from 0 to 40427
[   23.901594][  T414] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   23.909198][  T414] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   23.923199][  T414] F2FS-fs (loop3): fault_injection options not supported
[   23.930474][  T414] F2FS-fs (loop3): fault_type options not supported
[   23.937879][  T414] F2FS-fs (loop3): Unrecognized mount option "errors=continue" or missing value
[   23.967605][  T426] loop2: detected capacity change from 0 to 1024
[   23.995124][  T424] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.002529][  T424] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.010502][  T424] device bridge_slave_0 entered promiscuous mode
[   24.019571][  T426] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   24.030592][  T424] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.050313][  T424] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.058242][  T424] device bridge_slave_1 entered promiscuous mode
[   24.060384][  T426] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.37: Allocating blocks 449-513 which overlap fs metadata
[   24.093287][   T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.094039][  T426] EXT4-fs (loop2): shut down requested (1)
[   24.117537][  T425] EXT4-fs (loop2): pa ffff88811191abd0: logic 48, phys. 177, len 21
[   24.175031][  T435] 9pnet: Insufficient options for proto=fd
[   24.197912][  T435] loop2: detected capacity change from 0 to 128
[   24.208221][   T30] kauditd_printk_skb: 82 callbacks suppressed
[   24.208235][   T30] audit: type=1400 audit(1756423150.484:156): avc:  denied  { write } for  pid=424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.257511][  T435] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   24.268257][   T30] audit: type=1400 audit(1756423150.514:157): avc:  denied  { read } for  pid=424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.311053][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.319508][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.336211][  T332] device bridge_slave_1 left promiscuous mode
[   24.343442][   T26] usb 2-1: Using ep0 maxpacket: 16
[   24.360510][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.375082][  T332] device bridge_slave_0 left promiscuous mode
[   24.381348][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.390472][  T332] device veth1_macvtap left promiscuous mode
[   24.396650][  T332] device veth0_vlan left promiscuous mode
[   24.503427][   T26] usb 2-1: unable to get BOS descriptor or descriptor too short
[   24.507069][  T452] loop0: detected capacity change from 0 to 1024
[   24.524572][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   24.533513][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.541809][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.548888][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.557144][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   24.566016][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.574437][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.581471][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.589354][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.596878][   T26] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64
[   24.603942][  T452] EXT4-fs (loop0): Ignoring removed oldalloc option
[   24.610353][   T26] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8
[   24.623775][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.633969][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.640381][   T26] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   24.653316][  T452] EXT4-fs (loop0): Ignoring removed orlov option
[   24.654840][   T26] usb 2-1: config 1 interface 0 has no altsetting 0
[   24.661532][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.673294][   T60] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[   24.684722][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.685216][  T433] loop3: detected capacity change from 0 to 131072
[   24.692776][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.702934][  T452] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,minixdf,barrier=0x0000000000000002,delalloc,nojournal_checksum,orlov,user_xattr,quota,delalloc,,errors=continue. Quota mode: writeback.
[   24.707877][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.741317][   T30] audit: type=1400 audit(1756423151.024:158): avc:  denied  { map } for  pid=451 comm="syz.0.43" path="/6/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   24.767435][   T30] audit: type=1400 audit(1756423151.034:159): avc:  denied  { execute } for  pid=451 comm="syz.0.43" path="/6/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   24.785434][  T424] device veth0_vlan entered promiscuous mode
[   24.799595][  T433] F2FS-fs (loop3): invalid crc value
[   24.814639][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.822623][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.830482][   T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   24.836609][  T424] device veth1_macvtap entered promiscuous mode
[   24.850042][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.857770][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.859136][   T30] audit: type=1400 audit(1756423151.134:160): avc:  denied  { setattr } for  pid=451 comm="syz.0.43" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   24.866313][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.894864][  T452] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.43: Allocating blocks 497-513 which overlap fs metadata
[   24.895538][   T26] usb 2-1: Product: syz
[   24.909760][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.920868][   T26] usb 2-1: Manufacturer: syz
[   24.920887][   T26] usb 2-1: SerialNumber: syz
[   24.933074][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.941748][  T433] F2FS-fs (loop3): Found nat_bits in checkpoint
[   24.943378][  T421] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   24.955407][  T452] EXT4-fs (loop0): pa ffff88811191adc8: logic 128, phys. 321, len 12
[   24.963548][  T452] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1
[   24.973670][  T433] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   24.973928][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.988754][  T421] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   24.996635][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.005570][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.013810][  T433] F2FS-fs (loop3): access invalid blkaddr:1886221359
[   25.023052][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.031601][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   25.036454][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.041503][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   25.059607][  T433] Call Trace:
[   25.062881][  T433]  <TASK>
[   25.065795][  T433]  __dump_stack+0x21/0x30
[   25.070133][  T433]  dump_stack_lvl+0xee/0x150
[   25.074708][  T433]  ? show_regs_print_info+0x20/0x20
[   25.079891][  T433]  ? f2fs_set_node_page_dirty+0x40f/0x590
[   25.085595][  T433]  ? set_page_dirty+0x1ae/0x310
[   25.090433][  T433]  dump_stack+0x15/0x20
[   25.094572][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   25.099933][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   25.106071][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   25.111254][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   25.116788][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   25.122496][  T433]  ? __kasan_check_write+0x14/0x20
[   25.127601][  T433]  ? data_blkaddr+0x330/0x330
[   25.132272][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   25.137724][  T433]  ? addrs_per_block+0x110/0x110
[   25.142644][  T433]  ? dquot_initialize+0x20/0x20
[   25.147515][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   25.152708][  T433]  f2fs_truncate+0x1d7/0x3d0
[   25.157404][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   25.162222][  T433]  f2fs_setattr+0xaca/0x11b0
[   25.166810][  T433]  ? f2fs_getattr+0x670/0x670
[   25.171487][  T433]  notify_change+0xbca/0xe90
[   25.176079][  T433]  do_truncate+0x197/0x220
[   25.180531][  T433]  ? dquot_file_open+0x86/0xb0
[   25.185404][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   25.190451][  T433]  path_openat+0x2769/0x2f10
[   25.195029][  T433]  ? do_syscall_64+0x4c/0xa0
[   25.199606][  T433]  ? do_filp_open+0x3e0/0x3e0
[   25.204454][  T433]  do_filp_open+0x1b3/0x3e0
[   25.208939][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   25.213512][  T433]  do_sys_openat2+0x14c/0x7b0
[   25.218181][  T433]  ? __se_sys_futex+0x139/0x310
[   25.223019][  T433]  ? __kasan_check_write+0x14/0x20
[   25.228289][  T433]  ? do_sys_open+0xe0/0xe0
[   25.232880][  T433]  ? __x64_sys_futex+0x100/0x100
[   25.237813][  T433]  ? do_writev+0x202/0x2b0
[   25.242215][  T433]  __x64_sys_open+0x11c/0x140
[   25.246877][  T433]  x64_sys_call+0x3fc/0x9a0
[   25.251366][  T433]  do_syscall_64+0x4c/0xa0
[   25.255941][  T433]  ? clear_bhb_loop+0x50/0xa0
[   25.260601][  T433]  ? clear_bhb_loop+0x50/0xa0
[   25.265261][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   25.271142][  T433] RIP: 0033:0x7f7b4417dbe9
[   25.275538][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   25.295308][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   25.303706][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   25.311658][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   25.319607][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   25.327558][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   25.335531][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   25.343485][  T433]  </TASK>
[   25.348873][  T433] F2FS-fs (loop3): access invalid blkaddr:2054779695
[   25.355635][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   25.365528][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   25.375566][  T433] Call Trace:
[   25.378832][  T433]  <TASK>
[   25.381739][  T433]  __dump_stack+0x21/0x30
[   25.386057][  T433]  dump_stack_lvl+0xee/0x150
[   25.390622][  T433]  ? show_regs_print_info+0x20/0x20
[   25.395808][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   25.401588][  T433]  ? set_page_dirty+0x1ae/0x310
[   25.406422][  T433]  dump_stack+0x15/0x20
[   25.410559][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   25.415913][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   25.422218][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   25.427391][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   25.432924][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   25.438649][  T433]  ? __kasan_check_write+0x14/0x20
[   25.443836][  T433]  ? data_blkaddr+0x330/0x330
[   25.448503][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   25.454210][  T433]  ? addrs_per_block+0x110/0x110
[   25.459131][  T433]  ? dquot_initialize+0x20/0x20
[   25.463975][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   25.469180][  T433]  f2fs_truncate+0x1d7/0x3d0
[   25.473870][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   25.478623][  T433]  f2fs_setattr+0xaca/0x11b0
[   25.483196][  T433]  ? f2fs_getattr+0x670/0x670
[   25.487891][  T433]  notify_change+0xbca/0xe90
[   25.492724][  T433]  do_truncate+0x197/0x220
[   25.497123][  T433]  ? dquot_file_open+0x86/0xb0
[   25.501868][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   25.506882][  T433]  path_openat+0x2769/0x2f10
[   25.511451][  T433]  ? do_syscall_64+0x4c/0xa0
[   25.516039][  T433]  ? do_filp_open+0x3e0/0x3e0
[   25.520692][  T433]  do_filp_open+0x1b3/0x3e0
[   25.525172][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   25.529738][  T433]  do_sys_openat2+0x14c/0x7b0
[   25.534387][  T433]  ? __se_sys_futex+0x139/0x310
[   25.539215][  T433]  ? __kasan_check_write+0x14/0x20
[   25.544299][  T433]  ? do_sys_open+0xe0/0xe0
[   25.548690][  T433]  ? __x64_sys_futex+0x100/0x100
[   25.553599][  T433]  ? do_writev+0x202/0x2b0
[   25.557991][  T433]  __x64_sys_open+0x11c/0x140
[   25.562641][  T433]  x64_sys_call+0x3fc/0x9a0
[   25.567125][  T433]  do_syscall_64+0x4c/0xa0
[   25.571516][  T433]  ? clear_bhb_loop+0x50/0xa0
[   25.576168][  T433]  ? clear_bhb_loop+0x50/0xa0
[   25.580829][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   25.586694][  T433] RIP: 0033:0x7f7b4417dbe9
[   25.591115][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   25.610964][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   25.619375][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   25.627341][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   25.635299][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   25.643345][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   25.651296][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   25.659264][  T433]  </TASK>
[   25.668275][  T433] F2FS-fs (loop3): access invalid blkaddr:1634560301
[   25.674418][   T60] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[   25.675138][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   25.683057][   T60] usb 3-1: config 0 has no interface number 0
[   25.692984][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   25.693000][  T433] Call Trace:
[   25.693006][  T433]  <TASK>
[   25.693012][  T433]  __dump_stack+0x21/0x30
[   25.693040][  T433]  dump_stack_lvl+0xee/0x150
[   25.693057][  T433]  ? show_regs_print_info+0x20/0x20
[   25.693073][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   25.693093][  T433]  ? set_page_dirty+0x1ae/0x310
[   25.693112][  T433]  dump_stack+0x15/0x20
[   25.693128][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   25.693150][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   25.693173][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   25.693191][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   25.766713][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   25.772438][  T433]  ? __kasan_check_write+0x14/0x20
[   25.777533][  T433]  ? data_blkaddr+0x330/0x330
[   25.782202][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   25.787649][  T433]  ? addrs_per_block+0x110/0x110
[   25.792571][  T433]  ? dquot_initialize+0x20/0x20
[   25.797413][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   25.802592][  T433]  f2fs_truncate+0x1d7/0x3d0
[   25.807163][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   25.811909][  T433]  f2fs_setattr+0xaca/0x11b0
[   25.816491][  T433]  ? f2fs_getattr+0x670/0x670
[   25.821173][  T433]  notify_change+0xbca/0xe90
[   25.825759][  T433]  do_truncate+0x197/0x220
[   25.830169][  T433]  ? dquot_file_open+0x86/0xb0
[   25.834920][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   25.839933][  T433]  path_openat+0x2769/0x2f10
[   25.844527][  T433]  ? do_syscall_64+0x4c/0xa0
[   25.849110][  T433]  ? do_filp_open+0x3e0/0x3e0
[   25.853771][  T433]  do_filp_open+0x1b3/0x3e0
[   25.858257][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   25.862839][  T433]  do_sys_openat2+0x14c/0x7b0
[   25.867498][  T433]  ? __se_sys_futex+0x139/0x310
[   25.872338][  T433]  ? __kasan_check_write+0x14/0x20
[   25.877434][  T433]  ? do_sys_open+0xe0/0xe0
[   25.881866][  T433]  ? __x64_sys_futex+0x100/0x100
[   25.886795][  T433]  ? do_writev+0x202/0x2b0
[   25.891195][  T433]  __x64_sys_open+0x11c/0x140
[   25.895858][  T433]  x64_sys_call+0x3fc/0x9a0
[   25.900340][  T433]  do_syscall_64+0x4c/0xa0
[   25.904736][  T433]  ? clear_bhb_loop+0x50/0xa0
[   25.909400][  T433]  ? clear_bhb_loop+0x50/0xa0
[   25.914080][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   25.919960][  T433] RIP: 0033:0x7f7b4417dbe9
[   25.924358][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   25.944041][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   25.952451][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   25.960406][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   25.968361][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   25.976492][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   25.984444][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   25.992410][  T433]  </TASK>
[   26.010774][  T433] F2FS-fs (loop3): access invalid blkaddr:1701274983
[   26.017844][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   26.027752][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   26.033701][   T60] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[   26.037808][  T433] Call Trace:
[   26.037818][  T433]  <TASK>
[   26.037824][  T433]  __dump_stack+0x21/0x30
[   26.059172][  T433]  dump_stack_lvl+0xee/0x150
[   26.063775][  T433]  ? show_regs_print_info+0x20/0x20
[   26.067053][  T469] loop0: detected capacity change from 0 to 512
[   26.068977][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   26.075441][   T60] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   26.080887][  T433]  ? set_page_dirty+0x1ae/0x310
[   26.080920][  T433]  dump_stack+0x15/0x20
[   26.100460][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   26.104711][   T60] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[   26.105854][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   26.116794][   T60] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   26.122560][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   26.135827][   T60] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   26.140813][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   26.150121][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.155342][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   26.155368][  T433]  ? __kasan_check_write+0x14/0x20
[   26.170876][   T60] usb 3-1: config 0 descriptor??
[   26.174205][  T433]  ? data_blkaddr+0x330/0x330
[   26.174235][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   26.174265][  T433]  ? addrs_per_block+0x110/0x110
[   26.174282][  T433]  ? dquot_initialize+0x20/0x20
[   26.174303][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   26.181830][  T469] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.46: casefold flag without casefold feature
[   26.184500][  T433]  f2fs_truncate+0x1d7/0x3d0
[   26.184529][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   26.184546][  T433]  f2fs_setattr+0xaca/0x11b0
[   26.184564][  T433]  ? f2fs_getattr+0x670/0x670
[   26.184582][  T433]  notify_change+0xbca/0xe90
[   26.184600][  T433]  do_truncate+0x197/0x220
[   26.184617][  T433]  ? dquot_file_open+0x86/0xb0
[   26.184636][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   26.184656][  T433]  path_openat+0x2769/0x2f10
[   26.184676][  T433]  ? do_syscall_64+0x4c/0xa0
[   26.184697][  T433]  ? do_filp_open+0x3e0/0x3e0
[   26.184714][  T433]  do_filp_open+0x1b3/0x3e0
[   26.184728][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   26.184753][  T433]  do_sys_openat2+0x14c/0x7b0
[   26.184771][  T433]  ? __se_sys_futex+0x139/0x310
[   26.184790][  T433]  ? __kasan_check_write+0x14/0x20
[   26.184809][  T433]  ? do_sys_open+0xe0/0xe0
[   26.184824][  T433]  ? __x64_sys_futex+0x100/0x100
[   26.184839][  T433]  ? do_writev+0x202/0x2b0
[   26.190524][  T469] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.46: couldn't read orphan inode 15 (err -117)
[   26.195191][  T433]  __x64_sys_open+0x11c/0x140
[   26.195225][  T433]  x64_sys_call+0x3fc/0x9a0
[   26.195243][  T433]  do_syscall_64+0x4c/0xa0
[   26.195261][  T433]  ? clear_bhb_loop+0x50/0xa0
[   26.195279][  T433]  ? clear_bhb_loop+0x50/0xa0
[   26.195297][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   26.195315][  T433] RIP: 0033:0x7f7b4417dbe9
[   26.201995][  T469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   26.205435][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   26.205453][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   26.205472][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   26.205484][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   26.289434][  T445] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   26.292708][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   26.297465][  T445] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   26.302016][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   26.436182][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   26.444163][  T433]  </TASK>
[   26.452664][  T433] F2FS-fs (loop3): access invalid blkaddr:875771502
[   26.460106][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   26.470005][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   26.480068][  T433] Call Trace:
[   26.483350][  T433]  <TASK>
[   26.486271][  T433]  __dump_stack+0x21/0x30
[   26.490698][  T433]  dump_stack_lvl+0xee/0x150
[   26.495296][  T433]  ? show_regs_print_info+0x20/0x20
[   26.500502][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   26.506224][  T433]  ? set_page_dirty+0x1ae/0x310
[   26.511092][  T433]  dump_stack+0x15/0x20
[   26.515231][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   26.520678][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   26.526815][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   26.532024][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   26.537567][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   26.543269][  T433]  ? __kasan_check_write+0x14/0x20
[   26.548367][  T433]  ? data_blkaddr+0x330/0x330
[   26.553052][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   26.558494][  T433]  ? addrs_per_block+0x110/0x110
[   26.563412][  T433]  ? dquot_initialize+0x20/0x20
[   26.568244][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   26.573420][  T433]  f2fs_truncate+0x1d7/0x3d0
[   26.577999][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   26.582741][  T433]  f2fs_setattr+0xaca/0x11b0
[   26.587331][  T433]  ? f2fs_getattr+0x670/0x670
[   26.591989][  T433]  notify_change+0xbca/0xe90
[   26.596647][  T433]  do_truncate+0x197/0x220
[   26.601161][  T433]  ? dquot_file_open+0x86/0xb0
[   26.605907][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   26.610913][  T433]  path_openat+0x2769/0x2f10
[   26.615492][  T433]  ? do_syscall_64+0x4c/0xa0
[   26.620079][  T433]  ? do_filp_open+0x3e0/0x3e0
[   26.625140][  T433]  do_filp_open+0x1b3/0x3e0
[   26.629641][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   26.634222][  T433]  do_sys_openat2+0x14c/0x7b0
[   26.639123][  T433]  ? __se_sys_futex+0x139/0x310
[   26.644046][  T433]  ? __kasan_check_write+0x14/0x20
[   26.649146][  T433]  ? do_sys_open+0xe0/0xe0
[   26.653546][  T433]  ? __x64_sys_futex+0x100/0x100
[   26.658462][  T433]  ? do_writev+0x202/0x2b0
[   26.662863][  T433]  __x64_sys_open+0x11c/0x140
[   26.667883][  T433]  x64_sys_call+0x3fc/0x9a0
[   26.672387][  T433]  do_syscall_64+0x4c/0xa0
[   26.676785][  T433]  ? clear_bhb_loop+0x50/0xa0
[   26.681538][  T433]  ? clear_bhb_loop+0x50/0xa0
[   26.686193][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   26.692067][  T433] RIP: 0033:0x7f7b4417dbe9
[   26.696462][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   26.716132][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   26.724525][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   26.732482][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   26.740517][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   26.748470][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   26.756605][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   26.764565][  T433]  </TASK>
[   26.785775][  T446] usb 3-1: USB disconnect, device number 2
[   26.797946][   T30] audit: type=1400 audit(1756423153.074:161): avc:  denied  { create } for  pid=468 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   26.819082][   T30] audit: type=1400 audit(1756423153.094:162): avc:  denied  { write } for  pid=468 comm="syz.0.46" name="memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   26.833401][   T26] cdc_ether: probe of 2-1:1.0 failed with error -71
[   26.842728][  T433] F2FS-fs (loop3): access invalid blkaddr:892482097
[   26.883427][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   26.893353][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   26.903406][  T433] Call Trace:
[   26.906681][  T433]  <TASK>
[   26.909633][  T433]  __dump_stack+0x21/0x30
[   26.913996][  T433]  dump_stack_lvl+0xee/0x150
[   26.918582][  T433]  ? show_regs_print_info+0x20/0x20
[   26.923771][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   26.929485][  T433]  ? set_page_dirty+0x1ae/0x310
[   26.934331][  T433]  dump_stack+0x15/0x20
[   26.938482][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   26.943948][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   26.950194][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   26.955395][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   26.960945][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   26.966662][  T433]  ? __kasan_check_write+0x14/0x20
[   26.971770][  T433]  ? data_blkaddr+0x330/0x330
[   26.976458][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   26.981921][  T433]  ? addrs_per_block+0x110/0x110
[   26.983198][  T475] usb 2-1: USB disconnect, device number 2
[   26.986865][  T433]  ? dquot_initialize+0x20/0x20
[   26.986894][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   26.994633][   T30] audit: type=1400 audit(1756423153.224:163): avc:  denied  { name_bind } for  pid=467 comm="syz.5.45" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   26.997611][  T433]  f2fs_truncate+0x1d7/0x3d0
[   27.002801][   T30] audit: type=1400 audit(1756423153.224:164): avc:  denied  { connect } for  pid=467 comm="syz.5.45" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   27.024025][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   27.024062][  T433]  f2fs_setattr+0xaca/0x11b0
[   27.024080][  T433]  ? f2fs_getattr+0x670/0x670
[   27.024097][  T433]  notify_change+0xbca/0xe90
[   27.029012][   T30] audit: type=1400 audit(1756423153.224:165): avc:  denied  { write } for  pid=467 comm="syz.5.45" name="001" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   27.049010][  T433]  do_truncate+0x197/0x220
[   27.049040][  T433]  ? dquot_file_open+0x86/0xb0
[   27.049059][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   27.049079][  T433]  path_openat+0x2769/0x2f10
[   27.109151][  T433]  ? do_syscall_64+0x4c/0xa0
[   27.113767][  T433]  ? do_filp_open+0x3e0/0x3e0
[   27.118450][  T433]  do_filp_open+0x1b3/0x3e0
[   27.122947][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   27.127540][  T433]  do_sys_openat2+0x14c/0x7b0
[   27.132220][  T433]  ? __se_sys_futex+0x139/0x310
[   27.137070][  T433]  ? __kasan_check_write+0x14/0x20
[   27.142186][  T433]  ? do_sys_open+0xe0/0xe0
[   27.146619][  T433]  ? __x64_sys_futex+0x100/0x100
[   27.151559][  T433]  ? do_writev+0x202/0x2b0
[   27.155984][  T433]  __x64_sys_open+0x11c/0x140
[   27.160665][  T433]  x64_sys_call+0x3fc/0x9a0
[   27.165166][  T433]  do_syscall_64+0x4c/0xa0
[   27.169688][  T433]  ? clear_bhb_loop+0x50/0xa0
[   27.174364][  T433]  ? clear_bhb_loop+0x50/0xa0
[   27.179032][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   27.184915][  T433] RIP: 0033:0x7f7b4417dbe9
[   27.189405][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   27.209005][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   27.217410][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   27.225371][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   27.233330][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   27.241323][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   27.249276][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   27.257255][  T433]  </TASK>
[   27.262413][  T433] F2FS-fs (loop3): access invalid blkaddr:1714370099
[   27.279607][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   27.289703][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   27.299763][  T433] Call Trace:
[   27.303048][  T433]  <TASK>
[   27.305981][  T433]  __dump_stack+0x21/0x30
[   27.310333][  T433]  dump_stack_lvl+0xee/0x150
[   27.314929][  T433]  ? show_regs_print_info+0x20/0x20
[   27.320125][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   27.325877][  T433]  ? set_page_dirty+0x1ae/0x310
[   27.330732][  T433]  dump_stack+0x15/0x20
[   27.334901][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   27.340283][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   27.346455][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   27.351659][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   27.357191][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   27.362888][  T433]  ? __kasan_check_write+0x14/0x20
[   27.367973][  T433]  ? data_blkaddr+0x330/0x330
[   27.372629][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   27.378089][  T433]  ? addrs_per_block+0x110/0x110
[   27.383002][  T433]  ? dquot_initialize+0x20/0x20
[   27.387829][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   27.393020][  T433]  f2fs_truncate+0x1d7/0x3d0
[   27.397581][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   27.402318][  T433]  f2fs_setattr+0xaca/0x11b0
[   27.406882][  T433]  ? f2fs_getattr+0x670/0x670
[   27.411551][  T433]  notify_change+0xbca/0xe90
[   27.416144][  T433]  do_truncate+0x197/0x220
[   27.420542][  T433]  ? dquot_file_open+0x86/0xb0
[   27.425288][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   27.430407][  T433]  path_openat+0x2769/0x2f10
[   27.434973][  T433]  ? do_syscall_64+0x4c/0xa0
[   27.439555][  T433]  ? do_filp_open+0x3e0/0x3e0
[   27.444204][  T433]  do_filp_open+0x1b3/0x3e0
[   27.448680][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   27.453251][  T433]  do_sys_openat2+0x14c/0x7b0
[   27.457992][  T433]  ? __se_sys_futex+0x139/0x310
[   27.462846][  T433]  ? __kasan_check_write+0x14/0x20
[   27.467933][  T433]  ? do_sys_open+0xe0/0xe0
[   27.472331][  T433]  ? __x64_sys_futex+0x100/0x100
[   27.477322][  T433]  ? do_writev+0x202/0x2b0
[   27.481749][  T433]  __x64_sys_open+0x11c/0x140
[   27.486422][  T433]  x64_sys_call+0x3fc/0x9a0
[   27.490926][  T433]  do_syscall_64+0x4c/0xa0
[   27.495358][  T433]  ? clear_bhb_loop+0x50/0xa0
[   27.500026][  T433]  ? clear_bhb_loop+0x50/0xa0
[   27.504690][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   27.510565][  T433] RIP: 0033:0x7f7b4417dbe9
[   27.514975][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   27.534816][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   27.543216][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   27.551176][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   27.559133][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   27.567082][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   27.575046][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   27.583014][  T433]  </TASK>
[   27.591273][  T433] F2FS-fs (loop3): access invalid blkaddr:811953257
[   27.598217][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   27.608109][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   27.618324][  T433] Call Trace:
[   27.621582][  T433]  <TASK>
[   27.624494][  T433]  __dump_stack+0x21/0x30
[   27.628814][  T433]  dump_stack_lvl+0xee/0x150
[   27.633391][  T433]  ? show_regs_print_info+0x20/0x20
[   27.638577][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   27.644277][  T433]  ? set_page_dirty+0x1ae/0x310
[   27.649109][  T433]  dump_stack+0x15/0x20
[   27.653335][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   27.658696][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   27.664835][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   27.670013][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   27.675540][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   27.681244][  T433]  ? __kasan_check_write+0x14/0x20
[   27.686338][  T433]  ? data_blkaddr+0x330/0x330
[   27.691000][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   27.696444][  T433]  ? addrs_per_block+0x110/0x110
[   27.701363][  T433]  ? dquot_initialize+0x20/0x20
[   27.706195][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   27.711380][  T433]  f2fs_truncate+0x1d7/0x3d0
[   27.715951][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   27.720698][  T433]  f2fs_setattr+0xaca/0x11b0
[   27.725272][  T433]  ? f2fs_getattr+0x670/0x670
[   27.730015][  T433]  notify_change+0xbca/0xe90
[   27.734587][  T433]  do_truncate+0x197/0x220
[   27.738995][  T433]  ? dquot_file_open+0x86/0xb0
[   27.743740][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   27.748749][  T433]  path_openat+0x2769/0x2f10
[   27.753331][  T433]  ? do_syscall_64+0x4c/0xa0
[   27.757915][  T433]  ? do_filp_open+0x3e0/0x3e0
[   27.762576][  T433]  do_filp_open+0x1b3/0x3e0
[   27.767062][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   27.771722][  T433]  do_sys_openat2+0x14c/0x7b0
[   27.776381][  T433]  ? __se_sys_futex+0x139/0x310
[   27.781220][  T433]  ? __kasan_check_write+0x14/0x20
[   27.786316][  T433]  ? do_sys_open+0xe0/0xe0
[   27.790717][  T433]  ? __x64_sys_futex+0x100/0x100
[   27.795643][  T433]  ? do_writev+0x202/0x2b0
[   27.800048][  T433]  __x64_sys_open+0x11c/0x140
[   27.804739][  T433]  x64_sys_call+0x3fc/0x9a0
[   27.809226][  T433]  do_syscall_64+0x4c/0xa0
[   27.813627][  T433]  ? clear_bhb_loop+0x50/0xa0
[   27.818290][  T433]  ? clear_bhb_loop+0x50/0xa0
[   27.822949][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   27.828848][  T433] RIP: 0033:0x7f7b4417dbe9
[   27.833245][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   27.852839][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   27.861244][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   27.869208][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   27.877178][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   27.885140][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   27.893096][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   27.901055][  T433]  </TASK>
[   27.906825][  T433] F2FS-fs (loop3): access invalid blkaddr:1818846767
[   27.913704][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   27.923588][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   27.933659][  T433] Call Trace:
[   27.936932][  T433]  <TASK>
[   27.939846][  T433]  __dump_stack+0x21/0x30
[   27.944168][  T433]  dump_stack_lvl+0xee/0x150
[   27.948737][  T433]  ? show_regs_print_info+0x20/0x20
[   27.953912][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   27.959628][  T433]  ? set_page_dirty+0x1ae/0x310
[   27.964466][  T433]  dump_stack+0x15/0x20
[   27.968598][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   27.973949][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   27.980233][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   27.985444][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   27.990972][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   27.996764][  T433]  ? __kasan_check_write+0x14/0x20
[   28.001856][  T433]  ? data_blkaddr+0x330/0x330
[   28.006513][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   28.011955][  T433]  ? addrs_per_block+0x110/0x110
[   28.016870][  T433]  ? dquot_initialize+0x20/0x20
[   28.021710][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   28.026986][  T433]  f2fs_truncate+0x1d7/0x3d0
[   28.031643][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   28.036396][  T433]  f2fs_setattr+0xaca/0x11b0
[   28.040976][  T433]  ? f2fs_getattr+0x670/0x670
[   28.045644][  T433]  notify_change+0xbca/0xe90
[   28.050224][  T433]  do_truncate+0x197/0x220
[   28.054633][  T433]  ? dquot_file_open+0x86/0xb0
[   28.059397][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   28.064488][  T433]  path_openat+0x2769/0x2f10
[   28.069056][  T433]  ? do_syscall_64+0x4c/0xa0
[   28.073626][  T433]  ? do_filp_open+0x3e0/0x3e0
[   28.078278][  T433]  do_filp_open+0x1b3/0x3e0
[   28.082759][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   28.087341][  T433]  do_sys_openat2+0x14c/0x7b0
[   28.092006][  T433]  ? __se_sys_futex+0x139/0x310
[   28.096831][  T433]  ? __kasan_check_write+0x14/0x20
[   28.101928][  T433]  ? do_sys_open+0xe0/0xe0
[   28.106337][  T433]  ? __x64_sys_futex+0x100/0x100
[   28.111410][  T433]  ? do_writev+0x202/0x2b0
[   28.115925][  T433]  __x64_sys_open+0x11c/0x140
[   28.120616][  T433]  x64_sys_call+0x3fc/0x9a0
[   28.125135][  T433]  do_syscall_64+0x4c/0xa0
[   28.129559][  T433]  ? clear_bhb_loop+0x50/0xa0
[   28.134247][  T433]  ? clear_bhb_loop+0x50/0xa0
[   28.138975][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   28.144866][  T433] RIP: 0033:0x7f7b4417dbe9
[   28.149348][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   28.168943][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   28.177369][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   28.185353][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   28.193335][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   28.201309][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   28.209288][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   28.217275][  T433]  </TASK>
[   28.223189][  T433] F2FS-fs (loop3): Inconsistent error blkaddr:12389, sit bitmap:0
[   28.232601][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   28.242600][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   28.252662][  T433] Call Trace:
[   28.255948][  T433]  <TASK>
[   28.258977][  T433]  __dump_stack+0x21/0x30
[   28.263311][  T433]  dump_stack_lvl+0xee/0x150
[   28.267995][  T433]  ? show_regs_print_info+0x20/0x20
[   28.273221][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   28.279130][  T433]  ? set_page_dirty+0x1ae/0x310
[   28.284070][  T433]  dump_stack+0x15/0x20
[   28.288309][  T433]  f2fs_is_valid_blkaddr+0xc64/0x12a0
[   28.293782][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   28.300010][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   28.305281][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   28.310816][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   28.316544][  T433]  ? __kasan_check_write+0x14/0x20
[   28.321654][  T433]  ? data_blkaddr+0x330/0x330
[   28.326327][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   28.331779][  T433]  ? addrs_per_block+0x110/0x110
[   28.336723][  T433]  ? dquot_initialize+0x20/0x20
[   28.341563][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   28.346747][  T433]  f2fs_truncate+0x1d7/0x3d0
[   28.351322][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   28.356071][  T433]  f2fs_setattr+0xaca/0x11b0
[   28.360650][  T433]  ? f2fs_getattr+0x670/0x670
[   28.365396][  T433]  notify_change+0xbca/0xe90
[   28.369972][  T433]  do_truncate+0x197/0x220
[   28.374382][  T433]  ? dquot_file_open+0x86/0xb0
[   28.379131][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   28.384143][  T433]  path_openat+0x2769/0x2f10
[   28.388726][  T433]  ? do_syscall_64+0x4c/0xa0
[   28.393316][  T433]  ? do_filp_open+0x3e0/0x3e0
[   28.397975][  T433]  do_filp_open+0x1b3/0x3e0
[   28.402465][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   28.407039][  T433]  do_sys_openat2+0x14c/0x7b0
[   28.411709][  T433]  ? __se_sys_futex+0x139/0x310
[   28.416561][  T433]  ? __kasan_check_write+0x14/0x20
[   28.421671][  T433]  ? do_sys_open+0xe0/0xe0
[   28.426081][  T433]  ? __x64_sys_futex+0x100/0x100
[   28.431020][  T433]  ? do_writev+0x202/0x2b0
[   28.435433][  T433]  __x64_sys_open+0x11c/0x140
[   28.440098][  T433]  x64_sys_call+0x3fc/0x9a0
[   28.444592][  T433]  do_syscall_64+0x4c/0xa0
[   28.448994][  T433]  ? clear_bhb_loop+0x50/0xa0
[   28.453654][  T433]  ? clear_bhb_loop+0x50/0xa0
[   28.458322][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   28.464195][  T433] RIP: 0033:0x7f7b4417dbe9
[   28.468593][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   28.488270][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   28.496676][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   28.504627][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   28.512578][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   28.520742][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   28.528702][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   28.536838][  T433]  </TASK>
[   28.554089][  T488] loop5: detected capacity change from 0 to 512
[   28.567235][  T433] F2FS-fs (loop3): access invalid blkaddr:6
[   28.573418][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   28.583360][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   28.593425][  T433] Call Trace:
[   28.596716][  T433]  <TASK>
[   28.599653][  T433]  __dump_stack+0x21/0x30
[   28.603995][  T433]  dump_stack_lvl+0xee/0x150
[   28.608591][  T433]  ? show_regs_print_info+0x20/0x20
[   28.613871][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   28.619604][  T433]  ? set_page_dirty+0x1ae/0x310
[   28.624471][  T433]  dump_stack+0x15/0x20
[   28.628641][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   28.634030][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   28.640207][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   28.645417][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   28.650973][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   28.656707][  T433]  ? __kasan_check_write+0x14/0x20
[   28.661855][  T433]  ? data_blkaddr+0x330/0x330
[   28.666569][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   28.672044][  T433]  ? addrs_per_block+0x110/0x110
[   28.677010][  T433]  ? dquot_initialize+0x20/0x20
[   28.681893][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   28.687104][  T433]  f2fs_truncate+0x1d7/0x3d0
[   28.691704][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   28.696476][  T433]  f2fs_setattr+0xaca/0x11b0
[   28.701083][  T433]  ? f2fs_getattr+0x670/0x670
[   28.705951][  T433]  notify_change+0xbca/0xe90
[   28.710557][  T433]  do_truncate+0x197/0x220
[   28.715071][  T433]  ? dquot_file_open+0x86/0xb0
[   28.719859][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   28.724995][  T433]  path_openat+0x2769/0x2f10
[   28.729599][  T433]  ? do_syscall_64+0x4c/0xa0
[   28.734213][  T433]  ? do_filp_open+0x3e0/0x3e0
[   28.738920][  T433]  do_filp_open+0x1b3/0x3e0
[   28.743437][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   28.748232][  T433]  do_sys_openat2+0x14c/0x7b0
[   28.752922][  T433]  ? __se_sys_futex+0x139/0x310
[   28.757782][  T433]  ? __kasan_check_write+0x14/0x20
[   28.762903][  T433]  ? do_sys_open+0xe0/0xe0
[   28.767442][  T433]  ? __x64_sys_futex+0x100/0x100
[   28.772390][  T433]  ? do_writev+0x202/0x2b0
[   28.776830][  T433]  __x64_sys_open+0x11c/0x140
[   28.781526][  T433]  x64_sys_call+0x3fc/0x9a0
[   28.786047][  T433]  do_syscall_64+0x4c/0xa0
[   28.790489][  T433]  ? clear_bhb_loop+0x50/0xa0
[   28.795180][  T433]  ? clear_bhb_loop+0x50/0xa0
[   28.799864][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   28.805776][  T433] RIP: 0033:0x7f7b4417dbe9
[   28.810196][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   28.829940][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   28.838384][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   28.846382][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   28.854536][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   28.862507][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   28.870483][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   28.876509][  T480] loop1: detected capacity change from 0 to 1024
[   28.878463][  T433]  </TASK>
[   28.891505][  T433] F2FS-fs (loop3): access invalid blkaddr:6
[   28.898041][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   28.907940][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   28.918079][  T433] Call Trace:
[   28.921345][  T433]  <TASK>
[   28.924272][  T433]  __dump_stack+0x21/0x30
[   28.928583][  T433]  dump_stack_lvl+0xee/0x150
[   28.933159][  T433]  ? show_regs_print_info+0x20/0x20
[   28.938335][  T433]  dump_stack+0x15/0x20
[   28.942464][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   28.947816][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   28.954053][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   28.959239][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   28.964772][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   28.970473][  T433]  ? __kasan_check_write+0x14/0x20
[   28.975565][  T433]  ? data_blkaddr+0x330/0x330
[   28.980235][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   28.985670][  T433]  ? addrs_per_block+0x110/0x110
[   28.990601][  T433]  ? dquot_initialize+0x20/0x20
[   28.995433][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   29.000619][  T433]  f2fs_truncate+0x1d7/0x3d0
[   29.005384][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   29.010143][  T433]  f2fs_setattr+0xaca/0x11b0
[   29.014719][  T433]  ? f2fs_getattr+0x670/0x670
[   29.019376][  T433]  notify_change+0xbca/0xe90
[   29.023968][  T433]  do_truncate+0x197/0x220
[   29.028372][  T433]  ? dquot_file_open+0x86/0xb0
[   29.033115][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   29.038125][  T433]  path_openat+0x2769/0x2f10
[   29.042695][  T433]  ? do_syscall_64+0x4c/0xa0
[   29.047290][  T433]  ? do_filp_open+0x3e0/0x3e0
[   29.051954][  T433]  do_filp_open+0x1b3/0x3e0
[   29.056462][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   29.061054][  T433]  do_sys_openat2+0x14c/0x7b0
[   29.065737][  T433]  ? __se_sys_futex+0x139/0x310
[   29.070635][  T433]  ? __kasan_check_write+0x14/0x20
[   29.075734][  T433]  ? do_sys_open+0xe0/0xe0
[   29.080139][  T433]  ? __x64_sys_futex+0x100/0x100
[   29.085062][  T433]  ? do_writev+0x202/0x2b0
[   29.089472][  T433]  __x64_sys_open+0x11c/0x140
[   29.094140][  T433]  x64_sys_call+0x3fc/0x9a0
[   29.098640][  T433]  do_syscall_64+0x4c/0xa0
[   29.103073][  T433]  ? clear_bhb_loop+0x50/0xa0
[   29.107861][  T433]  ? clear_bhb_loop+0x50/0xa0
[   29.112532][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   29.118405][  T433] RIP: 0033:0x7f7b4417dbe9
[   29.122835][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   29.142424][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   29.150833][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   29.158802][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   29.166752][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   29.174702][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   29.182734][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   29.190691][  T433]  </TASK>
[   29.194975][  T433] F2FS-fs (loop3): access invalid blkaddr:1
[   29.200918][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   29.205994][  T480] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[   29.205994][  T480] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   29.205994][  T480] 
[   29.210805][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   29.210818][  T433] Call Trace:
[   29.210824][  T433]  <TASK>
[   29.210831][  T433]  __dump_stack+0x21/0x30
[   29.235661][  T480] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none.
[   29.239362][  T433]  dump_stack_lvl+0xee/0x150
[   29.268914][  T433]  ? show_regs_print_info+0x20/0x20
[   29.274223][  T433]  dump_stack+0x15/0x20
[   29.278383][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   29.283760][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   29.289922][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   29.295110][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   29.300649][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   29.306349][  T433]  ? __kasan_check_write+0x14/0x20
[   29.311439][  T433]  ? data_blkaddr+0x330/0x330
[   29.316100][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   29.321637][  T433]  ? addrs_per_block+0x110/0x110
[   29.326570][  T433]  ? dquot_initialize+0x20/0x20
[   29.331408][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   29.336596][  T433]  f2fs_truncate+0x1d7/0x3d0
[   29.341193][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   29.346025][  T433]  f2fs_setattr+0xaca/0x11b0
[   29.350599][  T433]  ? f2fs_getattr+0x670/0x670
[   29.355251][  T433]  notify_change+0xbca/0xe90
[   29.359850][  T433]  do_truncate+0x197/0x220
[   29.364508][  T433]  ? dquot_file_open+0x86/0xb0
[   29.369272][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   29.374535][  T433]  path_openat+0x2769/0x2f10
[   29.379101][  T433]  ? do_syscall_64+0x4c/0xa0
[   29.383669][  T433]  ? do_filp_open+0x3e0/0x3e0
[   29.388326][  T433]  do_filp_open+0x1b3/0x3e0
[   29.392805][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   29.397378][  T433]  do_sys_openat2+0x14c/0x7b0
[   29.402035][  T433]  ? __se_sys_futex+0x139/0x310
[   29.406859][  T433]  ? __kasan_check_write+0x14/0x20
[   29.411944][  T433]  ? do_sys_open+0xe0/0xe0
[   29.416333][  T433]  ? __x64_sys_futex+0x100/0x100
[   29.421245][  T433]  ? do_writev+0x202/0x2b0
[   29.425637][  T433]  __x64_sys_open+0x11c/0x140
[   29.430297][  T433]  x64_sys_call+0x3fc/0x9a0
[   29.434787][  T433]  do_syscall_64+0x4c/0xa0
[   29.439272][  T433]  ? clear_bhb_loop+0x50/0xa0
[   29.443922][  T433]  ? clear_bhb_loop+0x50/0xa0
[   29.448585][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   29.454453][  T433] RIP: 0033:0x7f7b4417dbe9
[   29.458849][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   29.478434][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   29.486852][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   29.493303][  T446] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   29.494803][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   29.510184][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   29.518137][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   29.526189][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   29.534146][  T433]  </TASK>
[   29.543906][  T433] F2FS-fs (loop3): access invalid blkaddr:1219692001
[   29.552350][  T488] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   29.553025][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   29.565651][  T488] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   29.575389][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   29.575404][  T433] Call Trace:
[   29.575409][  T433]  <TASK>
[   29.575416][  T433]  __dump_stack+0x21/0x30
[   29.575444][  T433]  dump_stack_lvl+0xee/0x150
[   29.603099][  T488] EXT4-fs (loop5): 1 truncate cleaned up
[   29.605750][  T433]  ? show_regs_print_info+0x20/0x20
[   29.605781][  T433]  ? f2fs_is_valid_blkaddr+0xc6b/0x12a0
[   29.605804][  T433]  dump_stack+0x15/0x20
[   29.610373][  T488] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[   29.615976][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   29.616000][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   29.616021][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   29.616038][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   29.672499][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   29.678222][  T433]  ? __kasan_check_write+0x14/0x20
[   29.683317][  T433]  ? data_blkaddr+0x330/0x330
[   29.687977][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   29.693420][  T433]  ? addrs_per_block+0x110/0x110
[   29.698339][  T433]  ? dquot_initialize+0x20/0x20
[   29.703180][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   29.708360][  T433]  f2fs_truncate+0x1d7/0x3d0
[   29.712928][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   29.717673][  T433]  f2fs_setattr+0xaca/0x11b0
[   29.722247][  T433]  ? f2fs_getattr+0x670/0x670
[   29.726902][  T433]  notify_change+0xbca/0xe90
[   29.731476][  T433]  do_truncate+0x197/0x220
[   29.735881][  T433]  ? dquot_file_open+0x86/0xb0
[   29.740629][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   29.745641][  T433]  path_openat+0x2769/0x2f10
[   29.750222][  T433]  ? do_syscall_64+0x4c/0xa0
[   29.754807][  T433]  ? do_filp_open+0x3e0/0x3e0
[   29.759470][  T433]  do_filp_open+0x1b3/0x3e0
[   29.763959][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   29.768533][  T433]  do_sys_openat2+0x14c/0x7b0
[   29.773194][  T433]  ? __se_sys_futex+0x139/0x310
[   29.778033][  T433]  ? __kasan_check_write+0x14/0x20
[   29.783216][  T433]  ? do_sys_open+0xe0/0xe0
[   29.787623][  T433]  ? __x64_sys_futex+0x100/0x100
[   29.792539][  T433]  ? do_writev+0x202/0x2b0
[   29.796935][  T433]  __x64_sys_open+0x11c/0x140
[   29.801778][  T433]  x64_sys_call+0x3fc/0x9a0
[   29.806261][  T433]  do_syscall_64+0x4c/0xa0
[   29.810656][  T433]  ? clear_bhb_loop+0x50/0xa0
[   29.815316][  T433]  ? clear_bhb_loop+0x50/0xa0
[   29.819978][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   29.825852][  T433] RIP: 0033:0x7f7b4417dbe9
[   29.830247][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   29.849839][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   29.858258][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   29.867177][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   29.875138][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   29.883094][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   29.891139][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   29.899099][  T433]  </TASK>
[   29.915246][  T433] ==================================================================
[   29.923336][  T433] BUG: KASAN: use-after-free in f2fs_truncate_data_blocks_range+0x826/0xeb0
[   29.932004][  T433] Read of size 4 at addr ffff888133036000 by task syz.3.38/433
[   29.939529][  T433] 
[   29.941837][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   29.951959][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   29.961999][  T433] Call Trace:
[   29.965267][  T433]  <TASK>
[   29.968192][  T433]  __dump_stack+0x21/0x30
[   29.972503][  T433]  dump_stack_lvl+0xee/0x150
[   29.977071][  T433]  ? show_regs_print_info+0x20/0x20
[   29.982246][  T433]  ? load_image+0x3a0/0x3a0
[   29.986830][  T433]  print_address_description+0x7f/0x2c0
[   29.992360][  T433]  ? f2fs_truncate_data_blocks_range+0x826/0xeb0
[   29.998722][  T433]  kasan_report+0xf1/0x140
[   30.003118][  T433]  ? up_write+0x7b/0x290
[   30.007343][  T433]  ? f2fs_truncate_data_blocks_range+0x826/0xeb0
[   30.013649][  T433]  __asan_report_load4_noabort+0x14/0x20
[   30.019265][  T433]  f2fs_truncate_data_blocks_range+0x826/0xeb0
[   30.025422][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   30.030605][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   30.036133][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   30.041923][  T433]  ? __kasan_check_write+0x14/0x20
[   30.047023][  T433]  ? data_blkaddr+0x330/0x330
[   30.051686][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   30.057130][  T433]  ? addrs_per_block+0x110/0x110
[   30.062055][  T433]  ? dquot_initialize+0x20/0x20
[   30.066888][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   30.072250][  T433]  f2fs_truncate+0x1d7/0x3d0
[   30.076818][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   30.081636][  T433]  f2fs_setattr+0xaca/0x11b0
[   30.086404][  T433]  ? f2fs_getattr+0x670/0x670
[   30.091075][  T433]  notify_change+0xbca/0xe90
[   30.095657][  T433]  do_truncate+0x197/0x220
[   30.100065][  T433]  ? dquot_file_open+0x86/0xb0
[   30.104811][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   30.109828][  T433]  path_openat+0x2769/0x2f10
[   30.114506][  T433]  ? do_syscall_64+0x4c/0xa0
[   30.119084][  T433]  ? do_filp_open+0x3e0/0x3e0
[   30.123372][  T446] usb 3-1: Using ep0 maxpacket: 32
[   30.123742][  T433]  do_filp_open+0x1b3/0x3e0
[   30.133307][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   30.137895][  T433]  do_sys_openat2+0x14c/0x7b0
[   30.142554][  T433]  ? __se_sys_futex+0x139/0x310
[   30.147388][  T433]  ? __kasan_check_write+0x14/0x20
[   30.152483][  T433]  ? do_sys_open+0xe0/0xe0
[   30.156883][  T433]  ? __x64_sys_futex+0x100/0x100
[   30.161799][  T433]  ? do_writev+0x202/0x2b0
[   30.166201][  T433]  __x64_sys_open+0x11c/0x140
[   30.170980][  T433]  x64_sys_call+0x3fc/0x9a0
[   30.175471][  T433]  do_syscall_64+0x4c/0xa0
[   30.179883][  T433]  ? clear_bhb_loop+0x50/0xa0
[   30.184537][  T433]  ? clear_bhb_loop+0x50/0xa0
[   30.189194][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   30.195074][  T433] RIP: 0033:0x7f7b4417dbe9
[   30.199471][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   30.219056][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   30.227730][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   30.235689][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   30.243653][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   30.251610][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   30.259563][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   30.267694][  T433]  </TASK>
[   30.270698][  T433] 
[   30.273005][  T433] Allocated by task 433:
[   30.277214][  T433]  __kasan_slab_alloc+0xbd/0xf0
[   30.282045][  T433]  slab_post_alloc_hook+0x4f/0x2b0
[   30.287132][  T433]  kmem_cache_alloc+0xf7/0x260
[   30.291867][  T433]  dst_alloc+0x15c/0x1d0
[   30.296086][  T433]  icmp6_dst_alloc+0xf5/0x560
[   30.300830][  T433]  ndisc_send_skb+0x258/0xc70
[   30.305479][  T433]  ndisc_send_rs+0x6e5/0x960
[   30.310044][  T433]  addrconf_rs_timer+0x2c7/0x600
[   30.314963][  T433]  call_timer_fn+0x38/0x290
[   30.319442][  T433]  __run_timers+0x639/0x9a0
[   30.323921][  T433]  run_timer_softirq+0x6a/0xf0
[   30.328675][  T433]  handle_softirqs+0x250/0x560
[   30.333446][  T433]  __irq_exit_rcu+0x52/0xf0
[   30.337934][  T433]  irq_exit_rcu+0x9/0x10
[   30.342158][  T433]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   30.347774][  T433]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   30.353735][  T433] 
[   30.356049][  T433] Freed by task 432:
[   30.359914][  T433]  kasan_set_track+0x4a/0x70
[   30.364508][  T433]  kasan_set_free_info+0x23/0x40
[   30.369426][  T433]  ____kasan_slab_free+0x125/0x160
[   30.374511][  T433]  __kasan_slab_free+0x11/0x20
[   30.379252][  T433]  slab_free_freelist_hook+0xc2/0x190
[   30.384604][  T433]  kmem_cache_free+0x100/0x320
[   30.389366][  T433]  dst_destroy+0x1eb/0x2c0
[   30.393763][  T433]  dst_destroy_rcu+0x19/0x20
[   30.398337][  T433]  rcu_do_batch+0x51d/0xba0
[   30.402909][  T433]  rcu_core+0x5e4/0xf80
[   30.407052][  T433]  rcu_core_si+0x9/0x10
[   30.411297][  T433]  handle_softirqs+0x250/0x560
[   30.416041][  T433]  __irq_exit_rcu+0x52/0xf0
[   30.420547][  T433]  irq_exit_rcu+0x9/0x10
[   30.424778][  T433]  sysvec_apic_timer_interrupt+0x58/0xc0
[   30.430395][  T433]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   30.436446][  T433] 
[   30.438759][  T433] Last potentially related work creation:
[   30.444456][  T433]  kasan_save_stack+0x3a/0x60
[   30.449137][  T433]  __kasan_record_aux_stack+0xd2/0x100
[   30.454582][  T433]  kasan_record_aux_stack_noalloc+0xb/0x10
[   30.460374][  T433]  call_rcu+0x105/0xfe0
[   30.464525][  T433]  dst_release+0x123/0x190
[   30.468928][  T433]  skb_release_head_state+0x70/0x240
[   30.474212][  T433]  kfree_skb+0x89/0x2f0
[   30.478387][  T433]  neigh_connected_output+0x442/0x460
[   30.483747][  T433]  ip6_finish_output2+0x10b7/0x1760
[   30.488937][  T433]  __ip6_finish_output+0x61e/0x7d0
[   30.494031][  T433]  ip6_finish_output+0x31/0x240
[   30.498865][  T433]  ip6_output+0x1d1/0x3b0
[   30.503269][  T433]  ndisc_send_skb+0x797/0xc70
[   30.507923][  T433]  ndisc_send_rs+0x6e5/0x960
[   30.512490][  T433]  addrconf_rs_timer+0x2c7/0x600
[   30.517404][  T433]  call_timer_fn+0x38/0x290
[   30.521889][  T433]  __run_timers+0x639/0x9a0
[   30.526808][  T433]  run_timer_softirq+0x6a/0xf0
[   30.531551][  T433]  handle_softirqs+0x250/0x560
[   30.536294][  T433]  __irq_exit_rcu+0x52/0xf0
[   30.540796][  T433]  irq_exit_rcu+0x9/0x10
[   30.545025][  T433]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   30.550645][  T433]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   30.556608][  T433] 
[   30.558908][  T433] The buggy address belongs to the object at ffff888133036000
[   30.558908][  T433]  which belongs to the cache ip6_dst_cache of size 240
[   30.573116][  T433] The buggy address is located 0 bytes inside of
[   30.573116][  T433]  240-byte region [ffff888133036000, ffff8881330360f0)
[   30.586194][  T433] The buggy address belongs to the page:
[   30.591801][  T433] page:ffffea0004cc0d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133036
[   30.602020][  T433] flags: 0x4000000000000200(slab|zone=1)
[   30.607649][  T433] raw: 4000000000000200 0000000000000000 dead000000000122 ffff88810ae00c00
[   30.616297][  T433] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
[   30.624853][  T433] page dumped because: kasan: bad access detected
[   30.631329][  T433] page_owner tracks the page as allocated
[   30.637014][  T433] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 20, ts 25020625634, free_ts 25013440491
[   30.654276][  T433]  post_alloc_hook+0x192/0x1b0
[   30.659026][  T433]  prep_new_page+0x1c/0x110
[   30.663508][  T433]  get_page_from_freelist+0x2cc5/0x2d50
[   30.669031][  T433]  __alloc_pages+0x18f/0x440
[   30.673601][  T433]  new_slab+0xa1/0x4d0
[   30.677649][  T433]  ___slab_alloc+0x381/0x810
[   30.682215][  T433]  __slab_alloc+0x49/0x90
[   30.686527][  T433]  kmem_cache_alloc+0x138/0x260
[   30.691358][  T433]  dst_alloc+0x15c/0x1d0
[   30.695584][  T433]  icmp6_dst_alloc+0xf5/0x560
[   30.700246][  T433]  ndisc_send_skb+0x258/0xc70
[   30.704901][  T433]  ndisc_send_ns+0x842/0xaf0
[   30.709468][  T433]  addrconf_dad_work+0xa2b/0x1540
[   30.714560][  T433]  process_one_work+0x6be/0xba0
[   30.719392][  T433]  worker_thread+0xa59/0x1200
[   30.724047][  T433]  kthread+0x411/0x500
[   30.728098][  T433] page last free stack trace:
[   30.732748][  T433]  free_unref_page_prepare+0x542/0x550
[   30.738187][  T433]  free_unref_page_list+0x134/0x9d0
[   30.743369][  T433]  release_pages+0xfda/0x1030
[   30.748460][  T433]  __pagevec_release+0x71/0xe0
[   30.753203][  T433]  truncate_inode_pages_range+0x2f7/0xd60
[   30.758902][  T433]  truncate_setsize+0xbd/0xe0
[   30.763652][  T433]  f2fs_setattr+0xa8c/0x11b0
[   30.768235][  T433]  notify_change+0xbca/0xe90
[   30.772808][  T433]  do_truncate+0x197/0x220
[   30.777299][  T433]  path_openat+0x2769/0x2f10
[   30.781869][  T433]  do_filp_open+0x1b3/0x3e0
[   30.786349][  T433]  do_sys_openat2+0x14c/0x7b0
[   30.791008][  T433]  __x64_sys_open+0x11c/0x140
[   30.795664][  T433]  x64_sys_call+0x3fc/0x9a0
[   30.800234][  T433]  do_syscall_64+0x4c/0xa0
[   30.804641][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   30.810551][  T433] 
[   30.812895][  T433] Memory state around the buggy address:
[   30.818505][  T433]  ffff888133035f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   30.826641][  T433]  ffff888133035f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   30.834694][  T433] >ffff888133036000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   30.842817][  T433]                    ^
[   30.846864][  T433]  ffff888133036080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[   30.854902][  T433]  ffff888133036100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   30.862942][  T433] ==================================================================
[   30.870976][  T433] Disabling lock debugging due to kernel taint
[   30.887150][  T433] F2FS-fs (loop3): access invalid blkaddr:680114176
[   30.893980][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   30.899721][  T446] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   30.905257][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   30.905272][  T433] Call Trace:
[   30.905278][  T433]  <TASK>
[   30.905284][  T433]  __dump_stack+0x21/0x30
[   30.905311][  T433]  dump_stack_lvl+0xee/0x150
[   30.905328][  T433]  ? show_regs_print_info+0x20/0x20
[   30.905347][  T433]  dump_stack+0x15/0x20
[   30.905363][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   30.905386][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   30.941472][  T446] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   30.943389][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   30.943418][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   30.949258][  T446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.952723][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   30.963727][  T446] usb 3-1: config 0 descriptor??
[   30.964245][  T433]  ? __kasan_check_write+0x14/0x20
[   31.007566][  T433]  ? data_blkaddr+0x330/0x330
[   31.012245][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   31.017841][  T433]  ? addrs_per_block+0x110/0x110
[   31.022776][  T433]  ? dquot_initialize+0x20/0x20
[   31.027613][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   31.032805][  T433]  f2fs_truncate+0x1d7/0x3d0
[   31.037398][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   31.042159][  T433]  f2fs_setattr+0xaca/0x11b0
[   31.046740][  T433]  ? f2fs_getattr+0x670/0x670
[   31.051404][  T433]  notify_change+0xbca/0xe90
[   31.054690][  T446] hub 3-1:0.0: bad descriptor, ignoring hub
[   31.055988][  T433]  do_truncate+0x197/0x220
[   31.061943][  T446] hub: probe of 3-1:0.0 failed with error -5
[   31.066354][  T433]  ? dquot_file_open+0x86/0xb0
[   31.066385][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   31.066406][  T433]  path_openat+0x2769/0x2f10
[   31.066427][  T433]  ? do_syscall_64+0x4c/0xa0
[   31.073514][  T446] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   31.077123][  T433]  ? do_filp_open+0x3e0/0x3e0
[   31.103474][  T433]  do_filp_open+0x1b3/0x3e0
[   31.108144][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   31.112741][  T433]  do_sys_openat2+0x14c/0x7b0
[   31.117399][  T433]  ? __se_sys_futex+0x139/0x310
[   31.122245][  T433]  ? __kasan_check_write+0x14/0x20
[   31.127445][  T433]  ? do_sys_open+0xe0/0xe0
[   31.131844][  T433]  ? __x64_sys_futex+0x100/0x100
[   31.136780][  T433]  ? do_writev+0x202/0x2b0
[   31.141184][  T433]  __x64_sys_open+0x11c/0x140
[   31.145841][  T433]  x64_sys_call+0x3fc/0x9a0
[   31.150321][  T433]  do_syscall_64+0x4c/0xa0
[   31.154818][  T433]  ? clear_bhb_loop+0x50/0xa0
[   31.159494][  T433]  ? clear_bhb_loop+0x50/0xa0
[   31.164154][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   31.170030][  T433] RIP: 0033:0x7f7b4417dbe9
[   31.174433][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   31.194118][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   31.202518][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   31.210572][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   31.218529][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   31.226483][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.234436][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   31.242395][  T433]  </TASK>
[   31.253104][  T433] F2FS-fs (loop3): access invalid blkaddr:4294936705
[   31.260152][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   31.271441][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   31.281482][  T433] Call Trace:
[   31.284767][  T433]  <TASK>
[   31.287686][  T433]  __dump_stack+0x21/0x30
[   31.291999][  T433]  dump_stack_lvl+0xee/0x150
[   31.296566][  T433]  ? show_regs_print_info+0x20/0x20
[   31.301744][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   31.307617][  T433]  ? set_page_dirty+0x1ae/0x310
[   31.312451][  T433]  dump_stack+0x15/0x20
[   31.316599][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   31.321956][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   31.328098][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   31.333276][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   31.338839][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   31.344547][  T433]  ? __kasan_check_write+0x14/0x20
[   31.349657][  T433]  ? data_blkaddr+0x330/0x330
[   31.354342][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   31.359789][  T433]  ? addrs_per_block+0x110/0x110
[   31.364988][  T433]  ? dquot_initialize+0x20/0x20
[   31.369842][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   31.375020][  T433]  f2fs_truncate+0x1d7/0x3d0
[   31.379592][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   31.384439][  T433]  f2fs_setattr+0xaca/0x11b0
[   31.389016][  T433]  ? f2fs_getattr+0x670/0x670
[   31.393683][  T433]  notify_change+0xbca/0xe90
[   31.398309][  T433]  do_truncate+0x197/0x220
[   31.402752][  T433]  ? dquot_file_open+0x86/0xb0
[   31.407521][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   31.412533][  T433]  path_openat+0x2769/0x2f10
[   31.417123][  T433]  ? do_syscall_64+0x4c/0xa0
[   31.421798][  T433]  ? do_filp_open+0x3e0/0x3e0
[   31.426475][  T433]  do_filp_open+0x1b3/0x3e0
[   31.430997][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   31.435577][  T433]  do_sys_openat2+0x14c/0x7b0
[   31.440254][  T433]  ? __se_sys_futex+0x139/0x310
[   31.445109][  T433]  ? __kasan_check_write+0x14/0x20
[   31.450234][  T433]  ? do_sys_open+0xe0/0xe0
[   31.454718][  T433]  ? __x64_sys_futex+0x100/0x100
[   31.459761][  T433]  ? do_writev+0x202/0x2b0
[   31.464272][  T433]  __x64_sys_open+0x11c/0x140
[   31.468943][  T433]  x64_sys_call+0x3fc/0x9a0
[   31.473433][  T433]  do_syscall_64+0x4c/0xa0
[   31.477922][  T433]  ? clear_bhb_loop+0x50/0xa0
[   31.482586][  T433]  ? clear_bhb_loop+0x50/0xa0
[   31.487261][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   31.493138][  T433] RIP: 0033:0x7f7b4417dbe9
[   31.497559][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   31.517169][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   31.525572][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   31.533552][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   31.541514][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   31.549828][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.557883][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   31.565842][  T433]  </TASK>
[   31.579531][  T433] F2FS-fs (loop3): access invalid blkaddr:432
[   31.585863][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   31.597156][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   31.607300][  T433] Call Trace:
[   31.610566][  T433]  <TASK>
[   31.613483][  T433]  __dump_stack+0x21/0x30
[   31.614787][   T30] audit: type=1400 audit(1756423157.894:166): avc:  denied  { setopt } for  pid=501 comm="syz.5.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.617823][  T433]  dump_stack_lvl+0xee/0x150
[   31.617852][  T433]  ? show_regs_print_info+0x20/0x20
[   31.648361][  T433]  dump_stack+0x15/0x20
[   31.648392][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   31.657895][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   31.664037][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   31.669229][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   31.674769][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   31.680468][  T433]  ? __kasan_check_write+0x14/0x20
[   31.685567][  T433]  ? data_blkaddr+0x330/0x330
[   31.690225][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   31.695664][  T433]  ? addrs_per_block+0x110/0x110
[   31.700579][  T433]  ? dquot_initialize+0x20/0x20
[   31.705410][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   31.710584][  T433]  f2fs_truncate+0x1d7/0x3d0
[   31.715151][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   31.719898][  T433]  f2fs_setattr+0xaca/0x11b0
[   31.724463][  T433]  ? f2fs_getattr+0x670/0x670
[   31.729115][  T433]  notify_change+0xbca/0xe90
[   31.733696][  T433]  do_truncate+0x197/0x220
[   31.738090][  T433]  ? dquot_file_open+0x86/0xb0
[   31.742833][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   31.747839][  T433]  path_openat+0x2769/0x2f10
[   31.752410][  T433]  ? do_syscall_64+0x4c/0xa0
[   31.756998][  T433]  ? do_filp_open+0x3e0/0x3e0
[   31.761661][  T433]  do_filp_open+0x1b3/0x3e0
[   31.766137][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   31.770708][  T433]  do_sys_openat2+0x14c/0x7b0
[   31.775361][  T433]  ? __se_sys_futex+0x139/0x310
[   31.780189][  T433]  ? __kasan_check_write+0x14/0x20
[   31.785277][  T433]  ? do_sys_open+0xe0/0xe0
[   31.789671][  T433]  ? __x64_sys_futex+0x100/0x100
[   31.794603][  T433]  ? do_writev+0x202/0x2b0
[   31.798999][  T433]  __x64_sys_open+0x11c/0x140
[   31.803658][  T433]  x64_sys_call+0x3fc/0x9a0
[   31.808143][  T433]  do_syscall_64+0x4c/0xa0
[   31.812536][  T433]  ? clear_bhb_loop+0x50/0xa0
[   31.817190][  T433]  ? clear_bhb_loop+0x50/0xa0
[   31.821842][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   31.827712][  T433] RIP: 0033:0x7f7b4417dbe9
[   31.832101][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   31.851781][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   31.860180][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   31.868150][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   31.876200][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   31.884161][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.892203][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   31.900155][  T433]  </TASK>
[   31.914434][  T433] F2FS-fs (loop3): access invalid blkaddr:4112515382
[   31.921207][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   31.932594][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   31.942629][  T433] Call Trace:
[   31.945893][  T433]  <TASK>
[   31.948803][  T433]  __dump_stack+0x21/0x30
[   31.953115][  T433]  dump_stack_lvl+0xee/0x150
[   31.957683][  T433]  ? show_regs_print_info+0x20/0x20
[   31.962855][  T433]  dump_stack+0x15/0x20
[   31.966983][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   31.972348][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   31.978577][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   31.983752][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   31.989280][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   31.995080][  T433]  ? __kasan_check_write+0x14/0x20
[   32.000175][  T433]  ? data_blkaddr+0x330/0x330
[   32.004829][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   32.010295][  T433]  ? addrs_per_block+0x110/0x110
[   32.015229][  T433]  ? dquot_initialize+0x20/0x20
[   32.020095][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   32.025447][  T433]  f2fs_truncate+0x1d7/0x3d0
[   32.030034][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   32.034781][  T433]  f2fs_setattr+0xaca/0x11b0
[   32.039356][  T433]  ? f2fs_getattr+0x670/0x670
[   32.044007][  T433]  notify_change+0xbca/0xe90
[   32.048606][  T433]  do_truncate+0x197/0x220
[   32.053014][  T433]  ? dquot_file_open+0x86/0xb0
[   32.057861][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   32.062876][  T433]  path_openat+0x2769/0x2f10
[   32.067441][  T433]  ? do_syscall_64+0x4c/0xa0
[   32.072015][  T433]  ? do_filp_open+0x3e0/0x3e0
[   32.076667][  T433]  do_filp_open+0x1b3/0x3e0
[   32.081157][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   32.085733][  T433]  do_sys_openat2+0x14c/0x7b0
[   32.090489][  T433]  ? __se_sys_futex+0x139/0x310
[   32.095320][  T433]  ? __kasan_check_write+0x14/0x20
[   32.100416][  T433]  ? do_sys_open+0xe0/0xe0
[   32.104815][  T433]  ? __x64_sys_futex+0x100/0x100
[   32.109738][  T433]  ? do_writev+0x202/0x2b0
[   32.114182][  T433]  __x64_sys_open+0x11c/0x140
[   32.118848][  T433]  x64_sys_call+0x3fc/0x9a0
[   32.123331][  T433]  do_syscall_64+0x4c/0xa0
[   32.127729][  T433]  ? clear_bhb_loop+0x50/0xa0
[   32.132389][  T433]  ? clear_bhb_loop+0x50/0xa0
[   32.137059][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   32.142939][  T433] RIP: 0033:0x7f7b4417dbe9
[   32.147337][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.167017][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   32.175415][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   32.183457][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   32.191407][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   32.199368][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   32.207336][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   32.215305][  T433]  </TASK>
[   32.231540][  T433] F2FS-fs (loop3): access invalid blkaddr:848830848
[   32.238451][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   32.249738][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   32.259782][  T433] Call Trace:
[   32.263142][  T433]  <TASK>
[   32.266056][  T433]  __dump_stack+0x21/0x30
[   32.270376][  T433]  dump_stack_lvl+0xee/0x150
[   32.274957][  T433]  ? show_regs_print_info+0x20/0x20
[   32.280376][  T433]  dump_stack+0x15/0x20
[   32.284537][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   32.289917][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   32.296165][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   32.301366][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   32.306914][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   32.312637][  T433]  ? __kasan_check_write+0x14/0x20
[   32.317754][  T433]  ? data_blkaddr+0x330/0x330
[   32.322430][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   32.327890][  T433]  ? addrs_per_block+0x110/0x110
[   32.332833][  T433]  ? dquot_initialize+0x20/0x20
[   32.337686][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   32.342989][  T433]  f2fs_truncate+0x1d7/0x3d0
[   32.347577][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   32.352340][  T433]  f2fs_setattr+0xaca/0x11b0
[   32.356929][  T433]  ? f2fs_getattr+0x670/0x670
[   32.361605][  T433]  notify_change+0xbca/0xe90
[   32.366286][  T433]  do_truncate+0x197/0x220
[   32.370705][  T433]  ? dquot_file_open+0x86/0xb0
[   32.375556][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   32.380586][  T433]  path_openat+0x2769/0x2f10
[   32.385175][  T433]  ? do_syscall_64+0x4c/0xa0
[   32.389769][  T433]  ? do_filp_open+0x3e0/0x3e0
[   32.394539][  T433]  do_filp_open+0x1b3/0x3e0
[   32.399221][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   32.403797][  T433]  do_sys_openat2+0x14c/0x7b0
[   32.408556][  T433]  ? __se_sys_futex+0x139/0x310
[   32.413475][  T433]  ? __kasan_check_write+0x14/0x20
[   32.418595][  T433]  ? do_sys_open+0xe0/0xe0
[   32.422994][  T433]  ? __x64_sys_futex+0x100/0x100
[   32.427911][  T433]  ? do_writev+0x202/0x2b0
[   32.432310][  T433]  __x64_sys_open+0x11c/0x140
[   32.436969][  T433]  x64_sys_call+0x3fc/0x9a0
[   32.441468][  T433]  do_syscall_64+0x4c/0xa0
[   32.445869][  T433]  ? clear_bhb_loop+0x50/0xa0
[   32.450530][  T433]  ? clear_bhb_loop+0x50/0xa0
[   32.455193][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   32.461073][  T433] RIP: 0033:0x7f7b4417dbe9
[   32.465472][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.485060][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   32.493546][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   32.501501][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   32.509452][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   32.517491][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   32.525467][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   32.533448][  T433]  </TASK>
[   32.626866][   T30] audit: type=1400 audit(1756423158.904:167): avc:  denied  { write } for  pid=501 comm="syz.5.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.647256][   T30] audit: type=1400 audit(1756423158.904:168): avc:  denied  { nlmsg_write } for  pid=501 comm="syz.5.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.674209][  T433] F2FS-fs (loop3): access invalid blkaddr:4294936705
[   32.680991][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   32.692279][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   32.702337][  T433] Call Trace:
[   32.705640][  T433]  <TASK>
[   32.708575][  T433]  __dump_stack+0x21/0x30
[   32.712908][  T433]  dump_stack_lvl+0xee/0x150
[   32.717497][  T433]  ? show_regs_print_info+0x20/0x20
[   32.722722][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   32.728447][  T433]  ? set_page_dirty+0x1ae/0x310
[   32.733296][  T433]  dump_stack+0x15/0x20
[   32.737616][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   32.742974][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   32.749120][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   32.754304][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   32.759839][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   32.765630][  T433]  ? __kasan_check_write+0x14/0x20
[   32.770725][  T433]  ? data_blkaddr+0x330/0x330
[   32.775389][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   32.780835][  T433]  ? addrs_per_block+0x110/0x110
[   32.785845][  T433]  ? dquot_initialize+0x20/0x20
[   32.790679][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   32.795871][  T433]  f2fs_truncate+0x1d7/0x3d0
[   32.800451][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   32.805201][  T433]  f2fs_setattr+0xaca/0x11b0
[   32.809773][  T433]  ? f2fs_getattr+0x670/0x670
[   32.814432][  T433]  notify_change+0xbca/0xe90
[   32.819007][  T433]  do_truncate+0x197/0x220
[   32.823405][  T433]  ? dquot_file_open+0x86/0xb0
[   32.828153][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   32.833162][  T433]  path_openat+0x2769/0x2f10
[   32.837737][  T433]  ? do_syscall_64+0x4c/0xa0
[   32.842317][  T433]  ? do_filp_open+0x3e0/0x3e0
[   32.846980][  T433]  do_filp_open+0x1b3/0x3e0
[   32.851637][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   32.856224][  T433]  do_sys_openat2+0x14c/0x7b0
[   32.860885][  T433]  ? __se_sys_futex+0x139/0x310
[   32.865756][  T433]  ? __kasan_check_write+0x14/0x20
[   32.870853][  T433]  ? do_sys_open+0xe0/0xe0
[   32.875450][  T433]  ? __x64_sys_futex+0x100/0x100
[   32.880390][  T433]  ? do_writev+0x202/0x2b0
[   32.884788][  T433]  __x64_sys_open+0x11c/0x140
[   32.889448][  T433]  x64_sys_call+0x3fc/0x9a0
[   32.893931][  T433]  do_syscall_64+0x4c/0xa0
[   32.898329][  T433]  ? clear_bhb_loop+0x50/0xa0
[   32.902991][  T433]  ? clear_bhb_loop+0x50/0xa0
[   32.907652][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   32.913548][  T433] RIP: 0033:0x7f7b4417dbe9
[   32.917951][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.937544][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   32.945942][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   32.953899][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   32.961851][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   32.969810][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   32.977759][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   32.985723][  T433]  </TASK>
[   32.989275][  T507] usb 3-1: USB disconnect, device number 3
[   32.998957][  T433] F2FS-fs (loop3): access invalid blkaddr:2216533840
[   33.013427][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   33.025113][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   33.035177][  T433] Call Trace:
[   33.038458][  T433]  <TASK>
[   33.041405][  T433]  __dump_stack+0x21/0x30
[   33.045750][  T433]  dump_stack_lvl+0xee/0x150
[   33.050440][  T433]  ? show_regs_print_info+0x20/0x20
[   33.055921][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   33.061774][  T433]  ? set_page_dirty+0x1ae/0x310
[   33.066638][  T433]  dump_stack+0x15/0x20
[   33.070788][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   33.076179][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   33.082341][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   33.087676][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   33.093213][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   33.098924][  T433]  ? __kasan_check_write+0x14/0x20
[   33.104041][  T433]  ? data_blkaddr+0x330/0x330
[   33.108720][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   33.114178][  T433]  ? addrs_per_block+0x110/0x110
[   33.119102][  T433]  ? dquot_initialize+0x20/0x20
[   33.123939][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   33.129121][  T433]  f2fs_truncate+0x1d7/0x3d0
[   33.133689][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   33.138430][  T433]  f2fs_setattr+0xaca/0x11b0
[   33.143010][  T433]  ? f2fs_getattr+0x670/0x670
[   33.147670][  T433]  notify_change+0xbca/0xe90
[   33.152265][  T433]  do_truncate+0x197/0x220
[   33.156671][  T433]  ? dquot_file_open+0x86/0xb0
[   33.161468][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   33.166480][  T433]  path_openat+0x2769/0x2f10
[   33.171059][  T433]  ? do_syscall_64+0x4c/0xa0
[   33.175638][  T433]  ? do_filp_open+0x3e0/0x3e0
[   33.180301][  T433]  do_filp_open+0x1b3/0x3e0
[   33.184793][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   33.189361][  T433]  do_sys_openat2+0x14c/0x7b0
[   33.194026][  T433]  ? __se_sys_futex+0x139/0x310
[   33.198863][  T433]  ? __kasan_check_write+0x14/0x20
[   33.203953][  T433]  ? do_sys_open+0xe0/0xe0
[   33.208350][  T433]  ? __x64_sys_futex+0x100/0x100
[   33.213263][  T433]  ? do_writev+0x202/0x2b0
[   33.217658][  T433]  __x64_sys_open+0x11c/0x140
[   33.222317][  T433]  x64_sys_call+0x3fc/0x9a0
[   33.226885][  T433]  do_syscall_64+0x4c/0xa0
[   33.231280][  T433]  ? clear_bhb_loop+0x50/0xa0
[   33.235937][  T433]  ? clear_bhb_loop+0x50/0xa0
[   33.240782][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   33.246655][  T433] RIP: 0033:0x7f7b4417dbe9
[   33.251051][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.270723][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   33.279125][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   33.287092][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   33.295045][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   33.303000][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   33.310952][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   33.318933][  T433]  </TASK>
[   33.323160][  T433] F2FS-fs (loop3): access invalid blkaddr:2216433056
[   33.329903][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   33.341181][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   33.351218][  T433] Call Trace:
[   33.354489][  T433]  <TASK>
[   33.357412][  T433]  __dump_stack+0x21/0x30
[   33.361723][  T433]  dump_stack_lvl+0xee/0x150
[   33.366461][  T433]  ? show_regs_print_info+0x20/0x20
[   33.371647][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   33.377340][  T433]  ? set_page_dirty+0x1ae/0x310
[   33.382188][  T433]  dump_stack+0x15/0x20
[   33.386364][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   33.391716][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   33.397869][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   33.403040][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   33.408560][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   33.414258][  T433]  ? __kasan_check_write+0x14/0x20
[   33.419428][  T433]  ? data_blkaddr+0x330/0x330
[   33.424089][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   33.429968][  T433]  ? addrs_per_block+0x110/0x110
[   33.434879][  T433]  ? dquot_initialize+0x20/0x20
[   33.439719][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   33.444892][  T433]  f2fs_truncate+0x1d7/0x3d0
[   33.449457][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   33.454377][  T433]  f2fs_setattr+0xaca/0x11b0
[   33.458938][  T433]  ? f2fs_getattr+0x670/0x670
[   33.463598][  T433]  notify_change+0xbca/0xe90
[   33.468172][  T433]  do_truncate+0x197/0x220
[   33.472567][  T433]  ? dquot_file_open+0x86/0xb0
[   33.477390][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   33.482385][  T433]  path_openat+0x2769/0x2f10
[   33.486955][  T433]  ? do_syscall_64+0x4c/0xa0
[   33.491618][  T433]  ? do_filp_open+0x3e0/0x3e0
[   33.496280][  T433]  do_filp_open+0x1b3/0x3e0
[   33.500754][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   33.505317][  T433]  do_sys_openat2+0x14c/0x7b0
[   33.509986][  T433]  ? __se_sys_futex+0x139/0x310
[   33.514814][  T433]  ? __kasan_check_write+0x14/0x20
[   33.519912][  T433]  ? do_sys_open+0xe0/0xe0
[   33.524312][  T433]  ? __x64_sys_futex+0x100/0x100
[   33.529233][  T433]  ? do_writev+0x202/0x2b0
[   33.533715][  T433]  __x64_sys_open+0x11c/0x140
[   33.538376][  T433]  x64_sys_call+0x3fc/0x9a0
[   33.542950][  T433]  do_syscall_64+0x4c/0xa0
[   33.547353][  T433]  ? clear_bhb_loop+0x50/0xa0
[   33.552018][  T433]  ? clear_bhb_loop+0x50/0xa0
[   33.556676][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   33.562560][  T433] RIP: 0033:0x7f7b4417dbe9
[   33.566963][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.586550][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   33.595379][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   33.603332][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   33.611280][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   33.619231][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   33.627180][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   33.635138][  T433]  </TASK>
[   33.639184][  T433] F2FS-fs (loop3): access invalid blkaddr:4294901760
[   33.645986][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   33.657257][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   33.667293][  T433] Call Trace:
[   33.670554][  T433]  <TASK>
[   33.673526][  T433]  __dump_stack+0x21/0x30
[   33.677836][  T433]  dump_stack_lvl+0xee/0x150
[   33.682407][  T433]  ? show_regs_print_info+0x20/0x20
[   33.687675][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   33.693373][  T433]  ? set_page_dirty+0x1ae/0x310
[   33.698219][  T433]  dump_stack+0x15/0x20
[   33.702351][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   33.707699][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   33.713835][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   33.719013][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   33.724719][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   33.730413][  T433]  ? __kasan_check_write+0x14/0x20
[   33.735503][  T433]  ? data_blkaddr+0x330/0x330
[   33.740162][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   33.745600][  T433]  ? addrs_per_block+0x110/0x110
[   33.750527][  T433]  ? dquot_initialize+0x20/0x20
[   33.755352][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   33.760611][  T433]  f2fs_truncate+0x1d7/0x3d0
[   33.765176][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   33.769914][  T433]  f2fs_setattr+0xaca/0x11b0
[   33.774522][  T433]  ? f2fs_getattr+0x670/0x670
[   33.779173][  T433]  notify_change+0xbca/0xe90
[   33.783740][  T433]  do_truncate+0x197/0x220
[   33.788154][  T433]  ? dquot_file_open+0x86/0xb0
[   33.792901][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   33.797901][  T433]  path_openat+0x2769/0x2f10
[   33.802479][  T433]  ? do_syscall_64+0x4c/0xa0
[   33.807048][  T433]  ? do_filp_open+0x3e0/0x3e0
[   33.811699][  T433]  do_filp_open+0x1b3/0x3e0
[   33.816177][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   33.820743][  T433]  do_sys_openat2+0x14c/0x7b0
[   33.825397][  T433]  ? __se_sys_futex+0x139/0x310
[   33.830302][  T433]  ? __kasan_check_write+0x14/0x20
[   33.835404][  T433]  ? do_sys_open+0xe0/0xe0
[   33.839816][  T433]  ? __x64_sys_futex+0x100/0x100
[   33.844802][  T433]  ? do_writev+0x202/0x2b0
[   33.849206][  T433]  __x64_sys_open+0x11c/0x140
[   33.853873][  T433]  x64_sys_call+0x3fc/0x9a0
[   33.858355][  T433]  do_syscall_64+0x4c/0xa0
[   33.862750][  T433]  ? clear_bhb_loop+0x50/0xa0
[   33.867412][  T433]  ? clear_bhb_loop+0x50/0xa0
[   33.872077][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   33.877959][  T433] RIP: 0033:0x7f7b4417dbe9
[   33.882362][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.901945][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   33.910465][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   33.918420][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   33.926401][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   33.934802][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   33.942756][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   33.950795][  T433]  </TASK>
[   33.954102][  T433] F2FS-fs (loop3): access invalid blkaddr:4294939724
[   33.960788][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   33.972043][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   33.982083][  T433] Call Trace:
[   33.985343][  T433]  <TASK>
[   33.988254][  T433]  __dump_stack+0x21/0x30
[   33.992571][  T433]  dump_stack_lvl+0xee/0x150
[   33.997229][  T433]  ? show_regs_print_info+0x20/0x20
[   34.002403][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   34.008282][  T433]  ? set_page_dirty+0x1ae/0x310
[   34.013111][  T433]  dump_stack+0x15/0x20
[   34.017242][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   34.022685][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   34.028841][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   34.034021][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   34.039615][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   34.045329][  T433]  ? __kasan_check_write+0x14/0x20
[   34.050422][  T433]  ? data_blkaddr+0x330/0x330
[   34.055083][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   34.060531][  T433]  ? addrs_per_block+0x110/0x110
[   34.065448][  T433]  ? dquot_initialize+0x20/0x20
[   34.070282][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   34.075474][  T433]  f2fs_truncate+0x1d7/0x3d0
[   34.080041][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   34.084785][  T433]  f2fs_setattr+0xaca/0x11b0
[   34.089350][  T433]  ? f2fs_getattr+0x670/0x670
[   34.094003][  T433]  notify_change+0xbca/0xe90
[   34.098670][  T433]  do_truncate+0x197/0x220
[   34.103083][  T433]  ? dquot_file_open+0x86/0xb0
[   34.107863][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   34.112878][  T433]  path_openat+0x2769/0x2f10
[   34.117458][  T433]  ? do_syscall_64+0x4c/0xa0
[   34.122127][  T433]  ? do_filp_open+0x3e0/0x3e0
[   34.126792][  T433]  do_filp_open+0x1b3/0x3e0
[   34.131277][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   34.135853][  T433]  do_sys_openat2+0x14c/0x7b0
[   34.140534][  T433]  ? __se_sys_futex+0x139/0x310
[   34.145464][  T433]  ? __kasan_check_write+0x14/0x20
[   34.150572][  T433]  ? do_sys_open+0xe0/0xe0
[   34.154975][  T433]  ? __x64_sys_futex+0x100/0x100
[   34.159904][  T433]  ? do_writev+0x202/0x2b0
[   34.164305][  T433]  __x64_sys_open+0x11c/0x140
[   34.168969][  T433]  x64_sys_call+0x3fc/0x9a0
[   34.173461][  T433]  do_syscall_64+0x4c/0xa0
[   34.177871][  T433]  ? clear_bhb_loop+0x50/0xa0
[   34.182553][  T433]  ? clear_bhb_loop+0x50/0xa0
[   34.187232][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   34.193124][  T433] RIP: 0033:0x7f7b4417dbe9
[   34.197555][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.217183][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   34.225626][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   34.233676][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   34.241637][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   34.249682][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   34.257640][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   34.265697][  T433]  </TASK>
[   34.270040][  T433] F2FS-fs (loop3): access invalid blkaddr:767
[   34.276231][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   34.287602][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   34.297669][  T433] Call Trace:
[   34.300940][  T433]  <TASK>
[   34.303853][  T433]  __dump_stack+0x21/0x30
[   34.308167][  T433]  dump_stack_lvl+0xee/0x150
[   34.312761][  T433]  ? show_regs_print_info+0x20/0x20
[   34.317941][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   34.323641][  T433]  ? set_page_dirty+0x1ae/0x310
[   34.328476][  T433]  dump_stack+0x15/0x20
[   34.332613][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   34.338230][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   34.344382][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   34.349567][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   34.355092][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   34.360809][  T433]  ? __kasan_check_write+0x14/0x20
[   34.366094][  T433]  ? data_blkaddr+0x330/0x330
[   34.370753][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   34.376190][  T433]  ? addrs_per_block+0x110/0x110
[   34.381105][  T433]  ? dquot_initialize+0x20/0x20
[   34.385932][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   34.391110][  T433]  f2fs_truncate+0x1d7/0x3d0
[   34.395697][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   34.400455][  T433]  f2fs_setattr+0xaca/0x11b0
[   34.405021][  T433]  ? f2fs_getattr+0x670/0x670
[   34.409671][  T433]  notify_change+0xbca/0xe90
[   34.414243][  T433]  do_truncate+0x197/0x220
[   34.418650][  T433]  ? dquot_file_open+0x86/0xb0
[   34.423396][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   34.428399][  T433]  path_openat+0x2769/0x2f10
[   34.432967][  T433]  ? do_syscall_64+0x4c/0xa0
[   34.437623][  T433]  ? do_filp_open+0x3e0/0x3e0
[   34.442275][  T433]  do_filp_open+0x1b3/0x3e0
[   34.446750][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   34.451320][  T433]  do_sys_openat2+0x14c/0x7b0
[   34.455978][  T433]  ? __se_sys_futex+0x139/0x310
[   34.460806][  T433]  ? __kasan_check_write+0x14/0x20
[   34.465900][  T433]  ? do_sys_open+0xe0/0xe0
[   34.470312][  T433]  ? __x64_sys_futex+0x100/0x100
[   34.475230][  T433]  ? do_writev+0x202/0x2b0
[   34.479636][  T433]  __x64_sys_open+0x11c/0x140
[   34.484302][  T433]  x64_sys_call+0x3fc/0x9a0
[   34.488780][  T433]  do_syscall_64+0x4c/0xa0
[   34.493187][  T433]  ? clear_bhb_loop+0x50/0xa0
[   34.497841][  T433]  ? clear_bhb_loop+0x50/0xa0
[   34.502492][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   34.508362][  T433] RIP: 0033:0x7f7b4417dbe9
[   34.512752][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.532594][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   34.540992][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   34.548970][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   34.556932][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   34.564886][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   34.572928][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   34.580885][  T433]  </TASK>
[   34.584789][  T433] F2FS-fs (loop3): access invalid blkaddr:33554432
[   34.591296][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   34.602988][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   34.613032][  T433] Call Trace:
[   34.616406][  T433]  <TASK>
[   34.619410][  T433]  __dump_stack+0x21/0x30
[   34.623750][  T433]  dump_stack_lvl+0xee/0x150
[   34.628321][  T433]  ? show_regs_print_info+0x20/0x20
[   34.633507][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   34.639214][  T433]  ? set_page_dirty+0x1ae/0x310
[   34.644045][  T433]  dump_stack+0x15/0x20
[   34.648282][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   34.653637][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   34.659805][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   34.664987][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   34.670604][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   34.676305][  T433]  ? __kasan_check_write+0x14/0x20
[   34.681417][  T433]  ? data_blkaddr+0x330/0x330
[   34.686096][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   34.691540][  T433]  ? addrs_per_block+0x110/0x110
[   34.696475][  T433]  ? dquot_initialize+0x20/0x20
[   34.701344][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   34.706543][  T433]  f2fs_truncate+0x1d7/0x3d0
[   34.711123][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   34.715953][  T433]  f2fs_setattr+0xaca/0x11b0
[   34.720520][  T433]  ? f2fs_getattr+0x670/0x670
[   34.725174][  T433]  notify_change+0xbca/0xe90
[   34.729741][  T433]  do_truncate+0x197/0x220
[   34.734222][  T433]  ? dquot_file_open+0x86/0xb0
[   34.738965][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   34.743985][  T433]  path_openat+0x2769/0x2f10
[   34.748578][  T433]  ? do_syscall_64+0x4c/0xa0
[   34.753149][  T433]  ? do_filp_open+0x3e0/0x3e0
[   34.757892][  T433]  do_filp_open+0x1b3/0x3e0
[   34.762488][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   34.767084][  T433]  do_sys_openat2+0x14c/0x7b0
[   34.771757][  T433]  ? __se_sys_futex+0x139/0x310
[   34.776687][  T433]  ? __kasan_check_write+0x14/0x20
[   34.781814][  T433]  ? do_sys_open+0xe0/0xe0
[   34.786253][  T433]  ? __x64_sys_futex+0x100/0x100
[   34.791181][  T433]  ? do_writev+0x202/0x2b0
[   34.795587][  T433]  __x64_sys_open+0x11c/0x140
[   34.800255][  T433]  x64_sys_call+0x3fc/0x9a0
[   34.804743][  T433]  do_syscall_64+0x4c/0xa0
[   34.809227][  T433]  ? clear_bhb_loop+0x50/0xa0
[   34.813895][  T433]  ? clear_bhb_loop+0x50/0xa0
[   34.818569][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   34.824447][  T433] RIP: 0033:0x7f7b4417dbe9
[   34.828849][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.848442][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   34.857034][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   34.865002][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   34.873305][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   34.881265][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   34.889310][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   34.897682][  T433]  </TASK>
[   34.901861][  T433] F2FS-fs (loop3): access invalid blkaddr:128
[   34.908297][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   34.919579][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   34.929620][  T433] Call Trace:
[   34.932885][  T433]  <TASK>
[   34.935819][  T433]  __dump_stack+0x21/0x30
[   34.940141][  T433]  dump_stack_lvl+0xee/0x150
[   34.944722][  T433]  ? show_regs_print_info+0x20/0x20
[   34.949898][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   34.955603][  T433]  ? set_page_dirty+0x1ae/0x310
[   34.960524][  T433]  dump_stack+0x15/0x20
[   34.964657][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   34.970005][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   34.976226][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   34.981424][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   34.986942][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   34.992634][  T433]  ? __kasan_check_write+0x14/0x20
[   34.997725][  T433]  ? data_blkaddr+0x330/0x330
[   35.002384][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   35.007818][  T433]  ? addrs_per_block+0x110/0x110
[   35.012734][  T433]  ? dquot_initialize+0x20/0x20
[   35.017678][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   35.022871][  T433]  f2fs_truncate+0x1d7/0x3d0
[   35.027451][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   35.032195][  T433]  f2fs_setattr+0xaca/0x11b0
[   35.036766][  T433]  ? f2fs_getattr+0x670/0x670
[   35.041429][  T433]  notify_change+0xbca/0xe90
[   35.046002][  T433]  do_truncate+0x197/0x220
[   35.050414][  T433]  ? dquot_file_open+0x86/0xb0
[   35.055170][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   35.060180][  T433]  path_openat+0x2769/0x2f10
[   35.064764][  T433]  ? do_syscall_64+0x4c/0xa0
[   35.069335][  T433]  ? do_filp_open+0x3e0/0x3e0
[   35.073991][  T433]  do_filp_open+0x1b3/0x3e0
[   35.078504][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   35.083069][  T433]  do_sys_openat2+0x14c/0x7b0
[   35.087721][  T433]  ? __se_sys_futex+0x139/0x310
[   35.092565][  T433]  ? __kasan_check_write+0x14/0x20
[   35.097661][  T433]  ? do_sys_open+0xe0/0xe0
[   35.102062][  T433]  ? __x64_sys_futex+0x100/0x100
[   35.106986][  T433]  ? do_writev+0x202/0x2b0
[   35.111381][  T433]  __x64_sys_open+0x11c/0x140
[   35.116034][  T433]  x64_sys_call+0x3fc/0x9a0
[   35.120521][  T433]  do_syscall_64+0x4c/0xa0
[   35.124915][  T433]  ? clear_bhb_loop+0x50/0xa0
[   35.129571][  T433]  ? clear_bhb_loop+0x50/0xa0
[   35.134237][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   35.140111][  T433] RIP: 0033:0x7f7b4417dbe9
[   35.144602][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.164768][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   35.173169][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   35.181358][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   35.189322][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   35.197366][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   35.205423][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   35.213391][  T433]  </TASK>
[   35.216679][  T433] F2FS-fs (loop3): access invalid blkaddr:767
[   35.222775][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   35.234155][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   35.244372][  T433] Call Trace:
[   35.247643][  T433]  <TASK>
[   35.250647][  T433]  __dump_stack+0x21/0x30
[   35.254966][  T433]  dump_stack_lvl+0xee/0x150
[   35.259548][  T433]  ? show_regs_print_info+0x20/0x20
[   35.264738][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   35.270437][  T433]  ? set_page_dirty+0x1ae/0x310
[   35.275275][  T433]  dump_stack+0x15/0x20
[   35.279412][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   35.284767][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   35.290997][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   35.296178][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   35.301704][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   35.307406][  T433]  ? __kasan_check_write+0x14/0x20
[   35.312587][  T433]  ? data_blkaddr+0x330/0x330
[   35.317248][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   35.322858][  T433]  ? addrs_per_block+0x110/0x110
[   35.327788][  T433]  ? dquot_initialize+0x20/0x20
[   35.332621][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   35.337799][  T433]  f2fs_truncate+0x1d7/0x3d0
[   35.342558][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   35.347400][  T433]  f2fs_setattr+0xaca/0x11b0
[   35.351984][  T433]  ? f2fs_getattr+0x670/0x670
[   35.356787][  T433]  notify_change+0xbca/0xe90
[   35.361370][  T433]  do_truncate+0x197/0x220
[   35.365781][  T433]  ? dquot_file_open+0x86/0xb0
[   35.370530][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   35.375537][  T433]  path_openat+0x2769/0x2f10
[   35.380127][  T433]  ? do_syscall_64+0x4c/0xa0
[   35.384801][  T433]  ? do_filp_open+0x3e0/0x3e0
[   35.389477][  T433]  do_filp_open+0x1b3/0x3e0
[   35.393962][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   35.398543][  T433]  do_sys_openat2+0x14c/0x7b0
[   35.403205][  T433]  ? __se_sys_futex+0x139/0x310
[   35.408135][  T433]  ? __kasan_check_write+0x14/0x20
[   35.413228][  T433]  ? do_sys_open+0xe0/0xe0
[   35.417646][  T433]  ? __x64_sys_futex+0x100/0x100
[   35.422619][  T433]  ? do_writev+0x202/0x2b0
[   35.427033][  T433]  __x64_sys_open+0x11c/0x140
[   35.431690][  T433]  x64_sys_call+0x3fc/0x9a0
[   35.436195][  T433]  do_syscall_64+0x4c/0xa0
[   35.440592][  T433]  ? clear_bhb_loop+0x50/0xa0
[   35.445249][  T433]  ? clear_bhb_loop+0x50/0xa0
[   35.449910][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   35.455801][  T433] RIP: 0033:0x7f7b4417dbe9
[   35.460210][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.479911][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   35.488321][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   35.496276][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   35.504248][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   35.512229][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   35.520397][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   35.528376][  T433]  </TASK>
[   35.533295][  T433] F2FS-fs (loop3): access invalid blkaddr:33554432
[   35.539817][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   35.551085][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   35.561141][  T433] Call Trace:
[   35.564421][  T433]  <TASK>
[   35.567337][  T433]  __dump_stack+0x21/0x30
[   35.571649][  T433]  dump_stack_lvl+0xee/0x150
[   35.576230][  T433]  ? show_regs_print_info+0x20/0x20
[   35.581508][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   35.587206][  T433]  ? set_page_dirty+0x1ae/0x310
[   35.592039][  T433]  dump_stack+0x15/0x20
[   35.596175][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   35.601529][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   35.607665][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   35.612864][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   35.618406][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   35.624118][  T433]  ? __kasan_check_write+0x14/0x20
[   35.629211][  T433]  ? data_blkaddr+0x330/0x330
[   35.633870][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   35.639309][  T433]  ? addrs_per_block+0x110/0x110
[   35.644227][  T433]  ? dquot_initialize+0x20/0x20
[   35.649099][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   35.654298][  T433]  f2fs_truncate+0x1d7/0x3d0
[   35.658883][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   35.663636][  T433]  f2fs_setattr+0xaca/0x11b0
[   35.668208][  T433]  ? f2fs_getattr+0x670/0x670
[   35.672864][  T433]  notify_change+0xbca/0xe90
[   35.677436][  T433]  do_truncate+0x197/0x220
[   35.681833][  T433]  ? dquot_file_open+0x86/0xb0
[   35.686580][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   35.691586][  T433]  path_openat+0x2769/0x2f10
[   35.696159][  T433]  ? do_syscall_64+0x4c/0xa0
[   35.700730][  T433]  ? do_filp_open+0x3e0/0x3e0
[   35.705473][  T433]  do_filp_open+0x1b3/0x3e0
[   35.709970][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   35.714539][  T433]  do_sys_openat2+0x14c/0x7b0
[   35.719311][  T433]  ? __se_sys_futex+0x139/0x310
[   35.724168][  T433]  ? __kasan_check_write+0x14/0x20
[   35.729271][  T433]  ? do_sys_open+0xe0/0xe0
[   35.733714][  T433]  ? __x64_sys_futex+0x100/0x100
[   35.738636][  T433]  ? do_writev+0x202/0x2b0
[   35.743038][  T433]  __x64_sys_open+0x11c/0x140
[   35.747700][  T433]  x64_sys_call+0x3fc/0x9a0
[   35.752195][  T433]  do_syscall_64+0x4c/0xa0
[   35.756595][  T433]  ? clear_bhb_loop+0x50/0xa0
[   35.761254][  T433]  ? clear_bhb_loop+0x50/0xa0
[   35.765908][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   35.771780][  T433] RIP: 0033:0x7f7b4417dbe9
[   35.776175][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.795763][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   35.804258][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   35.812233][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   35.820207][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   35.828257][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   35.836212][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   35.844280][  T433]  </TASK>
[   35.847638][  T433] F2FS-fs (loop3): access invalid blkaddr:256
[   35.853959][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   35.865361][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   35.875397][  T433] Call Trace:
[   35.878679][  T433]  <TASK>
[   35.881606][  T433]  __dump_stack+0x21/0x30
[   35.885915][  T433]  dump_stack_lvl+0xee/0x150
[   35.890490][  T433]  ? show_regs_print_info+0x20/0x20
[   35.895669][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   35.901385][  T433]  ? set_page_dirty+0x1ae/0x310
[   35.906310][  T433]  dump_stack+0x15/0x20
[   35.910459][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   35.915920][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   35.922048][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   35.927339][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   35.932877][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   35.938587][  T433]  ? __kasan_check_write+0x14/0x20
[   35.943778][  T433]  ? data_blkaddr+0x330/0x330
[   35.948441][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   35.953889][  T433]  ? addrs_per_block+0x110/0x110
[   35.958812][  T433]  ? dquot_initialize+0x20/0x20
[   35.963645][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   35.968840][  T433]  f2fs_truncate+0x1d7/0x3d0
[   35.973409][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   35.978154][  T433]  f2fs_setattr+0xaca/0x11b0
[   35.982725][  T433]  ? f2fs_getattr+0x670/0x670
[   35.987489][  T433]  notify_change+0xbca/0xe90
[   35.992061][  T433]  do_truncate+0x197/0x220
[   35.996468][  T433]  ? dquot_file_open+0x86/0xb0
[   36.001208][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   36.006207][  T433]  path_openat+0x2769/0x2f10
[   36.010777][  T433]  ? do_syscall_64+0x4c/0xa0
[   36.015344][  T433]  ? do_filp_open+0x3e0/0x3e0
[   36.020002][  T433]  do_filp_open+0x1b3/0x3e0
[   36.024479][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   36.029044][  T433]  do_sys_openat2+0x14c/0x7b0
[   36.033705][  T433]  ? __se_sys_futex+0x139/0x310
[   36.038568][  T433]  ? __kasan_check_write+0x14/0x20
[   36.043680][  T433]  ? do_sys_open+0xe0/0xe0
[   36.048088][  T433]  ? __x64_sys_futex+0x100/0x100
[   36.053020][  T433]  ? do_writev+0x202/0x2b0
[   36.057438][  T433]  __x64_sys_open+0x11c/0x140
[   36.062112][  T433]  x64_sys_call+0x3fc/0x9a0
[   36.066605][  T433]  do_syscall_64+0x4c/0xa0
[   36.071012][  T433]  ? clear_bhb_loop+0x50/0xa0
[   36.075673][  T433]  ? clear_bhb_loop+0x50/0xa0
[   36.080346][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   36.086224][  T433] RIP: 0033:0x7f7b4417dbe9
[   36.090624][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.110220][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   36.118638][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   36.126609][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   36.134569][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   36.142522][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.150475][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   36.158446][  T433]  </TASK>
[   36.164123][  T433] F2FS-fs (loop3): access invalid blkaddr:3735879680
[   36.170847][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   36.182129][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   36.192171][  T433] Call Trace:
[   36.195433][  T433]  <TASK>
[   36.198342][  T433]  __dump_stack+0x21/0x30
[   36.202657][  T433]  dump_stack_lvl+0xee/0x150
[   36.207223][  T433]  ? show_regs_print_info+0x20/0x20
[   36.212399][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   36.218116][  T433]  ? set_page_dirty+0x1ae/0x310
[   36.222960][  T433]  dump_stack+0x15/0x20
[   36.227095][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   36.232450][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   36.238586][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   36.243789][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   36.249319][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   36.255075][  T433]  ? __kasan_check_write+0x14/0x20
[   36.260169][  T433]  ? data_blkaddr+0x330/0x330
[   36.264832][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   36.270271][  T433]  ? addrs_per_block+0x110/0x110
[   36.275289][  T433]  ? dquot_initialize+0x20/0x20
[   36.280130][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   36.285306][  T433]  f2fs_truncate+0x1d7/0x3d0
[   36.289875][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   36.294625][  T433]  f2fs_setattr+0xaca/0x11b0
[   36.299196][  T433]  ? f2fs_getattr+0x670/0x670
[   36.303853][  T433]  notify_change+0xbca/0xe90
[   36.308421][  T433]  do_truncate+0x197/0x220
[   36.312820][  T433]  ? dquot_file_open+0x86/0xb0
[   36.317561][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   36.322572][  T433]  path_openat+0x2769/0x2f10
[   36.327142][  T433]  ? do_syscall_64+0x4c/0xa0
[   36.331714][  T433]  ? do_filp_open+0x3e0/0x3e0
[   36.336374][  T433]  do_filp_open+0x1b3/0x3e0
[   36.340855][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   36.345423][  T433]  do_sys_openat2+0x14c/0x7b0
[   36.350083][  T433]  ? __se_sys_futex+0x139/0x310
[   36.354930][  T433]  ? __kasan_check_write+0x14/0x20
[   36.360019][  T433]  ? do_sys_open+0xe0/0xe0
[   36.364410][  T433]  ? __x64_sys_futex+0x100/0x100
[   36.369341][  T433]  ? do_writev+0x202/0x2b0
[   36.373736][  T433]  __x64_sys_open+0x11c/0x140
[   36.378397][  T433]  x64_sys_call+0x3fc/0x9a0
[   36.382890][  T433]  do_syscall_64+0x4c/0xa0
[   36.387306][  T433]  ? clear_bhb_loop+0x50/0xa0
[   36.391959][  T433]  ? clear_bhb_loop+0x50/0xa0
[   36.396614][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   36.402515][  T433] RIP: 0033:0x7f7b4417dbe9
[   36.406912][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.426507][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   36.434934][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   36.442895][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   36.450876][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   36.459101][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.467340][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   36.475303][  T433]  </TASK>
[   36.478838][  T433] F2FS-fs (loop3): access invalid blkaddr:290
[   36.485041][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   36.496300][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   36.506350][  T433] Call Trace:
[   36.509616][  T433]  <TASK>
[   36.512531][  T433]  __dump_stack+0x21/0x30
[   36.516852][  T433]  dump_stack_lvl+0xee/0x150
[   36.521769][  T433]  ? show_regs_print_info+0x20/0x20
[   36.526960][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   36.532684][  T433]  ? set_page_dirty+0x1ae/0x310
[   36.537523][  T433]  dump_stack+0x15/0x20
[   36.541686][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   36.547046][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   36.553198][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   36.558407][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   36.563931][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   36.569626][  T433]  ? __kasan_check_write+0x14/0x20
[   36.574719][  T433]  ? data_blkaddr+0x330/0x330
[   36.579390][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   36.584836][  T433]  ? addrs_per_block+0x110/0x110
[   36.589843][  T433]  ? dquot_initialize+0x20/0x20
[   36.594672][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   36.599850][  T433]  f2fs_truncate+0x1d7/0x3d0
[   36.604420][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   36.609164][  T433]  f2fs_setattr+0xaca/0x11b0
[   36.613770][  T433]  ? f2fs_getattr+0x670/0x670
[   36.618431][  T433]  notify_change+0xbca/0xe90
[   36.623023][  T433]  do_truncate+0x197/0x220
[   36.627463][  T433]  ? dquot_file_open+0x86/0xb0
[   36.632344][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   36.637401][  T433]  path_openat+0x2769/0x2f10
[   36.641992][  T433]  ? do_syscall_64+0x4c/0xa0
[   36.646566][  T433]  ? do_filp_open+0x3e0/0x3e0
[   36.651221][  T433]  do_filp_open+0x1b3/0x3e0
[   36.655714][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   36.660288][  T433]  do_sys_openat2+0x14c/0x7b0
[   36.664968][  T433]  ? __se_sys_futex+0x139/0x310
[   36.669824][  T433]  ? __kasan_check_write+0x14/0x20
[   36.674913][  T433]  ? do_sys_open+0xe0/0xe0
[   36.679308][  T433]  ? __x64_sys_futex+0x100/0x100
[   36.684226][  T433]  ? do_writev+0x202/0x2b0
[   36.688625][  T433]  __x64_sys_open+0x11c/0x140
[   36.693284][  T433]  x64_sys_call+0x3fc/0x9a0
[   36.697771][  T433]  do_syscall_64+0x4c/0xa0
[   36.702168][  T433]  ? clear_bhb_loop+0x50/0xa0
[   36.706839][  T433]  ? clear_bhb_loop+0x50/0xa0
[   36.711517][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   36.717403][  T433] RIP: 0033:0x7f7b4417dbe9
[   36.721797][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.741583][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   36.750341][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   36.758295][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   36.766248][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   36.774218][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.782183][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   36.790151][  T433]  </TASK>
[   36.794493][  T433] F2FS-fs (loop3): access invalid blkaddr:3735879680
[   36.801284][  T433] CPU: 0 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   36.812673][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   36.822715][  T433] Call Trace:
[   36.825981][  T433]  <TASK>
[   36.828925][  T433]  __dump_stack+0x21/0x30
[   36.833250][  T433]  dump_stack_lvl+0xee/0x150
[   36.837841][  T433]  ? show_regs_print_info+0x20/0x20
[   36.843023][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   36.848727][  T433]  ? set_page_dirty+0x1ae/0x310
[   36.853559][  T433]  dump_stack+0x15/0x20
[   36.857864][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   36.863227][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   36.869359][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   36.874539][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   36.880076][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   36.885779][  T433]  ? __kasan_check_write+0x14/0x20
[   36.890874][  T433]  ? data_blkaddr+0x330/0x330
[   36.895548][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   36.900990][  T433]  ? addrs_per_block+0x110/0x110
[   36.905909][  T433]  ? dquot_initialize+0x20/0x20
[   36.910760][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   36.915936][  T433]  f2fs_truncate+0x1d7/0x3d0
[   36.920507][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   36.925250][  T433]  f2fs_setattr+0xaca/0x11b0
[   36.929814][  T433]  ? f2fs_getattr+0x670/0x670
[   36.934469][  T433]  notify_change+0xbca/0xe90
[   36.939058][  T433]  do_truncate+0x197/0x220
[   36.943459][  T433]  ? dquot_file_open+0x86/0xb0
[   36.948211][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   36.953255][  T433]  path_openat+0x2769/0x2f10
[   36.957853][  T433]  ? do_syscall_64+0x4c/0xa0
[   36.962430][  T433]  ? do_filp_open+0x3e0/0x3e0
[   36.967098][  T433]  do_filp_open+0x1b3/0x3e0
[   36.971585][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   36.976165][  T433]  do_sys_openat2+0x14c/0x7b0
[   36.980828][  T433]  ? __se_sys_futex+0x139/0x310
[   36.985667][  T433]  ? __kasan_check_write+0x14/0x20
[   36.991107][  T433]  ? do_sys_open+0xe0/0xe0
[   36.995552][  T433]  ? __x64_sys_futex+0x100/0x100
[   37.000570][  T433]  ? do_writev+0x202/0x2b0
[   37.005001][  T433]  __x64_sys_open+0x11c/0x140
[   37.009760][  T433]  x64_sys_call+0x3fc/0x9a0
[   37.014270][  T433]  do_syscall_64+0x4c/0xa0
[   37.018689][  T433]  ? clear_bhb_loop+0x50/0xa0
[   37.023349][  T433]  ? clear_bhb_loop+0x50/0xa0
[   37.028015][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   37.034014][  T433] RIP: 0033:0x7f7b4417dbe9
[   37.038434][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.058137][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   37.066727][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   37.074820][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   37.082783][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   37.090835][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   37.098816][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   37.106803][  T433]  </TASK>
[   37.110001][  T433] F2FS-fs (loop3): access invalid blkaddr:4144206400
[   37.116768][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   37.128124][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   37.138160][  T433] Call Trace:
[   37.141428][  T433]  <TASK>
[   37.144343][  T433]  __dump_stack+0x21/0x30
[   37.148659][  T433]  dump_stack_lvl+0xee/0x150
[   37.153427][  T433]  ? show_regs_print_info+0x20/0x20
[   37.158605][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   37.164577][  T433]  ? set_page_dirty+0x1ae/0x310
[   37.169411][  T433]  dump_stack+0x15/0x20
[   37.173545][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   37.178991][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   37.185139][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   37.190333][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   37.195951][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   37.201658][  T433]  ? __kasan_check_write+0x14/0x20
[   37.206754][  T433]  ? data_blkaddr+0x330/0x330
[   37.211500][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   37.216948][  T433]  ? addrs_per_block+0x110/0x110
[   37.221873][  T433]  ? dquot_initialize+0x20/0x20
[   37.226709][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   37.231900][  T433]  f2fs_truncate+0x1d7/0x3d0
[   37.236659][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   37.241507][  T433]  f2fs_setattr+0xaca/0x11b0
[   37.246080][  T433]  ? f2fs_getattr+0x670/0x670
[   37.250740][  T433]  notify_change+0xbca/0xe90
[   37.255322][  T433]  do_truncate+0x197/0x220
[   37.259722][  T433]  ? dquot_file_open+0x86/0xb0
[   37.264463][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   37.269466][  T433]  path_openat+0x2769/0x2f10
[   37.274036][  T433]  ? do_syscall_64+0x4c/0xa0
[   37.278609][  T433]  ? do_filp_open+0x3e0/0x3e0
[   37.283265][  T433]  do_filp_open+0x1b3/0x3e0
[   37.287764][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   37.292336][  T433]  do_sys_openat2+0x14c/0x7b0
[   37.296990][  T433]  ? __se_sys_futex+0x139/0x310
[   37.301839][  T433]  ? __kasan_check_write+0x14/0x20
[   37.307039][  T433]  ? do_sys_open+0xe0/0xe0
[   37.311458][  T433]  ? __x64_sys_futex+0x100/0x100
[   37.316390][  T433]  ? do_writev+0x202/0x2b0
[   37.320794][  T433]  __x64_sys_open+0x11c/0x140
[   37.325474][  T433]  x64_sys_call+0x3fc/0x9a0
[   37.329960][  T433]  do_syscall_64+0x4c/0xa0
[   37.334364][  T433]  ? clear_bhb_loop+0x50/0xa0
[   37.339024][  T433]  ? clear_bhb_loop+0x50/0xa0
[   37.343676][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   37.349547][  T433] RIP: 0033:0x7f7b4417dbe9
[   37.353941][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.373614][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   37.382016][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   37.389972][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   37.397945][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   37.405987][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   37.413940][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   37.421894][  T433]  </TASK>
[   37.425620][  T433] F2FS-fs (loop3): access invalid blkaddr:4294936705
[   37.432303][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   37.443562][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   37.453596][  T433] Call Trace:
[   37.456854][  T433]  <TASK>
[   37.459764][  T433]  __dump_stack+0x21/0x30
[   37.464105][  T433]  dump_stack_lvl+0xee/0x150
[   37.468937][  T433]  ? show_regs_print_info+0x20/0x20
[   37.474138][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   37.479838][  T433]  ? set_page_dirty+0x1ae/0x310
[   37.484673][  T433]  dump_stack+0x15/0x20
[   37.488810][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   37.494162][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   37.500297][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   37.505483][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   37.511009][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   37.516716][  T433]  ? __kasan_check_write+0x14/0x20
[   37.521832][  T433]  ? data_blkaddr+0x330/0x330
[   37.526488][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   37.531950][  T433]  ? addrs_per_block+0x110/0x110
[   37.536962][  T433]  ? dquot_initialize+0x20/0x20
[   37.541799][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   37.546990][  T433]  f2fs_truncate+0x1d7/0x3d0
[   37.551655][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   37.556402][  T433]  f2fs_setattr+0xaca/0x11b0
[   37.560988][  T433]  ? f2fs_getattr+0x670/0x670
[   37.565644][  T433]  notify_change+0xbca/0xe90
[   37.570217][  T433]  do_truncate+0x197/0x220
[   37.574620][  T433]  ? dquot_file_open+0x86/0xb0
[   37.579368][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   37.584374][  T433]  path_openat+0x2769/0x2f10
[   37.588943][  T433]  ? do_syscall_64+0x4c/0xa0
[   37.593516][  T433]  ? do_filp_open+0x3e0/0x3e0
[   37.598193][  T433]  do_filp_open+0x1b3/0x3e0
[   37.602679][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   37.607275][  T433]  do_sys_openat2+0x14c/0x7b0
[   37.611943][  T433]  ? __se_sys_futex+0x139/0x310
[   37.616789][  T433]  ? __kasan_check_write+0x14/0x20
[   37.621990][  T433]  ? do_sys_open+0xe0/0xe0
[   37.626385][  T433]  ? __x64_sys_futex+0x100/0x100
[   37.631321][  T433]  ? do_writev+0x202/0x2b0
[   37.635716][  T433]  __x64_sys_open+0x11c/0x140
[   37.640471][  T433]  x64_sys_call+0x3fc/0x9a0
[   37.644953][  T433]  do_syscall_64+0x4c/0xa0
[   37.649351][  T433]  ? clear_bhb_loop+0x50/0xa0
[   37.654012][  T433]  ? clear_bhb_loop+0x50/0xa0
[   37.658753][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   37.664624][  T433] RIP: 0033:0x7f7b4417dbe9
[   37.669017][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.688611][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   37.697022][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   37.704989][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   37.713050][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   37.721020][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   37.728970][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   37.736924][  T433]  </TASK>
[   37.740195][  T433] F2FS-fs (loop3): access invalid blkaddr:433
[   37.746377][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   37.757641][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   37.767685][  T433] Call Trace:
[   37.770946][  T433]  <TASK>
[   37.773854][  T433]  __dump_stack+0x21/0x30
[   37.778203][  T433]  dump_stack_lvl+0xee/0x150
[   37.782855][  T433]  ? show_regs_print_info+0x20/0x20
[   37.788039][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   37.793824][  T433]  ? set_page_dirty+0x1ae/0x310
[   37.798844][  T433]  dump_stack+0x15/0x20
[   37.802998][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   37.808349][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   37.814573][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   37.819777][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   37.825655][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   37.831362][  T433]  ? __kasan_check_write+0x14/0x20
[   37.836470][  T433]  ? data_blkaddr+0x330/0x330
[   37.841129][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   37.846590][  T433]  ? addrs_per_block+0x110/0x110
[   37.851611][  T433]  ? dquot_initialize+0x20/0x20
[   37.856446][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   37.861649][  T433]  f2fs_truncate+0x1d7/0x3d0
[   37.866220][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   37.870976][  T433]  f2fs_setattr+0xaca/0x11b0
[   37.875550][  T433]  ? f2fs_getattr+0x670/0x670
[   37.880204][  T433]  notify_change+0xbca/0xe90
[   37.884775][  T433]  do_truncate+0x197/0x220
[   37.889171][  T433]  ? dquot_file_open+0x86/0xb0
[   37.893921][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   37.898940][  T433]  path_openat+0x2769/0x2f10
[   37.903540][  T433]  ? do_syscall_64+0x4c/0xa0
[   37.908125][  T433]  ? do_filp_open+0x3e0/0x3e0
[   37.912920][  T433]  do_filp_open+0x1b3/0x3e0
[   37.917415][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   37.921995][  T433]  do_sys_openat2+0x14c/0x7b0
[   37.926656][  T433]  ? __se_sys_futex+0x139/0x310
[   37.931489][  T433]  ? __kasan_check_write+0x14/0x20
[   37.936586][  T433]  ? do_sys_open+0xe0/0xe0
[   37.940985][  T433]  ? __x64_sys_futex+0x100/0x100
[   37.945925][  T433]  ? do_writev+0x202/0x2b0
[   37.950331][  T433]  __x64_sys_open+0x11c/0x140
[   37.955011][  T433]  x64_sys_call+0x3fc/0x9a0
[   37.959501][  T433]  do_syscall_64+0x4c/0xa0
[   37.963912][  T433]  ? clear_bhb_loop+0x50/0xa0
[   37.968590][  T433]  ? clear_bhb_loop+0x50/0xa0
[   37.973248][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   37.979138][  T433] RIP: 0033:0x7f7b4417dbe9
[   37.983531][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.003159][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   38.011561][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   38.019630][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   38.027602][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   38.035562][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   38.043552][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   38.051515][  T433]  </TASK>
[   38.055379][  T433] F2FS-fs (loop3): access invalid blkaddr:4250927454
[   38.062203][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   38.073488][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   38.083533][  T433] Call Trace:
[   38.086798][  T433]  <TASK>
[   38.089815][  T433]  __dump_stack+0x21/0x30
[   38.094139][  T433]  dump_stack_lvl+0xee/0x150
[   38.098718][  T433]  ? show_regs_print_info+0x20/0x20
[   38.103912][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   38.109612][  T433]  ? set_page_dirty+0x1ae/0x310
[   38.114445][  T433]  dump_stack+0x15/0x20
[   38.118580][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   38.123939][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   38.130070][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   38.135243][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   38.140780][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   38.146573][  T433]  ? __kasan_check_write+0x14/0x20
[   38.151677][  T433]  ? data_blkaddr+0x330/0x330
[   38.156484][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   38.161947][  T433]  ? addrs_per_block+0x110/0x110
[   38.166878][  T433]  ? dquot_initialize+0x20/0x20
[   38.171718][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   38.176968][  T433]  f2fs_truncate+0x1d7/0x3d0
[   38.181547][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   38.186302][  T433]  f2fs_setattr+0xaca/0x11b0
[   38.190969][  T433]  ? f2fs_getattr+0x670/0x670
[   38.195633][  T433]  notify_change+0xbca/0xe90
[   38.200221][  T433]  do_truncate+0x197/0x220
[   38.204638][  T433]  ? dquot_file_open+0x86/0xb0
[   38.209384][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   38.214394][  T433]  path_openat+0x2769/0x2f10
[   38.218966][  T433]  ? do_syscall_64+0x4c/0xa0
[   38.223556][  T433]  ? do_filp_open+0x3e0/0x3e0
[   38.228231][  T433]  do_filp_open+0x1b3/0x3e0
[   38.232726][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   38.237303][  T433]  do_sys_openat2+0x14c/0x7b0
[   38.241975][  T433]  ? __se_sys_futex+0x139/0x310
[   38.246916][  T433]  ? __kasan_check_write+0x14/0x20
[   38.252204][  T433]  ? do_sys_open+0xe0/0xe0
[   38.256604][  T433]  ? __x64_sys_futex+0x100/0x100
[   38.261541][  T433]  ? do_writev+0x202/0x2b0
[   38.265937][  T433]  __x64_sys_open+0x11c/0x140
[   38.270607][  T433]  x64_sys_call+0x3fc/0x9a0
[   38.275093][  T433]  do_syscall_64+0x4c/0xa0
[   38.279492][  T433]  ? clear_bhb_loop+0x50/0xa0
[   38.284146][  T433]  ? clear_bhb_loop+0x50/0xa0
[   38.288801][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   38.294673][  T433] RIP: 0033:0x7f7b4417dbe9
[   38.299072][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.319100][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   38.327504][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   38.335465][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   38.343425][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   38.351384][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   38.359340][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   38.367319][  T433]  </TASK>
[   38.370547][  T433] F2FS-fs (loop3): access invalid blkaddr:2315256161
[   38.377294][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   38.388553][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   38.398605][  T433] Call Trace:
[   38.401952][  T433]  <TASK>
[   38.404966][  T433]  __dump_stack+0x21/0x30
[   38.409322][  T433]  dump_stack_lvl+0xee/0x150
[   38.413900][  T433]  ? show_regs_print_info+0x20/0x20
[   38.419109][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   38.424808][  T433]  ? set_page_dirty+0x1ae/0x310
[   38.429668][  T433]  dump_stack+0x15/0x20
[   38.433891][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   38.439248][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   38.445478][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   38.450657][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   38.456218][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   38.461932][  T433]  ? __kasan_check_write+0x14/0x20
[   38.467037][  T433]  ? data_blkaddr+0x330/0x330
[   38.471714][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   38.477155][  T433]  ? addrs_per_block+0x110/0x110
[   38.482072][  T433]  ? dquot_initialize+0x20/0x20
[   38.486898][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   38.492069][  T433]  f2fs_truncate+0x1d7/0x3d0
[   38.496781][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   38.501630][  T433]  f2fs_setattr+0xaca/0x11b0
[   38.506204][  T433]  ? f2fs_getattr+0x670/0x670
[   38.510858][  T433]  notify_change+0xbca/0xe90
[   38.515431][  T433]  do_truncate+0x197/0x220
[   38.519854][  T433]  ? dquot_file_open+0x86/0xb0
[   38.524598][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   38.529671][  T433]  path_openat+0x2769/0x2f10
[   38.534253][  T433]  ? do_syscall_64+0x4c/0xa0
[   38.538830][  T433]  ? do_filp_open+0x3e0/0x3e0
[   38.543487][  T433]  do_filp_open+0x1b3/0x3e0
[   38.547991][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   38.552563][  T433]  do_sys_openat2+0x14c/0x7b0
[   38.557227][  T433]  ? __se_sys_futex+0x139/0x310
[   38.562112][  T433]  ? __kasan_check_write+0x14/0x20
[   38.567236][  T433]  ? do_sys_open+0xe0/0xe0
[   38.571636][  T433]  ? __x64_sys_futex+0x100/0x100
[   38.576550][  T433]  ? do_writev+0x202/0x2b0
[   38.580948][  T433]  __x64_sys_open+0x11c/0x140
[   38.585610][  T433]  x64_sys_call+0x3fc/0x9a0
[   38.590109][  T433]  do_syscall_64+0x4c/0xa0
[   38.594600][  T433]  ? clear_bhb_loop+0x50/0xa0
[   38.599265][  T433]  ? clear_bhb_loop+0x50/0xa0
[   38.604058][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   38.609944][  T433] RIP: 0033:0x7f7b4417dbe9
[   38.614352][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.633957][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   38.642370][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   38.650335][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   38.658290][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   38.666251][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   38.674203][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   38.682336][  T433]  </TASK>
[   38.685958][  T433] F2FS-fs (loop3): access invalid blkaddr:848830848
[   38.692671][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   38.703927][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   38.713967][  T433] Call Trace:
[   38.717318][  T433]  <TASK>
[   38.720230][  T433]  __dump_stack+0x21/0x30
[   38.724539][  T433]  dump_stack_lvl+0xee/0x150
[   38.729110][  T433]  ? show_regs_print_info+0x20/0x20
[   38.734287][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   38.739982][  T433]  ? set_page_dirty+0x1ae/0x310
[   38.744820][  T433]  dump_stack+0x15/0x20
[   38.748962][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   38.754319][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   38.760461][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   38.765640][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   38.771171][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   38.776891][  T433]  ? __kasan_check_write+0x14/0x20
[   38.781991][  T433]  ? data_blkaddr+0x330/0x330
[   38.786648][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   38.792087][  T433]  ? addrs_per_block+0x110/0x110
[   38.797008][  T433]  ? dquot_initialize+0x20/0x20
[   38.801924][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   38.807130][  T433]  f2fs_truncate+0x1d7/0x3d0
[   38.811704][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   38.816447][  T433]  f2fs_setattr+0xaca/0x11b0
[   38.821023][  T433]  ? f2fs_getattr+0x670/0x670
[   38.825693][  T433]  notify_change+0xbca/0xe90
[   38.830266][  T433]  do_truncate+0x197/0x220
[   38.834669][  T433]  ? dquot_file_open+0x86/0xb0
[   38.839419][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   38.844431][  T433]  path_openat+0x2769/0x2f10
[   38.849010][  T433]  ? do_syscall_64+0x4c/0xa0
[   38.853608][  T433]  ? do_filp_open+0x3e0/0x3e0
[   38.858283][  T433]  do_filp_open+0x1b3/0x3e0
[   38.862767][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   38.867336][  T433]  do_sys_openat2+0x14c/0x7b0
[   38.871989][  T433]  ? __se_sys_futex+0x139/0x310
[   38.876814][  T433]  ? __kasan_check_write+0x14/0x20
[   38.881905][  T433]  ? do_sys_open+0xe0/0xe0
[   38.886300][  T433]  ? __x64_sys_futex+0x100/0x100
[   38.891216][  T433]  ? do_writev+0x202/0x2b0
[   38.895695][  T433]  __x64_sys_open+0x11c/0x140
[   38.900352][  T433]  x64_sys_call+0x3fc/0x9a0
[   38.904847][  T433]  do_syscall_64+0x4c/0xa0
[   38.909239][  T433]  ? clear_bhb_loop+0x50/0xa0
[   38.913897][  T433]  ? clear_bhb_loop+0x50/0xa0
[   38.918562][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   38.924438][  T433] RIP: 0033:0x7f7b4417dbe9
[   38.928830][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.948414][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   38.956883][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   38.964838][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   38.972814][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   38.980773][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   38.988724][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   38.996676][  T433]  </TASK>
[   38.999779][  T433] F2FS-fs (loop3): access invalid blkaddr:4294936705
[   39.006500][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   39.017757][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   39.027796][  T433] Call Trace:
[   39.031056][  T433]  <TASK>
[   39.033965][  T433]  __dump_stack+0x21/0x30
[   39.038279][  T433]  dump_stack_lvl+0xee/0x150
[   39.042855][  T433]  ? show_regs_print_info+0x20/0x20
[   39.048049][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   39.053752][  T433]  ? set_page_dirty+0x1ae/0x310
[   39.058688][  T433]  dump_stack+0x15/0x20
[   39.062833][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   39.068180][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   39.074310][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   39.079485][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   39.085185][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   39.090892][  T433]  ? __kasan_check_write+0x14/0x20
[   39.096002][  T433]  ? data_blkaddr+0x330/0x330
[   39.100922][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   39.106378][  T433]  ? addrs_per_block+0x110/0x110
[   39.111388][  T433]  ? dquot_initialize+0x20/0x20
[   39.116223][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   39.121427][  T433]  f2fs_truncate+0x1d7/0x3d0
[   39.125994][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   39.130735][  T433]  f2fs_setattr+0xaca/0x11b0
[   39.135300][  T433]  ? f2fs_getattr+0x670/0x670
[   39.139954][  T433]  notify_change+0xbca/0xe90
[   39.144541][  T433]  do_truncate+0x197/0x220
[   39.148936][  T433]  ? dquot_file_open+0x86/0xb0
[   39.153761][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   39.158768][  T433]  path_openat+0x2769/0x2f10
[   39.163346][  T433]  ? do_syscall_64+0x4c/0xa0
[   39.168027][  T433]  ? do_filp_open+0x3e0/0x3e0
[   39.172695][  T433]  do_filp_open+0x1b3/0x3e0
[   39.177206][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   39.181790][  T433]  do_sys_openat2+0x14c/0x7b0
[   39.186462][  T433]  ? __se_sys_futex+0x139/0x310
[   39.191300][  T433]  ? __kasan_check_write+0x14/0x20
[   39.196396][  T433]  ? do_sys_open+0xe0/0xe0
[   39.200823][  T433]  ? __x64_sys_futex+0x100/0x100
[   39.205745][  T433]  ? do_writev+0x202/0x2b0
[   39.210182][  T433]  __x64_sys_open+0x11c/0x140
[   39.214851][  T433]  x64_sys_call+0x3fc/0x9a0
[   39.219341][  T433]  do_syscall_64+0x4c/0xa0
[   39.223751][  T433]  ? clear_bhb_loop+0x50/0xa0
[   39.228413][  T433]  ? clear_bhb_loop+0x50/0xa0
[   39.233075][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   39.239065][  T433] RIP: 0033:0x7f7b4417dbe9
[   39.243469][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.263063][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   39.271466][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   39.279420][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   39.287462][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   39.295506][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.303464][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   39.311418][  T433]  </TASK>
[   39.315489][  T433] F2FS-fs (loop3): access invalid blkaddr:432
[   39.321573][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   39.332833][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   39.342873][  T433] Call Trace:
[   39.346144][  T433]  <TASK>
[   39.349059][  T433]  __dump_stack+0x21/0x30
[   39.353373][  T433]  dump_stack_lvl+0xee/0x150
[   39.357944][  T433]  ? show_regs_print_info+0x20/0x20
[   39.363130][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   39.368897][  T433]  ? set_page_dirty+0x1ae/0x310
[   39.373765][  T433]  dump_stack+0x15/0x20
[   39.377904][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   39.383260][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   39.389400][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   39.394580][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   39.400116][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   39.405815][  T433]  ? __kasan_check_write+0x14/0x20
[   39.410906][  T433]  ? data_blkaddr+0x330/0x330
[   39.415568][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   39.421079][  T433]  ? addrs_per_block+0x110/0x110
[   39.426026][  T433]  ? dquot_initialize+0x20/0x20
[   39.430860][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   39.436059][  T433]  f2fs_truncate+0x1d7/0x3d0
[   39.440641][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   39.445522][  T433]  f2fs_setattr+0xaca/0x11b0
[   39.450110][  T433]  ? f2fs_getattr+0x670/0x670
[   39.454765][  T433]  notify_change+0xbca/0xe90
[   39.459356][  T433]  do_truncate+0x197/0x220
[   39.463937][  T433]  ? dquot_file_open+0x86/0xb0
[   39.468686][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   39.473719][  T433]  path_openat+0x2769/0x2f10
[   39.478290][  T433]  ? do_syscall_64+0x4c/0xa0
[   39.482888][  T433]  ? do_filp_open+0x3e0/0x3e0
[   39.487641][  T433]  do_filp_open+0x1b3/0x3e0
[   39.492132][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   39.496737][  T433]  do_sys_openat2+0x14c/0x7b0
[   39.501400][  T433]  ? __se_sys_futex+0x139/0x310
[   39.506236][  T433]  ? __kasan_check_write+0x14/0x20
[   39.511333][  T433]  ? do_sys_open+0xe0/0xe0
[   39.515759][  T433]  ? __x64_sys_futex+0x100/0x100
[   39.520761][  T433]  ? do_writev+0x202/0x2b0
[   39.525286][  T433]  __x64_sys_open+0x11c/0x140
[   39.530057][  T433]  x64_sys_call+0x3fc/0x9a0
[   39.534562][  T433]  do_syscall_64+0x4c/0xa0
[   39.539144][  T433]  ? clear_bhb_loop+0x50/0xa0
[   39.543808][  T433]  ? clear_bhb_loop+0x50/0xa0
[   39.548573][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   39.554479][  T433] RIP: 0033:0x7f7b4417dbe9
[   39.558873][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.578459][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   39.586858][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   39.594968][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   39.603157][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   39.611120][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.619078][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   39.627041][  T433]  </TASK>
[   39.630374][  T433] F2FS-fs (loop3): access invalid blkaddr:4112515382
[   39.637129][  T433] CPU: 1 PID: 433 Comm: syz.3.38 Tainted: G    B             5.15.189-syzkaller-android13-5.15.189_r00 #0
[   39.648386][  T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   39.658457][  T433] Call Trace:
[   39.661718][  T433]  <TASK>
[   39.664627][  T433]  __dump_stack+0x21/0x30
[   39.668963][  T433]  dump_stack_lvl+0xee/0x150
[   39.673532][  T433]  ? show_regs_print_info+0x20/0x20
[   39.678707][  T433]  ? f2fs_set_node_page_dirty+0x222/0x590
[   39.684405][  T433]  ? set_page_dirty+0x1ae/0x310
[   39.689238][  T433]  dump_stack+0x15/0x20
[   39.693383][  T433]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   39.698735][  T433]  f2fs_truncate_data_blocks_range+0x67c/0xeb0
[   39.704878][  T433]  ? f2fs_inode_dirtied+0x308/0x360
[   39.710055][  T433]  f2fs_truncate_data_blocks+0xf3/0x130
[   39.715598][  T433]  f2fs_truncate_inode_blocks+0x62f/0xf70
[   39.721303][  T433]  ? __kasan_check_write+0x14/0x20
[   39.726410][  T433]  ? data_blkaddr+0x330/0x330
[   39.731074][  T433]  f2fs_do_truncate_blocks+0x625/0xb20
[   39.736539][  T433]  ? addrs_per_block+0x110/0x110
[   39.741472][  T433]  ? dquot_initialize+0x20/0x20
[   39.746311][  T433]  f2fs_truncate_blocks+0x10e/0x300
[   39.751515][  T433]  f2fs_truncate+0x1d7/0x3d0
[   39.756086][  T433]  ? f2fs_setattr+0xac1/0x11b0
[   39.760877][  T433]  f2fs_setattr+0xaca/0x11b0
[   39.765721][  T433]  ? f2fs_getattr+0x670/0x670
[   39.770389][  T433]  notify_change+0xbca/0xe90
[   39.774998][  T433]  do_truncate+0x197/0x220
[   39.779397][  T433]  ? dquot_file_open+0x86/0xb0
[   39.784149][  T433]  ? put_page_bootmem+0x1a0/0x1a0
[   39.789155][  T433]  path_openat+0x2769/0x2f10
[   39.793730][  T433]  ? do_syscall_64+0x4c/0xa0
[   39.798311][  T433]  ? do_filp_open+0x3e0/0x3e0
[   39.802993][  T433]  do_filp_open+0x1b3/0x3e0
[   39.807482][  T433]  ? vfs_tmpfile+0x2d0/0x2d0
[   39.812057][  T433]  do_sys_openat2+0x14c/0x7b0
[   39.816733][  T433]  ? __se_sys_futex+0x139/0x310
[   39.821570][  T433]  ? __kasan_check_write+0x14/0x20
[   39.826663][  T433]  ? do_sys_open+0xe0/0xe0
[   39.831059][  T433]  ? __x64_sys_futex+0x100/0x100
[   39.835973][  T433]  ? do_writev+0x202/0x2b0
[   39.840367][  T433]  __x64_sys_open+0x11c/0x140
[   39.845029][  T433]  x64_sys_call+0x3fc/0x9a0
[   39.849612][  T433]  do_syscall_64+0x4c/0xa0
[   39.854025][  T433]  ? clear_bhb_loop+0x50/0xa0
[   39.858684][  T433]  ? clear_bhb_loop+0x50/0xa0
[   39.863338][  T433]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   39.869208][  T433] RIP: 0033:0x7f7b4417dbe9
[   39.873601][  T433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.893197][  T433] RSP: 002b:00007f7b42be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   39.901686][  T433] RAX: ffffffffffffffda RBX: 00007f7b443a4fa0 RCX: 00007f7b4417dbe9
[   39.909639][  T433] RDX: 0000000000000040 RSI: 0000000000141242 RDI: 0000200000000140
[   39.917600][  T433] RBP: 00007f7b44200e19 R08: 0000000000000000 R09: 0000000000000000
[   39.925644][  T433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.933595][  T433] R13: 00007f7b443a5038 R14: 00007f7b443a4fa0 R15: 00007ffde718e298
[   39.941558][  T433]  </TASK>
[   39.944980][  T433] F2FS-fs (loop3): access invalid blkaddr:848833408