last executing test programs:

1m33.183106512s ago: executing program 32 (id=28):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f0000000080)={[{@test_dummy_encryption}, {@grpquota}]}, 0x5, 0xbbf, &(0x7f0000000440)="$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")
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d168d6e03248e5b0a51267c78f9"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

1m26.899159377s ago: executing program 33 (id=110):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
times(&(0x7f0000000080))

1m26.577796792s ago: executing program 34 (id=115):
r0 = socket(0x1e, 0x4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1m21.219597143s ago: executing program 35 (id=168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x99aabbccddeeff00}]}]}, 0x30}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "0102030405060708090a0b0c0d0e0f10"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x68}}, 0x0)
close(r0)
unshare(0x40000000)

1m18.321177489s ago: executing program 36 (id=203):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
fspick(0xffffffffffffff9c, 0x0, 0x10000000)

1m12.660199924s ago: executing program 37 (id=102):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x8}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="0201140088dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040)

1m4.818982152s ago: executing program 38 (id=419):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x1, 0x0)
vmsplice(r2, &(0x7f0000000900)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000440)="0a90", 0x2}, {&(0x7f0000000380)="ad", 0x1}, {&(0x7f00000003c0)="d0", 0x1}], 0x4, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0)
write(r0, 0x0, 0x0)

1m3.328259332s ago: executing program 39 (id=433):
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

46.619063845s ago: executing program 40 (id=802):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1}, 0xc)

41.426512578s ago: executing program 6 (id=904):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)

41.426357838s ago: executing program 6 (id=905):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

41.293793205s ago: executing program 6 (id=907):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
close_range(r0, 0xffffffffffffffff, 0x0)

39.48050299s ago: executing program 6 (id=933):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000580000000400000003"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/169}, 0x20)

39.426329992s ago: executing program 6 (id=935):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x400, &(0x7f0000000600)=ANY=[], 0x3, 0x105fc, &(0x7f0000010600)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1c4)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000002c0)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x20)
lseek(r0, 0x80000000008, 0x0)

38.579112842s ago: executing program 6 (id=954):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x88ca}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x46, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x32, 0x0, @gue={{0x2, 0x0, 0x3, 0xa8, 0x100, @val=0x11040000}, "c1a3452d4902514ccef03e9a3fd17302ab00f80a8dbefb631982e8c9a11ef3d0fd50"}}}}}}}, 0x58)

35.970535434s ago: executing program 41 (id=971):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
syz_io_uring_setup(0xeb7, 0x0, 0x0, 0x0, &(0x7f0000000100))

28.505548134s ago: executing program 42 (id=1021):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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")
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000020980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

23.24672019s ago: executing program 43 (id=954):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x88ca}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x46, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x32, 0x0, @gue={{0x2, 0x0, 0x3, 0xa8, 0x100, @val=0x11040000}, "c1a3452d4902514ccef03e9a3fd17302ab00f80a8dbefb631982e8c9a11ef3d0fd50"}}}}}}}, 0x58)

22.023127458s ago: executing program 2 (id=1082):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
getpid()
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})

21.97897375s ago: executing program 2 (id=1083):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtaction={0x26c, 0x30, 0x871a15abc695f91d, 0x0, 0x0, {}, [{0x258, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40003, 0x0, 0x1, 0x200000, 0x10}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}, @m_tunnel_key={0xbc, 0x9, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e62}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe, 0x92db, 0x3, 0x81, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x55, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e11408e96ff85bc8b3529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x84, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xac, 0x17, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x200, 0xf, 0x0, 0x1, 0x67d2}, 0x1}}]}, {0x5d, 0x6, "93663b3ca4bdd73852bc3d0155bdf1a3408ad7b5a854d51b0b8cb80bfce6a19d2a7b96b161d1ff6cf0fc8503aef457d194670ff814658f95c88761ba0cd5871664c57b3d9239e277bd8800b51f34eaf714413a94ab36cb05a1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x26c}}, 0x20000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]})

21.879649035s ago: executing program 2 (id=1084):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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")
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="bfc42f6fd7d894d806a765731ded58538ce3c3b3ab0c67d05a3d311928595d7f55c66cb7dd08c6d41584b64612de0d06c043ca374fe9fa339cd4ab08972134fd9fd302cc05c96e4009271873b84a0043e0a6d880b726a2dcc6822178541ebdfd4b5fe220d5c5fbdd0be606219ab5", 0x6e}, {&(0x7f0000000080)="a7479f878efc69ef96900a9d51", 0xffffff07}, {&(0x7f0000000180)="1c4b49a4ef61908b6cab91c60ea0f1c48cb38d9c5fd4e499abc075125ee9d8dbeeba507bc91585fc2253cbaf67f8c0786a8e02a1e10dfaf3d089121ed3bed7795762cd7e9d5c5d1b2b3ccd83613da70bea3583d792fcbd7809ca120de76a23263d69b8d5881ba3284f51a1df431225f30ad1f32fff075ef4b92a64d3a02c9ee1f47445c29926121d7f8f26f29309ea2bfdd01b0339", 0x95}], 0x3, 0x5412, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

21.271748623s ago: executing program 2 (id=1090):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[], 0x1, 0x552d, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)

20.671056071s ago: executing program 2 (id=1105):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001080006040001"], 0x32)

20.170756485s ago: executing program 2 (id=1114):
setresgid(0xee00, 0xee01, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = getgid()
setgroups(0x2, &(0x7f00000000c0)=[r0, r0])
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)

20.140184146s ago: executing program 44 (id=1114):
setresgid(0xee00, 0xee01, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = getgid()
setgroups(0x2, &(0x7f00000000c0)=[r0, r0])
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)

19.856434649s ago: executing program 1 (id=1123):
r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4800)
close_range(r0, 0xffffffffffffffff, 0x0)

19.746093675s ago: executing program 1 (id=1124):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4000200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000004c0)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4)
shutdown(r0, 0x1)

19.731538795s ago: executing program 1 (id=1125):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x80000000)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19.566941823s ago: executing program 1 (id=1131):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

19.155332362s ago: executing program 5 (id=1137):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2c8, &(0x7f0000002940)="$eJzs3c9rI1UcAPDvpMk0pYf24EkE57AHL5btXj3YRSqIPSk5+AN0cXdhacJCA4FVMezJv8CDB/8Pb94FL/4HggeP3lyk8GRm0iSbpElcTbuUz+fSx/d9v/Pem5k2hWFePn+td3r/cf/h069/i3Y7i8ZRHMWzLPajERfSSAAAN8KzlOLPF/p8bzY2NScAYLOmPv9bl6Rsz4fe3vS0AIAN+vCjj9+/e3Jy/EFRtCN63w46WdQ/6/67D+NRdONB3I69OJ88C0ipbr/73slxNIvSftzqDQedsrL32S/j1Dyq+sPYi/3F9YdFbap+OGhW/3lkWcSjo3Iid2IvXpmrL/uP7yyoj04eb7RHiyzHP4i9+PWLeBzduF8905iM/00exTvpu7+++qRMLuuz4aCzXeVNpK2rvjYAAAAAAAAAAAAAAAAAAAAAANxcB8XYftzqlaF6/53O1nnVf/Bcf7W/TqPqr+uziLxqzOwPNEzxw8X+OreLokhZnT/e32enGa82o3ltCwcAAAAAAAAAAAAAAAAAAICXSP/Jl6f3ut0HZ/9LY/SS//i1/vmctL3OcY6mIq/H8uTtS8da1IitUXo519mcw58/7Y0j5SJe5CQMWkXEsjm35iI75XxWH/nvlFLKsojZrq2ZyM7Si9taZ6wVjd3lOeXgP32/++bpvWzVOWxfXLgfp7vyOOs/mbmmkS0f9Py5SFr7ligb+ZKcfHQ21zrO7n/8JXrr93qwUSRbsYrWVKQ1asRlt1/7X93PV/P3BwAAAAAAAAAAAAAAAAAAmJi89Lug8+nS0sbGJgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2zy/f+TRsxFZhrD+KMqXpyTUhqOI3mc9a97jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANx8/wQAAP//B4dp0A==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x8)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105042, 0x44)
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1, 0x8, 0x80000001)
pipe2(&(0x7f00000012c0), 0x0)

19.111344685s ago: executing program 1 (id=1138):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0)

18.746343752s ago: executing program 1 (id=1145):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00')

18.698084534s ago: executing program 45 (id=1145):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00')

18.524313942s ago: executing program 5 (id=1157):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x2, 0x1000, 0x4}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, 0x0, 0x0, 0x4}, 0x20)

18.457868785s ago: executing program 5 (id=1160):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc)

18.403806648s ago: executing program 5 (id=1162):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000040)={0x0})

18.255005425s ago: executing program 5 (id=1168):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
fchmod(0xffffffffffffffff, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0)

18.083038493s ago: executing program 5 (id=1177):
r0 = socket$unix(0x1, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
r1 = io_uring_setup(0x7cb0, &(0x7f0000000140)={0x0, 0xb71c, 0x10, 0x3, 0x38f})
close_range(r1, r1, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffef8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0)

18.031299715s ago: executing program 46 (id=1177):
r0 = socket$unix(0x1, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
r1 = io_uring_setup(0x7cb0, &(0x7f0000000140)={0x0, 0xb71c, 0x10, 0x3, 0x38f})
close_range(r1, r1, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffef8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0)

15.370021s ago: executing program 3 (id=1232):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mknod$loop(0x0, 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000004})

14.965212899s ago: executing program 3 (id=1240):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@multicast1}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

14.904863892s ago: executing program 3 (id=1241):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x0, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14.808979157s ago: executing program 3 (id=1243):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@noauto_da_alloc}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==")
r0 = userfaultfd(0x801)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14.541066809s ago: executing program 3 (id=1248):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

14.374759337s ago: executing program 3 (id=1251):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
fcntl$getflags(r2, 0x401)

14.362270997s ago: executing program 47 (id=1251):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
fcntl$getflags(r2, 0x401)

2.98672656s ago: executing program 7 (id=1561):
r0 = socket(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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")
recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x3b, 0x0)

2.211169197s ago: executing program 0 (id=1570):
socket$netlink(0x10, 0x3, 0x7)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000012c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x30, 0x3, "fa2d94"}, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x20, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.183713768s ago: executing program 7 (id=1572):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002e40)={r1, 0x20, &(0x7f0000000dc0)={0x0, 0x0, 0x0, &(0x7f0000000d40)=""/82, 0x52}}, 0x10)

2.174595229s ago: executing program 8 (id=1573):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
splice(r0, 0x0, r2, 0x0, 0x402000784853bb, 0x0)
fcntl$setpipe(r1, 0x407, 0x2010001)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18)

2.156998289s ago: executing program 7 (id=1575):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setlease(r0, 0x400, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)
fcntl$setlease(r0, 0x400, 0x0)

1.306753529s ago: executing program 8 (id=1579):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810)

1.306527489s ago: executing program 7 (id=1580):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200005d00000109022400010000600009040180020300000009210604000122050009058103"], 0x0)
syz_open_procfs(0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, &(0x7f00000000c0), 0x0}, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x3}})
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

1.227112803s ago: executing program 4 (id=1581):
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
unshare(0x62020600)
syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = epoll_create1(0x0)
close_range(r0, 0xffffffffffffffff, 0x2)

1.145245757s ago: executing program 4 (id=1583):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x45, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0)

1.115178988s ago: executing program 8 (id=1584):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)

1.053370951s ago: executing program 8 (id=1585):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="290000001600190f00f43fff0800da060200000000e80003dd08000401000000000000000005000000", 0x29}], 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000007d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x400040, 0x28)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

777.249234ms ago: executing program 9 (id=1587):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0)

758.130845ms ago: executing program 9 (id=1588):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

735.506476ms ago: executing program 7 (id=1589):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x5}, 0x10}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

678.319579ms ago: executing program 7 (id=1590):
r0 = io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0x0, 0x14})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r1, 0x400, 0x1)
open(&(0x7f0000000200)='./file1\x00', 0x100000, 0x0)
io_uring_enter(r0, 0x0, 0xcb, 0xf, &(0x7f0000000000)={[0x20]}, 0x18)

677.837009ms ago: executing program 9 (id=1591):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xdc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})

523.706076ms ago: executing program 9 (id=1592):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000300)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@inlinecrypt}, {@inlinecrypt}, {@delalloc}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000008000000000000002449920403"])

407.984891ms ago: executing program 9 (id=1593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0x9, 0x0, 0x9000, 0x99}]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x3, 0x0, 0x0, 0xfffffff8, 0xfe, 0xff, 0xff, 0x0, '\x00', 0x4})

342.733174ms ago: executing program 0 (id=1594):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000040)=0xfffffffc, 0x4)

295.665067ms ago: executing program 4 (id=1595):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x80000001, 0x0)

291.447317ms ago: executing program 9 (id=1596):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb)
io_setup(0x1, &(0x7f0000000b80)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x4}])
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
splice(r0, 0x0, r3, 0x0, 0x8000, 0x0)

263.844188ms ago: executing program 4 (id=1597):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x80487436, 0x0)

216.34513ms ago: executing program 4 (id=1598):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x4a, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x1201082, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0xbc, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0xf09, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

199.310371ms ago: executing program 8 (id=1599):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
close_range(r0, 0xffffffffffffffff, 0x0)

198.890371ms ago: executing program 4 (id=1600):
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
r0 = socket(0xf, 0x3, 0x2)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)='9', 0x1}, {0x0}], 0x2)
getsockname$packet(r0, 0x0, 0x0)

143.702884ms ago: executing program 0 (id=1601):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000900000000000000aaff020000000000000000000000000001", @ANYRES16=r1], 0xffe)

140.030754ms ago: executing program 8 (id=1602):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='H']}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x8840)

49.341048ms ago: executing program 0 (id=1603):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @empty, 0x4}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

24.45149ms ago: executing program 0 (id=1604):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x404, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb99, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x61f, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0x9, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x5, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0xc, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xffffffff, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0xb, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x3, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x0, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413fd, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x9, 0x6, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x207, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00', {0x706, 0x0, 0xdad2, 0x8}, 0x30, [0x9, 0x0, 0x80, 0x8, 0x1ff, 0xc, 0x70000, 0xffffff00, 0x4, 0x3, 0x2, 0x5, 0x0, 0x3, 0x0, 0x8, 0x6, 0x2, 0x6, 0x101, 0x6, 0x9, 0x7, 0x3, 0x5, 0x10, 0x7fffffff, 0x5, 0x1, 0x3, 0xfffffff8, 0x200, 0x6, 0xfffffff8, 0x0, 0x10000, 0x5, 0x7, 0x8, 0x8, 0x9, 0x36, 0x0, 0x6, 0x2, 0x9727, 0x4, 0x9, 0x8, 0x273, 0x1, 0x8, 0x1ff, 0x0, 0x900, 0x800, 0x8, 0x24ec, 0x4, 0x6, 0xb, 0x4, 0x33, 0x2], [0x401, 0x0, 0x8001, 0xf58, 0x8, 0xfffffffa, 0xa, 0x8000, 0xbd3a, 0x0, 0x5, 0x7, 0x2, 0x5, 0x921, 0x0, 0xf, 0x0, 0x7, 0x2, 0x99d, 0x2, 0xe24, 0x4, 0x4, 0x8000, 0x5, 0x80000001, 0x2, 0x3, 0x3, 0x5, 0x8001, 0x101, 0x2, 0xa, 0x2, 0x97, 0x1c8, 0x1, 0x5, 0x9, 0x18d, 0xf2, 0x800, 0x7, 0x5, 0x5, 0xffffcb6b, 0x80000000, 0x6, 0xffffff01, 0x1, 0x7f, 0x9, 0x7, 0x23d, 0x4, 0x1, 0xff, 0x80000001, 0x4, 0x7, 0x5], [0x8000, 0x80000001, 0x9, 0xff, 0x81, 0xe4, 0xd2, 0xd0fd, 0x6, 0x0, 0x2, 0x17, 0x4, 0x4, 0x20000, 0x80000001, 0x88, 0x97, 0x800, 0x8, 0x2, 0x6, 0x0, 0x6c60d0d6, 0x68, 0x147, 0x1, 0x5, 0x100, 0xff, 0x3ff, 0xbeb, 0xfa, 0x2, 0x0, 0x0, 0x2, 0x800, 0x7ff, 0x2, 0x8, 0x10000, 0xfff, 0x5, 0x1, 0x6, 0x8, 0xd5c, 0x3e, 0xf8000000, 0x3, 0x8001, 0xfffff800, 0x5, 0x9, 0xf44a, 0x4, 0x3, 0x6, 0x6, 0x2, 0x4, 0xa, 0x8bae], [0xd, 0x2, 0x10001, 0x8000, 0x3, 0x8, 0x10, 0x9, 0xfffffe00, 0x9adc, 0x7ff, 0x3, 0x1, 0x7f, 0xfffffffc, 0x0, 0x800, 0x1ff, 0x8, 0x0, 0x0, 0x3, 0x7, 0x9, 0x70, 0x8, 0x6e2348c5, 0x13, 0x1130, 0xffffffff, 0x2, 0x2, 0x0, 0x3, 0x6, 0x2, 0x8, 0x3, 0x0, 0x5, 0xff, 0x5, 0x3, 0x464, 0x3, 0x4, 0x5, 0x4, 0x8000, 0x2, 0xffff, 0x6, 0x7, 0x6, 0xb, 0x7, 0x3, 0x7, 0x4, 0x8, 0x4, 0x6b, 0x4, 0x9]}, 0x45c)
readv(r0, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)

0s ago: executing program 0 (id=1613):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)

kernel console output (not intermixed with test programs):

wfstat+0x30b/0x3d0
[   91.288040][ T2506]  ? down_read_killable+0xbc/0x110
[   91.288062][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   91.288085][ T2506]  ? security_file_permission+0x94/0xb0
[   91.288112][ T2506]  iterate_dir+0x26d/0x610
[   91.288133][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   91.288161][ T2506]  __se_sys_getdents64+0xf2/0x250
[   91.288183][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   91.288204][ T2506]  ? __cfi_filldir64+0x10/0x10
[   91.288226][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   91.288253][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   91.288277][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   91.288299][ T2506]  x64_sys_call+0x15c/0x9a0
[   91.288331][ T2506]  do_syscall_64+0x4c/0xa0
[   91.288356][ T2506]  ? clear_bhb_loop+0x30/0x80
[   91.288376][ T2506]  ? clear_bhb_loop+0x30/0x80
[   91.288396][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.288416][ T2506] RIP: 0033:0x7f4650fc6af3
[   91.288434][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   91.288451][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   91.288475][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   91.288490][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   91.288504][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   91.288517][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   91.288530][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   91.288549][ T2506]  </TASK>
[   91.307813][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   91.507809][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   91.516874][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   91.517925][ T3097] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.526947][ T2506] Call Trace:
[   91.526955][ T2506]  <TASK>
[   91.526964][ T2506]  __dump_stack+0x21/0x24
[   91.526995][ T2506]  dump_stack_lvl+0x110/0x170
[   91.534087][ T3097] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.537287][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   91.537323][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   91.541130][ T3097] device bridge_slave_0 entered promiscuous mode
[   91.544562][ T2506]  dump_stack+0x15/0x24
[   91.544589][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   91.550226][ T3097] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.556262][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   91.556293][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   91.561564][ T3097] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.567984][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   91.568013][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   91.568036][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   91.568062][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   91.568090][ T2506]  f2fs_rmdir+0x3f/0x70
[   91.568112][ T2506]  vfs_rmdir+0x381/0x4f0
[   91.568136][ T2506]  do_rmdir+0x261/0x6b0
[   91.568159][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   91.568184][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   91.568207][ T2506]  x64_sys_call+0x79f/0x9a0
[   91.568229][ T2506]  do_syscall_64+0x4c/0xa0
[   91.568253][ T2506]  ? clear_bhb_loop+0x30/0x80
[   91.577120][ T3097] device bridge_slave_1 entered promiscuous mode
[   91.578730][ T2506]  ? clear_bhb_loop+0x30/0x80
[   91.636881][ T3097] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.638479][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.642647][ T3097] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.647318][ T2506] RIP: 0033:0x7f4650f9d277
[   91.647337][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.647355][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   91.652275][ T3097] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.656695][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   91.656711][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   91.661115][ T3097] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.665775][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   91.665790][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   91.665804][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   91.690023][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.696890][ T2506]  </TASK>
[   91.729841][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   91.745718][  T383] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   91.753166][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   91.816636][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   91.826688][ T2506] Call Trace:
[   91.829966][ T2506]  <TASK>
[   91.832902][ T2506]  __dump_stack+0x21/0x24
[   91.837241][ T2506]  dump_stack_lvl+0x110/0x170
[   91.841928][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   91.846962][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   91.853813][ T2506]  dump_stack+0x15/0x24
[   91.857980][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   91.863543][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   91.868663][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   91.874149][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   91.880212][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   91.885335][ T2506]  f2fs_readdir+0x4a2/0x990
[   91.889854][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   91.894878][ T2506]  ? __se_sys_newfstat+0x30b/0x3d0
[   91.899985][ T2506]  ? down_read_killable+0xbc/0x110
[   91.905090][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   91.910634][ T2506]  ? security_file_permission+0x94/0xb0
[   91.916194][ T2506]  iterate_dir+0x26d/0x610
[   91.920606][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   91.925626][ T2506]  __se_sys_getdents64+0xf2/0x250
[   91.930641][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   91.935842][ T2506]  ? __cfi_filldir64+0x10/0x10
[   91.940594][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   91.945612][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   91.950986][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   91.956096][ T2506]  x64_sys_call+0x15c/0x9a0
[   91.960610][ T2506]  do_syscall_64+0x4c/0xa0
[   91.965020][ T2506]  ? clear_bhb_loop+0x30/0x80
[   91.969685][ T2506]  ? clear_bhb_loop+0x30/0x80
[   91.974352][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.980233][ T2506] RIP: 0033:0x7f4650fc6af3
[   91.984637][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   92.004250][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   92.006718][  T383] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   92.012663][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   92.012688][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   92.012702][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   92.012715][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   92.012728][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   92.022575][  T383] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   92.030422][ T2506]  </TASK>
[   92.031923][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   92.038809][  T383] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.047841][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   92.054765][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.062567][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   92.062580][ T2506] Call Trace:
[   92.062586][ T2506]  <TASK>
[   92.062593][ T2506]  __dump_stack+0x21/0x24
[   92.074274][  T383] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   92.075606][ T2506]  dump_stack_lvl+0x110/0x170
[   92.075639][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   92.081653][  T383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   92.094371][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   92.094403][ T2506]  dump_stack+0x15/0x24
[   92.094428][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   92.103605][  T383] usb 5-1: Product: syz
[   92.111916][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   92.111955][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   92.111979][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   92.122174][  T383] usb 5-1: Manufacturer: syz
[   92.125318][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   92.125347][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   92.128305][  T383] usb 5-1: SerialNumber: syz
[   92.132590][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   92.132622][ T2506]  f2fs_rmdir+0x3f/0x70
[   92.225243][ T2506]  vfs_rmdir+0x381/0x4f0
[   92.229499][ T2506]  do_rmdir+0x261/0x6b0
[   92.233675][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   92.238366][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   92.243247][ T2506]  x64_sys_call+0x79f/0x9a0
[   92.247784][ T2506]  do_syscall_64+0x4c/0xa0
[   92.252210][ T2506]  ? clear_bhb_loop+0x30/0x80
[   92.256889][ T2506]  ? clear_bhb_loop+0x30/0x80
[   92.261583][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   92.267484][ T2506] RIP: 0033:0x7f4650f9d277
[   92.271908][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.291607][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   92.300033][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   92.308106][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   92.316100][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   92.324097][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   92.332084][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   92.340052][ T2506]  </TASK>
[   92.347769][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   92.348031][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.353802][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   92.353825][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   92.374090][  T383] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   92.380165][ T2506] Call Trace:
[   92.380176][ T2506]  <TASK>
[   92.380183][ T2506]  __dump_stack+0x21/0x24
[   92.380214][ T2506]  dump_stack_lvl+0x110/0x170
[   92.406257][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   92.411393][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   92.418169][ T2506]  dump_stack+0x15/0x24
[   92.422329][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   92.427879][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   92.432991][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   92.438444][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   92.444463][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   92.449748][ T2506]  f2fs_readdir+0x4a2/0x990
[   92.454269][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   92.459294][ T2506]  ? __se_sys_newfstat+0x30b/0x3d0
[   92.464405][ T2506]  ? down_read_killable+0xbc/0x110
[   92.469530][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   92.475071][ T2506]  ? security_file_permission+0x94/0xb0
[   92.480611][ T2506]  iterate_dir+0x26d/0x610
[   92.485127][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   92.490150][ T2506]  __se_sys_getdents64+0xf2/0x250
[   92.495165][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   92.500449][ T2506]  ? __cfi_filldir64+0x10/0x10
[   92.505245][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   92.510278][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   92.515738][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   92.520758][ T2506]  x64_sys_call+0x15c/0x9a0
[   92.525434][ T2506]  do_syscall_64+0x4c/0xa0
[   92.529887][ T2506]  ? clear_bhb_loop+0x30/0x80
[   92.534584][ T2506]  ? clear_bhb_loop+0x30/0x80
[   92.539290][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   92.545276][ T2506] RIP: 0033:0x7f4650fc6af3
[   92.549698][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   92.569315][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   92.577772][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   92.585774][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   92.593796][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   92.601797][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   92.609798][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   92.614039][  T383] usb 5-1: USB disconnect, device number 6
[   92.617798][ T2506]  </TASK>
[   92.619654][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   92.630413][  T383] usblp0: removed
[   92.633261][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   92.645663][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   92.655721][ T2506] Call Trace:
[   92.659014][ T2506]  <TASK>
[   92.661938][ T2506]  __dump_stack+0x21/0x24
[   92.666361][ T2506]  dump_stack_lvl+0x110/0x170
[   92.671036][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   92.676054][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   92.682720][ T2506]  dump_stack+0x15/0x24
[   92.686891][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   92.692474][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   92.697584][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   92.703036][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   92.709009][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   92.714121][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   92.718823][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   92.724189][ T2506]  f2fs_rmdir+0x3f/0x70
[   92.728437][ T2506]  vfs_rmdir+0x381/0x4f0
[   92.732683][ T2506]  do_rmdir+0x261/0x6b0
[   92.736856][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   92.741531][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   92.746379][ T2506]  x64_sys_call+0x79f/0x9a0
[   92.750880][ T2506]  do_syscall_64+0x4c/0xa0
[   92.755291][ T2506]  ? clear_bhb_loop+0x30/0x80
[   92.760044][ T2506]  ? clear_bhb_loop+0x30/0x80
[   92.764718][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   92.770618][ T2506] RIP: 0033:0x7f4650f9d277
[   92.775047][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.794737][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   92.803146][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   92.811160][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   92.819219][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   92.827228][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   92.835557][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   92.845139][ T2506]  </TASK>
[   92.849067][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   92.855366][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   92.865290][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   92.875360][ T2506] Call Trace:
[   92.878660][ T2506]  <TASK>
[   92.881591][ T2506]  __dump_stack+0x21/0x24
[   92.886198][ T2506]  dump_stack_lvl+0x110/0x170
[   92.890904][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   92.895945][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   92.902717][ T2506]  dump_stack+0x15/0x24
[   92.906878][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   92.912441][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   92.917577][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   92.923061][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   92.929073][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   92.934565][ T2506]  f2fs_readdir+0x4a2/0x990
[   92.939099][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   92.944131][ T2506]  ? __se_sys_newfstat+0x30b/0x3d0
[   92.949251][ T2506]  ? down_read_killable+0xbc/0x110
[   92.954393][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   92.959941][ T2506]  ? security_file_permission+0x94/0xb0
[   92.965492][ T2506]  iterate_dir+0x26d/0x610
[   92.969928][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   92.974980][ T2506]  __se_sys_getdents64+0xf2/0x250
[   92.980018][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   92.985228][ T2506]  ? __cfi_filldir64+0x10/0x10
[   92.990018][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   92.995082][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   93.000494][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   93.005546][ T2506]  x64_sys_call+0x15c/0x9a0
[   93.010068][ T2506]  do_syscall_64+0x4c/0xa0
[   93.014675][ T2506]  ? clear_bhb_loop+0x30/0x80
[   93.019372][ T2506]  ? clear_bhb_loop+0x30/0x80
[   93.024554][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   93.030918][ T2506] RIP: 0033:0x7f4650fc6af3
[   93.035613][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   93.055399][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   93.063839][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   93.071811][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   93.079795][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   93.087857][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   93.096543][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   93.104631][ T2506]  </TASK>
[   93.114744][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   93.121586][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   93.130926][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   93.141007][ T2506] Call Trace:
[   93.144313][ T2506]  <TASK>
[   93.147344][ T2506]  __dump_stack+0x21/0x24
[   93.151700][ T2506]  dump_stack_lvl+0x110/0x170
[   93.156394][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   93.161442][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   93.168397][ T2506]  dump_stack+0x15/0x24
[   93.172560][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   93.178116][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   93.183399][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   93.188863][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   93.194847][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   93.199964][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   93.204644][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   93.209886][ T2506]  f2fs_rmdir+0x3f/0x70
[   93.214061][ T2506]  vfs_rmdir+0x381/0x4f0
[   93.218307][ T2506]  do_rmdir+0x261/0x6b0
[   93.222468][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   93.227145][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   93.232031][ T2506]  x64_sys_call+0x79f/0x9a0
[   93.236545][ T2506]  do_syscall_64+0x4c/0xa0
[   93.240966][ T2506]  ? clear_bhb_loop+0x30/0x80
[   93.245734][ T2506]  ? clear_bhb_loop+0x30/0x80
[   93.250418][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   93.256360][ T2506] RIP: 0033:0x7f4650f9d277
[   93.260806][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.281129][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   93.289569][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   93.297558][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   93.305901][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   93.313891][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   93.321974][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   93.329975][ T2506]  </TASK>
[   93.334873][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.345107][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   93.346243][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.352597][ T2506] CPU: 1 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   93.360049][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.368989][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   93.369010][ T2506] Call Trace:
[   93.369017][ T2506]  <TASK>
[   93.369027][ T2506]  __dump_stack+0x21/0x24
[   93.369058][ T2506]  dump_stack_lvl+0x110/0x170
[   93.376457][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.386476][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   93.390452][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.392764][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   93.397893][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.401769][ T2506]  dump_stack+0x15/0x24
[   93.401802][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   93.410120][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.414626][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   93.422731][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.429359][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   93.472532][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   93.478514][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   93.483637][ T2506]  f2fs_readdir+0x4a2/0x990
[   93.488173][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   93.493197][ T2506]  ? __se_sys_newfstat+0x30b/0x3d0
[   93.498299][ T2506]  ? down_read_killable+0xbc/0x110
[   93.503422][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   93.508965][ T2506]  ? security_file_permission+0x94/0xb0
[   93.514517][ T2506]  iterate_dir+0x26d/0x610
[   93.518938][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   93.523966][ T2506]  __se_sys_getdents64+0xf2/0x250
[   93.528982][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   93.534173][ T2506]  ? __cfi_filldir64+0x10/0x10
[   93.538925][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   93.543943][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   93.549309][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   93.554339][ T2506]  x64_sys_call+0x15c/0x9a0
[   93.558943][ T2506]  do_syscall_64+0x4c/0xa0
[   93.563378][ T2506]  ? clear_bhb_loop+0x30/0x80
[   93.568056][ T2506]  ? clear_bhb_loop+0x30/0x80
[   93.572735][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   93.578658][ T2506] RIP: 0033:0x7f4650fc6af3
[   93.583107][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   93.602816][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   93.611352][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   93.619330][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   93.627315][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   93.635310][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   93.643308][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   93.651289][ T2506]  </TASK>
[   93.657216][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   93.670727][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   93.679830][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   93.687496][ T3097] device veth0_vlan entered promiscuous mode
[   93.690076][ T2506] Call Trace:
[   93.690086][ T2506]  <TASK>
[   93.702283][ T2506]  __dump_stack+0x21/0x24
[   93.702574][ T3097] device veth1_macvtap entered promiscuous mode
[   93.706654][ T2506]  dump_stack_lvl+0x110/0x170
[   93.706689][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   93.706712][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   93.729978][ T2506]  dump_stack+0x15/0x24
[   93.734359][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   93.739490][ T3115] overlayfs: failed to clone upperpath
[   93.739947][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   93.750520][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   93.756020][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   93.762051][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   93.767216][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   93.771941][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   93.777190][ T2506]  f2fs_rmdir+0x3f/0x70
[   93.781384][ T2506]  vfs_rmdir+0x381/0x4f0
[   93.785656][ T2506]  do_rmdir+0x261/0x6b0
[   93.789850][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   93.794745][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   93.799643][ T2506]  x64_sys_call+0x79f/0x9a0
[   93.804257][ T2506]  do_syscall_64+0x4c/0xa0
[   93.808681][ T2506]  ? clear_bhb_loop+0x30/0x80
[   93.813384][ T2506]  ? clear_bhb_loop+0x30/0x80
[   93.818050][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   93.823933][ T2506] RIP: 0033:0x7f4650f9d277
[   93.828426][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.848135][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   93.856669][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   93.864771][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   93.872953][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   93.880957][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   93.889024][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   93.896996][ T2506]  </TASK>
[   93.902934][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   93.903642][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.909264][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   93.926234][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   93.930488][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.936304][ T2506] Call Trace:
[   93.936314][ T2506]  <TASK>
[   93.936321][ T2506]  __dump_stack+0x21/0x24
[   93.936352][ T2506]  dump_stack_lvl+0x110/0x170
[   93.959737][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   93.964776][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   93.971459][ T2506]  dump_stack+0x15/0x24
[   93.975629][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   93.981182][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   93.986296][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   93.991773][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   93.997760][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   94.002893][ T2506]  f2fs_readdir+0x4a2/0x990
[   94.007405][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   94.012444][ T2506]  ? __se_sys_newfstat+0x30b/0x3d0
[   94.017564][ T2506]  ? down_read_killable+0xbc/0x110
[   94.022672][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   94.028223][ T2506]  ? security_file_permission+0x94/0xb0
[   94.033784][ T2506]  iterate_dir+0x26d/0x610
[   94.038202][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   94.043232][ T2506]  __se_sys_getdents64+0xf2/0x250
[   94.048256][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   94.053455][ T2506]  ? __cfi_filldir64+0x10/0x10
[   94.058228][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   94.063273][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   94.068679][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   94.073712][ T2506]  x64_sys_call+0x15c/0x9a0
[   94.078241][ T2506]  do_syscall_64+0x4c/0xa0
[   94.082670][ T2506]  ? clear_bhb_loop+0x30/0x80
[   94.087370][ T2506]  ? clear_bhb_loop+0x30/0x80
[   94.092068][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   94.097967][ T2506] RIP: 0033:0x7f4650fc6af3
[   94.102385][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   94.122002][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   94.130440][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   94.138432][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   94.146411][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   94.154417][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   94.162411][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   94.170756][ T2506]  </TASK>
[   94.185696][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   94.189192][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.192305][ T2506] CPU: 1 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   94.200826][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.209068][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.209083][ T2506] Call Trace:
[   94.209090][ T2506]  <TASK>
[   94.209096][ T2506]  __dump_stack+0x21/0x24
[   94.217866][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.227069][ T2506]  dump_stack_lvl+0x110/0x170
[   94.227104][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   94.227129][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   94.227150][ T2506]  dump_stack+0x15/0x24
[   94.227173][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   94.243522][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.245873][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   94.245910][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   94.245934][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   94.253378][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   94.255622][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   94.255653][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   94.255678][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   94.265941][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.266494][ T2506]  f2fs_rmdir+0x3f/0x70
[   94.274334][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.280105][ T2506]  vfs_rmdir+0x381/0x4f0
[   94.280137][ T2506]  do_rmdir+0x261/0x6b0
[   94.280161][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   94.286015][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.291074][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   94.298143][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.304680][ T2506]  x64_sys_call+0x79f/0x9a0
[   94.310368][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.314458][ T2506]  do_syscall_64+0x4c/0xa0
[   94.320338][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.327276][ T2506]  ? clear_bhb_loop+0x30/0x80
[   94.327312][ T2506]  ? clear_bhb_loop+0x30/0x80
[   94.327333][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   94.327352][ T2506] RIP: 0033:0x7f4650f9d277
[   94.327371][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.333712][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.339418][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   94.339450][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   94.339464][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   94.339478][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   94.339491][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   94.339504][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   94.339523][ T2506]  </TASK>
[   94.344942][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.349868][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   94.388133][ T3110] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15
[   94.395940][ T2506] CPU: 1 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   94.531852][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.544672][ T2506] Call Trace:
[   94.547959][ T2506]  <TASK>
[   94.550885][ T2506]  __dump_stack+0x21/0x24
[   94.555214][ T2506]  dump_stack_lvl+0x110/0x170
[   94.559916][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   94.565030][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   94.571699][ T2506]  dump_stack+0x15/0x24
[   94.575847][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   94.581421][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   94.586772][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   94.592264][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   94.598417][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   94.603548][ T2506]  f2fs_readdir+0x4a2/0x990
[   94.608076][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   94.613109][ T2506]  ? __se_sys_newfstat+0x30b/0x3d0
[   94.618255][ T2506]  ? down_read_killable+0xbc/0x110
[   94.623372][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   94.628927][ T2506]  ? security_file_permission+0x94/0xb0
[   94.634579][ T2506]  iterate_dir+0x26d/0x610
[   94.639007][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   94.644043][ T2506]  __se_sys_getdents64+0xf2/0x250
[   94.649094][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   94.654328][ T2506]  ? __cfi_filldir64+0x10/0x10
[   94.659100][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   94.664128][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   94.669499][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   94.674529][ T2506]  x64_sys_call+0x15c/0x9a0
[   94.679111][ T2506]  do_syscall_64+0x4c/0xa0
[   94.683524][ T2506]  ? clear_bhb_loop+0x30/0x80
[   94.688300][ T2506]  ? clear_bhb_loop+0x30/0x80
[   94.693055][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   94.698949][ T2506] RIP: 0033:0x7f4650fc6af3
[   94.703356][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   94.722962][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   94.731363][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   94.739348][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   94.747354][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   94.755407][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   94.763379][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   94.771377][ T2506]  </TASK>
[   94.798766][ T3122] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1034'.
[   94.806495][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   94.811484][ T3123] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1034'.
[   94.818274][ T2506] CPU: 1 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   94.829995][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.831740][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.831755][ T2506] Call Trace:
[   94.831762][ T2506]  <TASK>
[   94.831769][ T2506]  __dump_stack+0x21/0x24
[   94.840239][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.849007][ T2506]  dump_stack_lvl+0x110/0x170
[   94.849040][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   94.849064][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   94.883369][ T2506]  dump_stack+0x15/0x24
[   94.887542][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   94.893369][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   94.898513][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   94.904077][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   94.910155][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   94.915276][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   94.919967][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   94.925181][ T2506]  f2fs_rmdir+0x3f/0x70
[   94.929342][ T2506]  vfs_rmdir+0x381/0x4f0
[   94.933590][ T2506]  do_rmdir+0x261/0x6b0
[   94.937748][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   94.942443][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   94.947301][ T2506]  x64_sys_call+0x79f/0x9a0
[   94.951809][ T2506]  do_syscall_64+0x4c/0xa0
[   94.956232][ T2506]  ? clear_bhb_loop+0x30/0x80
[   94.960915][ T2506]  ? clear_bhb_loop+0x30/0x80
[   94.965619][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   94.971510][ T2506] RIP: 0033:0x7f4650f9d277
[   94.975923][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.995530][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   95.004206][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   95.012175][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   95.020672][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   95.031534][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   95.039723][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   95.047715][ T2506]  </TASK>
[   95.051801][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   95.063835][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   95.072922][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   95.083004][ T2506] Call Trace:
[   95.086310][ T2506]  <TASK>
[   95.089264][ T2506]  __dump_stack+0x21/0x24
[   95.093634][ T2506]  dump_stack_lvl+0x110/0x170
[   95.098348][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   95.103419][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   95.110124][ T2506]  dump_stack+0x15/0x24
[   95.114305][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   95.119858][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   95.124986][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   95.130446][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   95.136422][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   95.141534][ T2506]  f2fs_readdir+0x4a2/0x990
[   95.146088][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   95.151118][ T2506]  ? __se_sys_newfstat+0x30b/0x3d0
[   95.156233][ T2506]  ? down_read_killable+0xbc/0x110
[   95.161367][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   95.166906][ T2506]  ? security_file_permission+0x94/0xb0
[   95.172450][ T2506]  iterate_dir+0x26d/0x610
[   95.176865][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   95.182160][ T2506]  __se_sys_getdents64+0xf2/0x250
[   95.187174][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   95.192366][ T2506]  ? __cfi_filldir64+0x10/0x10
[   95.197120][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   95.202160][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   95.207673][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   95.212819][ T2506]  x64_sys_call+0x15c/0x9a0
[   95.217323][ T2506]  do_syscall_64+0x4c/0xa0
[   95.221746][ T2506]  ? clear_bhb_loop+0x30/0x80
[   95.226411][ T2506]  ? clear_bhb_loop+0x30/0x80
[   95.231090][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   95.236986][ T2506] RIP: 0033:0x7f4650fc6af3
[   95.241411][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   95.261040][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   95.270078][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   95.278064][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   95.286041][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   95.294629][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   95.302609][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   95.310677][ T2506]  </TASK>
[   95.316324][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   95.322697][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   95.332018][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   95.342098][ T2506] Call Trace:
[   95.345389][ T2506]  <TASK>
[   95.348350][ T2506]  __dump_stack+0x21/0x24
[   95.352788][ T2506]  dump_stack_lvl+0x110/0x170
[   95.358016][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   95.363293][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   95.370004][ T2506]  dump_stack+0x15/0x24
[   95.374630][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   95.380204][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   95.385323][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   95.390790][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   95.396952][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   95.402084][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   95.406814][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   95.412025][ T2506]  f2fs_rmdir+0x3f/0x70
[   95.416188][ T2506]  vfs_rmdir+0x381/0x4f0
[   95.420436][ T2506]  do_rmdir+0x261/0x6b0
[   95.425123][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   95.429830][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   95.434703][ T2506]  x64_sys_call+0x79f/0x9a0
[   95.439217][ T2506]  do_syscall_64+0x4c/0xa0
[   95.443661][ T2506]  ? clear_bhb_loop+0x30/0x80
[   95.448342][ T2506]  ? clear_bhb_loop+0x30/0x80
[   95.453120][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   95.459037][ T2506] RIP: 0033:0x7f4650f9d277
[   95.463456][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.483272][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   95.491720][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   95.499696][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   95.507849][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   95.515854][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   95.523846][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   95.531965][ T2506]  </TASK>
[   95.560797][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   95.567081][ T2506] CPU: 1 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   95.576137][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   95.586290][ T2506] Call Trace:
[   95.589566][ T2506]  <TASK>
[   95.592501][ T2506]  __dump_stack+0x21/0x24
[   95.596872][ T2506]  dump_stack_lvl+0x110/0x170
[   95.602470][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   95.607533][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   95.614213][ T2506]  dump_stack+0x15/0x24
[   95.618477][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   95.624042][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   95.629181][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   95.634669][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   95.640771][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   95.645891][ T2506]  f2fs_readdir+0x4a2/0x990
[   95.650406][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   95.655436][ T2506]  ? __se_sys_newfstat+0x30b/0x3d0
[   95.660559][ T2506]  ? down_read_killable+0xbc/0x110
[   95.665680][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   95.671266][ T2506]  ? security_file_permission+0x94/0xb0
[   95.676841][ T2506]  iterate_dir+0x26d/0x610
[   95.681271][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   95.686313][ T2506]  __se_sys_getdents64+0xf2/0x250
[   95.691343][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   95.696554][ T2506]  ? __cfi_filldir64+0x10/0x10
[   95.701339][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   95.706408][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   95.711796][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   95.716869][ T2506]  x64_sys_call+0x15c/0x9a0
[   95.721378][ T2506]  do_syscall_64+0x4c/0xa0
[   95.725798][ T2506]  ? clear_bhb_loop+0x30/0x80
[   95.730473][ T2506]  ? clear_bhb_loop+0x30/0x80
[   95.735152][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   95.741050][ T2506] RIP: 0033:0x7f4650fc6af3
[   95.745476][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   95.765086][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   95.773502][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   95.781474][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   95.789536][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   95.797505][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   95.805484][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   95.813467][ T2506]  </TASK>
[   95.826730][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   95.845840][ T2506] CPU: 1 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   95.854928][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   95.865279][ T2506] Call Trace:
[   95.868582][ T2506]  <TASK>
[   95.871544][ T2506]  __dump_stack+0x21/0x24
[   95.875987][ T2506]  dump_stack_lvl+0x110/0x170
[   95.881051][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   95.885561][   T28] audit: type=1400 audit(1790162955.944:688): avc:  denied  { map } for  pid=3146 comm="syz.4.1044" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   95.886109][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   95.915699][ T2506]  dump_stack+0x15/0x24
[   95.919992][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   95.925663][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   95.930803][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   95.936275][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   95.942719][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   95.947868][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   95.952565][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   95.957780][ T2506]  f2fs_rmdir+0x3f/0x70
[   95.962041][ T2506]  vfs_rmdir+0x381/0x4f0
[   95.966316][ T2506]  do_rmdir+0x261/0x6b0
[   95.970506][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   95.975217][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   95.980103][ T2506]  x64_sys_call+0x79f/0x9a0
[   95.984640][ T2506]  do_syscall_64+0x4c/0xa0
[   95.989215][ T2506]  ? clear_bhb_loop+0x30/0x80
[   95.993918][ T2506]  ? clear_bhb_loop+0x30/0x80
[   95.998609][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.004506][ T2506] RIP: 0033:0x7f4650f9d277
[   96.008923][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.028793][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   96.037316][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   96.045290][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   96.053269][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   96.061241][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   96.069216][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   96.077202][ T2506]  </TASK>
[   96.092552][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   96.098880][ T2506] CPU: 0 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   96.108376][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   96.118716][ T2506] Call Trace:
[   96.122026][ T2506]  <TASK>
[   96.125056][ T2506]  __dump_stack+0x21/0x24
[   96.129418][ T2506]  dump_stack_lvl+0x110/0x170
[   96.134118][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   96.141375][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   96.148291][ T2506]  dump_stack+0x15/0x24
[   96.152747][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   96.158336][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   96.163492][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   96.169066][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   96.175070][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   96.180191][ T2506]  f2fs_readdir+0x4a2/0x990
[   96.184710][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   96.189751][ T2506]  ? __se_sys_newfstat+0x30b/0x3d0
[   96.194889][ T2506]  ? down_read_killable+0xbc/0x110
[   96.200008][ T2506]  ? __cfi_down_read_killable+0x10/0x10
[   96.205558][ T2506]  ? security_file_permission+0x94/0xb0
[   96.211114][ T2506]  iterate_dir+0x26d/0x610
[   96.215529][ T2506]  ? __cfi_f2fs_readdir+0x10/0x10
[   96.220655][ T2506]  __se_sys_getdents64+0xf2/0x250
[   96.225679][ T2506]  ? __x64_sys_getdents64+0x90/0x90
[   96.230876][ T2506]  ? __cfi_filldir64+0x10/0x10
[   96.235726][ T2506]  ? __x64_sys_umount+0x12d/0x170
[   96.240758][ T2506]  ? debug_smp_processor_id+0x17/0x20
[   96.246147][ T2506]  __x64_sys_getdents64+0x7b/0x90
[   96.251175][ T2506]  x64_sys_call+0x15c/0x9a0
[   96.255683][ T2506]  do_syscall_64+0x4c/0xa0
[   96.260104][ T2506]  ? clear_bhb_loop+0x30/0x80
[   96.264784][ T2506]  ? clear_bhb_loop+0x30/0x80
[   96.269548][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.275439][ T2506] RIP: 0033:0x7f4650fc6af3
[   96.279861][ T2506] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   96.299483][ T2506] RSP: 002b:00007ffc60a2c7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   96.308000][ T2506] RAX: ffffffffffffffda RBX: 000055558ebb2950 RCX: 00007f4650fc6af3
[   96.315976][ T2506] RDX: 0000000000008000 RSI: 000055558ebb2980 RDI: 0000000000000006
[   96.323996][ T2506] RBP: 000055558ebb2980 R08: 00007f46511f2e20 R09: 0000000000000001
[   96.333691][ T2506] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558ebb2954
[   96.341796][ T2506] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffc60a2fb90
[   96.349780][ T2506]  </TASK>
[   96.354687][ T2506] F2FS-fs (loop6): access invalid blkaddr:36
[   96.360957][ T2506] CPU: 1 PID: 2506 Comm: syz-executor Tainted: G        W          syzkaller #0
[   96.370547][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   96.380601][ T2506] Call Trace:
[   96.383907][ T2506]  <TASK>
[   96.386917][ T2506]  __dump_stack+0x21/0x24
[   96.391243][ T2506]  dump_stack_lvl+0x110/0x170
[   96.395941][ T2506]  ? __cfi_dump_stack_lvl+0x8/0x8
[   96.400960][ T2506]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   96.407663][ T2506]  dump_stack+0x15/0x24
[   96.411814][ T2506]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   96.417356][ T2506]  f2fs_is_valid_blkaddr+0x23/0x30
[   96.422462][ T2506]  f2fs_get_read_data_page+0x4ef/0x850
[   96.428433][ T2506]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   96.434423][ T2506]  f2fs_find_data_page+0x198/0x3a0
[   96.439590][ T2506]  f2fs_empty_dir+0x12b/0x2e0
[   96.444372][ T2506]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   96.449579][ T2506]  f2fs_rmdir+0x3f/0x70
[   96.453832][ T2506]  vfs_rmdir+0x381/0x4f0
[   96.458089][ T2506]  do_rmdir+0x261/0x6b0
[   96.462333][ T2506]  ? __cfi_do_rmdir+0x10/0x10
[   96.467031][ T2506]  __x64_sys_unlinkat+0xc7/0xf0
[   96.471876][ T2506]  x64_sys_call+0x79f/0x9a0
[   96.476375][ T2506]  do_syscall_64+0x4c/0xa0
[   96.481498][ T2506]  ? clear_bhb_loop+0x30/0x80
[   96.486306][ T2506]  ? clear_bhb_loop+0x30/0x80
[   96.491136][ T2506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.497181][ T2506] RIP: 0033:0x7f4650f9d277
[   96.501616][ T2506] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.521586][ T2506] RSP: 002b:00007ffc60a2c828 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   96.530042][ T2506] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f4650f9d277
[   96.538041][ T2506] RDX: 0000000000000200 RSI: 00007ffc60a2d9d0 RDI: 00000000ffffff9c
[   96.546049][ T2506] RBP: 00007f46510344bb R08: 0000000000008680 R09: 0000000000000001
[   96.554058][ T2506] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffc60a2d9d0
[   96.562698][ T2506] R13: 00007f46510344bb R14: 000055558eb8f4e8 R15: 00007ffc60a2fb90
[   96.570715][ T2506]  </TASK>
[   96.573975][  T384] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   96.585658][ T3162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'.
[   96.602554][ T3163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'.
[   96.761591][ T3185] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1058'.
[   96.776888][  T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.797962][  T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.850201][  T384] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.866756][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.873846][ T3172] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.881192][  T384] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.886174][ T3172] device bridge_slave_0 entered promiscuous mode
[   96.894924][  T384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.909762][  T384] usb 5-1: config 0 descriptor??
[   96.933823][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.947118][ T3172] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.954841][ T3172] device bridge_slave_1 entered promiscuous mode
[   97.056207][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.063330][ T3172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.070678][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.077742][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.088846][ T3212] device vlan0 entered promiscuous mode
[   97.095525][ T3211] device vlan0 left promiscuous mode
[   97.120515][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.129024][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.136906][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.145391][ T1559] device bridge_slave_1 left promiscuous mode
[   97.152163][ T1559] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.159896][ T1559] device bridge_slave_0 left promiscuous mode
[   97.166396][ T1559] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.175520][ T1559] device veth1_macvtap left promiscuous mode
[   97.181645][ T1559] device veth0_vlan left promiscuous mode
[   97.296393][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.306768][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.313850][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.321984][ T3227] TCP: TCP_TX_DELAY enabled
[   97.323314][  T384] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[   97.341916][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   97.352408][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.352495][  T384] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   97.359682][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.359921][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   97.389022][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   97.423982][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.442056][ T3172] device veth0_vlan entered promiscuous mode
[   97.449233][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.457635][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.465230][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.490248][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.501451][ T3172] device veth1_macvtap entered promiscuous mode
[   97.512948][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   97.546816][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   97.561207][   T28] audit: type=1400 audit(1790162957.644:689): avc:  denied  { ioctl } for  pid=3236 comm="syz.1.1078" path="/6/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   97.630381][ T3242] loop5: detected capacity change from 0 to 128
[   97.915053][ T3255] loop2: detected capacity change from 0 to 256
[   97.957747][ T3255] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   98.393882][ T3246] loop5: detected capacity change from 0 to 131072
[   98.406789][ T3246] F2FS-fs (loop5): invalid crc value
[   98.430799][ T3246] F2FS-fs (loop5): Found nat_bits in checkpoint
[   98.464491][ T3246] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   98.480485][ T3246] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   98.847877][ T3274] loop2: detected capacity change from 0 to 40427
[   98.864802][ T3274] F2FS-fs (loop2): invalid crc value
[   98.899820][ T3274] F2FS-fs (loop2): Found nat_bits in checkpoint
[   98.990618][ T3274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   99.095819][ T1478] syz-executor: attempt to access beyond end of device
[   99.095819][ T1478] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   99.110887][   T28] audit: type=1400 audit(1790162959.204:690): avc:  denied  { mounton } for  pid=3303 comm="syz.5.1103" path="/3/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   99.111063][ T3304] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   99.133879][ T1478] syz-executor: attempt to access beyond end of device
[   99.133879][ T1478] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   99.214635][ T3304] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   99.222318][ T3019] kworker/u4:9: attempt to access beyond end of device
[   99.222318][ T3019] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   99.228173][ T3312] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1108'.
[   99.243248][ T3304] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[   99.246440][   T28] audit: type=1400 audit(1790162959.324:691): avc:  denied  { read } for  pid=3303 comm="syz.5.1103" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   99.281905][   T28] audit: type=1400 audit(1790162959.324:692): avc:  denied  { open } for  pid=3303 comm="syz.5.1103" path="/3/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   99.310628][ T1478] tipc: Resetting bearer <eth:syz_tun>
[   99.311305][   T28] audit: type=1400 audit(1790162959.324:693): avc:  denied  { getattr } for  pid=3303 comm="syz.5.1103" name="saved_tgids" dev="tracefs" ino=13562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   99.342708][ T1478] tipc: Disabling bearer <eth:syz_tun>
[   99.386428][ T3312] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1108'.
[   99.408423][ T3019] tipc: Left network mode
[   99.575846][  T384] usb 5-1: USB disconnect, device number 7
[   99.806803][   T28] audit: type=1326 audit(1790162959.894:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3342 comm="syz.5.1121" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afb59e159 code=0x7ffc0000
[   99.835800][   T28] audit: type=1326 audit(1790162959.894:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3342 comm="syz.5.1121" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afb59e159 code=0x7ffc0000
[   99.864492][   T28] audit: type=1326 audit(1790162959.894:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3342 comm="syz.5.1121" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afb59e159 code=0x7ffc0000
[   99.892279][   T28] audit: type=1326 audit(1790162959.894:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3342 comm="syz.5.1121" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3afb59e159 code=0x7ffc0000
[   99.907666][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.929628][ T3340] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.937433][ T3340] device bridge_slave_0 entered promiscuous mode
[   99.950062][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.958677][ T3340] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.969887][ T3340] device bridge_slave_1 entered promiscuous mode
[   99.977354][ T3019] device bridge_slave_1 left promiscuous mode
[   99.983558][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.002429][ T3348] kvm [3347]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111
[  100.005754][ T3019] device bridge_slave_0 left promiscuous mode
[  100.025585][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.049083][ T3019] device veth1_macvtap left promiscuous mode
[  100.060428][ T3019] device veth0_vlan left promiscuous mode
[  100.233004][ T3372] loop1: detected capacity change from 0 to 512
[  100.251966][ T3374] overlayfs: failed to clone upperpath
[  100.355426][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.364132][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.372710][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  100.391372][ T3372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  100.406957][ T3372] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.417798][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.426310][ T1559] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.433381][ T1559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.460526][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  100.468588][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  100.477323][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  100.487737][ T3372] loop1: detected capacity change from 512 to 0
[  100.495135][ T1559] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.502268][ T1559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.510888][    C1] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  100.523593][ T3381] EXT4-fs error (device loop1): __ext4_find_entry:1685: inode #2: comm syz.1.1131: reading directory lblock 0
[  100.535267][ T3383] 9pnet: p9_errstr2errno: server reported unknown error ���00000000000000000003
[  100.535793][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  100.545874][ T3017] loop: Write error at byte offset 9223372036854775807, length 2048.
[  100.566106][    C0] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  100.575654][    C0] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  100.585145][    C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[  100.592619][ T3340] device veth0_vlan entered promiscuous mode
[  100.599591][ T3381] EXT4-fs (loop1): I/O error while writing superblock
[  100.609776][ T3340] device veth1_macvtap entered promiscuous mode
[  100.623646][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  100.636898][ T3389] loop5: detected capacity change from 0 to 256
[  100.638497][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  100.658438][ T3389] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.664513][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  100.669592][    C0] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  100.685856][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  100.704571][    C0] I/O error, dev loop1, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  100.708839][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  100.714316][    C0] I/O error, dev loop1, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  100.731913][    C0] I/O error, dev loop1, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  100.741785][ T3017] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4645: inode #18: block 35: comm kworker/u4:7: unable to read itable block
[  100.742190][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  100.766612][ T3018] loop: Write error at byte offset 9223372036854775807, length 2048.
[  100.779142][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  100.790579][    C1] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  100.800144][    C1] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  100.809639][    C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[  100.818029][ T3017] EXT4-fs (loop1): I/O error while writing superblock
[  100.845885][ T3390] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008)
[  100.846469][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  100.862467][ T3097] EXT4-fs (loop1): unmounting filesystem.
[  100.863898][ T3390] FAT-fs (loop5): Filesystem has been set read-only
[  100.877318][ T1559] loop: Write error at byte offset 9223372036854775807, length 2048.
[  100.888531][ T3390] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008)
[  100.897958][    C1] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  100.902976][ T3394] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string
[  100.907477][    C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[  100.907671][ T3097] EXT4-fs (loop1): I/O error while writing superblock
[  100.937181][ T3394] acpi device:00: uevent: failed to send synthetic uevent: -22
[  100.944974][ T1559] loop: Write error at byte offset 9223372036854800383, length 2048.
[  100.964545][    C1] Buffer I/O error on dev loop1, logical block 12, lost sync page write
[  100.983647][ T3400] overlayfs: failed to clone upperpath
[  101.003088][ T3388] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008)
[  101.013030][ T3388] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008)
[  101.295005][ T3431] kvm [3430]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111
[  101.334236][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.341582][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.354694][ T3426] device bridge_slave_0 entered promiscuous mode
[  101.362697][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.369962][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.386049][ T3426] device bridge_slave_1 entered promiscuous mode
[  101.398613][ T3454] loop5: detected capacity change from 0 to 512
[  101.420800][ T3454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  101.429113][ T3454] System zones: 1-12
[  101.435825][ T3454] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1162: missing EA_INODE flag
[  101.449274][ T3454] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1162: error while reading EA inode 12 err=-117
[  101.467855][ T3454] EXT4-fs (loop5): 1 orphan inode deleted
[  101.473762][ T3454] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  101.499451][ T3461] netlink: 'syz.4.1165': attribute type 34 has an invalid length.
[  101.521096][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.528216][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.535548][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.542605][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.576349][ T3019] device bridge_slave_1 left promiscuous mode
[  101.582613][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.592975][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  101.592992][   T28] audit: type=1400 audit(1790162961.684:715): avc:  denied  { ioctl } for  pid=3470 comm="syz.9.1170" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  101.627011][ T3464] EXT4-fs (loop5): unmounting filesystem.
[  101.643178][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.665409][ T3019] device veth1_macvtap left promiscuous mode
[  101.671562][   T28] audit: type=1400 audit(1790162961.724:716): avc:  denied  { shutdown } for  pid=3478 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  101.692343][ T3019] device veth0_vlan left promiscuous mode
[  101.841988][ T3495] loop9: detected capacity change from 0 to 256
[  101.856404][ T3495] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  101.883899][   T28] audit: type=1400 audit(1790162961.964:717): avc:  denied  { write } for  pid=3498 comm="syz.9.1184" name="usb_gadget" dev="configfs" ino=14583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  101.908133][   T28] audit: type=1400 audit(1790162961.964:718): avc:  denied  { add_name } for  pid=3498 comm="syz.9.1184" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  101.912897][ T3500] Config c/1 of g1 needs at least one function.
[  101.932868][   T28] audit: type=1400 audit(1790162961.964:719): avc:  denied  { create } for  pid=3498 comm="syz.9.1184" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  101.935013][ T3500] udc dummy_udc.0: failed to start g1: -22
[  101.954905][   T28] audit: type=1400 audit(1790162961.964:720): avc:  denied  { read write } for  pid=3498 comm="syz.9.1184" name="UDC" dev="configfs" ino=55296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  101.984144][   T28] audit: type=1400 audit(1790162961.994:721): avc:  denied  { open } for  pid=3498 comm="syz.9.1184" path="/9/config/usb_gadget/g1/UDC" dev="configfs" ino=55296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  102.000906][ T3500] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  102.017201][ T3500] UDC core: g1: couldn't find an available UDC or it's busy
[  102.018016][ T3491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1180'.
[  102.053330][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.061579][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.070943][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.081040][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.111720][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.133627][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.150940][ T3426] device veth0_vlan entered promiscuous mode
[  102.159540][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  102.175841][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  102.183512][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  102.184614][   T28] audit: type=1400 audit(1790162962.264:722): avc:  denied  { append } for  pid=3511 comm="syz.9.1189" name="trigger" dev="tracefs" ino=1671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  102.213694][ T3426] device veth1_macvtap entered promiscuous mode
[  102.221346][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  102.229650][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  102.240362][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  102.271025][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  102.279571][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  102.299290][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.306460][ T3490] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.314073][ T3490] device bridge_slave_0 entered promiscuous mode
[  102.321675][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.329088][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.336598][ T3490] device bridge_slave_1 entered promiscuous mode
[  102.343136][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  102.351487][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  102.391413][   T28] audit: type=1400 audit(1790162962.474:723): avc:  denied  { write } for  pid=3522 comm="syz.9.1193" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  102.392981][ T3526] mtrr: base(0x69662f2e000) is not aligned on a size(0x30656c000) boundary
[  102.478935][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.486059][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.493330][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.500394][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.508651][ T3532] tipc: Started in network mode
[  102.513628][ T3532] tipc: Node identity 1001001, cluster identity 4711
[  102.520534][ T3532] tipc: Node number set to 16781313
[  102.529976][ T3532] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  102.555570][ T3534] loop0: detected capacity change from 0 to 256
[  102.561948][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.565352][ T3534] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.571243][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.581032][ T3534] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  102.594903][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.598605][ T3534] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  102.639341][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.653887][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.662346][   T28] audit: type=1400 audit(1790162962.754:724): avc:  denied  { mounton } for  pid=3533 comm="syz.0.1197" path="/2/bus/bus" dev="loop0" ino=1048706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  102.663570][ T3534] incfs: ino conflict with backing FS 1
[  102.703497][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.723386][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  102.732092][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  102.739884][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  102.748978][ T3490] device veth0_vlan entered promiscuous mode
[  102.755693][ T2007] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  102.779486][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  102.789745][ T3490] device veth1_macvtap entered promiscuous mode
[  102.803642][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  102.825253][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  102.878597][ T3552] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  102.951356][ T3559] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1208'.
[  102.960597][ T2007] usb 10-1: Using ep0 maxpacket: 32
[  102.967048][ T2007] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.978210][ T2007] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.993009][ T3559] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1208'.
[  103.002478][ T2007] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  103.021261][ T2007] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.038812][ T2007] usb 10-1: config 0 descriptor??
[  103.127358][ T3019] device bridge_slave_1 left promiscuous mode
[  103.133581][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.154252][ T3019] device bridge_slave_0 left promiscuous mode
[  103.161022][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.172584][ T3019] device veth1_macvtap left promiscuous mode
[  103.196132][ T3019] device veth0_vlan left promiscuous mode
[  103.375712][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready
[  103.453720][ T2007] savu 0003:1E7D:2D5A.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0
[  104.061992][ T3584] loop3: detected capacity change from 0 to 131072
[  104.081980][ T3584] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[  104.106016][ T3584] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  104.124489][ T3584] F2FS-fs (loop3): invalid crc value
[  104.147579][ T3584] F2FS-fs (loop3): Found nat_bits in checkpoint
[  104.185255][ T3584] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  104.193162][ T3584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  104.242143][   T61] usb 10-1: USB disconnect, device number 3
[  104.299738][ T3611] loop9: detected capacity change from 0 to 512
[  104.339182][ T3611] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  104.348506][ T3611] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.365036][ T3611] xt_hashlimit: size too large, truncated to 1048576
[  104.609255][ T3340] EXT4-fs (loop9): unmounting filesystem.
[  104.679185][ T3632] netlink: 'syz.9.1238': attribute type 3 has an invalid length.
[  104.760683][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.767999][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.982566][ T3645] loop3: detected capacity change from 0 to 512
[  105.001122][ T3645] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.014335][ T3645] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  105.024955][ T3645] EXT4-fs (loop3): 1 truncate cleaned up
[  105.030762][ T3645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  105.241210][ T3490] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  105.256593][ T3490] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  105.278613][ T3490] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  105.349873][ T3654] EXT4-fs (loop3): unmounting filesystem.
[  105.587139][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.594517][ T3668] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.602524][ T3668] device bridge_slave_0 entered promiscuous mode
[  105.626470][ T3668] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.633623][ T3668] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.642543][ T3668] device bridge_slave_1 entered promiscuous mode
[  105.744621][ T3668] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.751730][ T3668] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.759059][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.767520][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.812415][ T3691] overlayfs: failed to resolve './file0': -2
[  105.818695][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  105.826636][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.835283][ T1559] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.845849][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.854308][ T1559] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.861414][ T1559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.880797][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.889040][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.906376][ T3017] device bridge_slave_1 left promiscuous mode
[  105.912543][ T3017] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.920320][ T3017] device bridge_slave_0 left promiscuous mode
[  105.927002][ T3017] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.935588][ T3017] device veth1_macvtap left promiscuous mode
[  105.941737][ T3017] device veth0_vlan left promiscuous mode
[  106.049705][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.058299][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.071150][ T3668] device veth0_vlan entered promiscuous mode
[  106.078005][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.086347][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.101486][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.110245][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.118195][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  106.126634][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.135286][ T3668] device veth1_macvtap entered promiscuous mode
[  106.146450][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.161230][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.169685][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.201204][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.222769][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.626441][ T3756] overlayfs: failed to clone upperpath
[  106.661227][ T3760] loop9: detected capacity change from 0 to 256
[  106.692359][ T3760] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  106.711042][ T3744] loop8: detected capacity change from 0 to 40427
[  106.728971][ T3744] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  106.737150][ T3744] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  106.749826][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  106.749843][   T28] audit: type=1400 audit(1790162966.834:731): avc:  denied  { unlink } for  pid=3340 comm="syz-executor" name="file0" dev="loop9" ino=1048720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.752718][ T3744] F2FS-fs (loop8): Found nat_bits in checkpoint
[  106.808748][ T3769] netlink: 'syz.9.1298': attribute type 4 has an invalid length.
[  106.819561][ T3769] netlink: 'syz.9.1298': attribute type 4 has an invalid length.
[  106.829101][ T3744] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  106.836456][ T3744] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  106.976393][ T3778] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  106.998912][   T61] kernel write not supported for file /18/attr/prev (pid: 61 comm: kworker/1:2)
[  107.125531][ T2007] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  107.153428][ T3789] loop8: detected capacity change from 0 to 1024
[  107.161772][ T3789] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.176380][ T3789] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.197520][ T3789] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  107.206425][ T3789] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.225155][ T3789] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: comm syz.8.1307: lblock 0 mapped to illegal pblock 0 (length 1)
[  107.241945][ T3789] EXT4-fs (loop8): Remounting filesystem read-only
[  107.267156][ T3668] EXT4-fs (loop8): unmounting filesystem.
[  107.315586][ T2007] usb 10-1: Using ep0 maxpacket: 32
[  107.322436][ T2007] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  107.335241][ T2007] usb 10-1: config 0 has no interface number 0
[  107.362144][ T2007] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  107.366842][ T3805] xt_hashlimit: size too large, truncated to 1048576
[  107.376784][ T2007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.395606][ T2007] usb 10-1: Product: syz
[  107.410088][ T2007] usb 10-1: Manufacturer: syz
[  107.419421][ T2007] usb 10-1: SerialNumber: syz
[  107.436593][ T2007] usb 10-1: config 0 descriptor??
[  107.448012][ T2007] smsc95xx v2.0.0
[  107.455919][ T3786] syz.4.1306 (3786) used greatest stack depth: 20576 bytes left
[  107.484117][ T3810] capability: warning: `syz.0.1315' uses deprecated v2 capabilities in a way that may be insecure
[  107.520794][ T3816] ip_tables: iptables: counters copy to user failed while replacing table
[  107.975536][   T61] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  108.165505][   T61] usb 9-1: Using ep0 maxpacket: 16
[  108.172400][   T61] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.182617][   T61] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  108.193041][   T61] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  108.202113][   T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.210381][   T61] usb 9-1: Product: syz
[  108.214556][   T61] usb 9-1: Manufacturer: syz
[  108.219199][   T61] usb 9-1: SerialNumber: syz
[  108.429724][   T61] usb 9-1: 0:2 : does not exist
[  108.446454][ T2007] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  108.453322][   T61] usb 9-1: USB disconnect, device number 2
[  108.459858][ T2007] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  108.479149][ T3848] FAULT_INJECTION: forcing a failure.
[  108.479149][ T3848] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  108.492783][ T2007] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  108.504008][ T3848] CPU: 0 PID: 3848 Comm: syz.4.1331 Tainted: G        W          syzkaller #0
[  108.512889][ T3848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.522969][ T3848] Call Trace:
[  108.526401][ T3848]  <TASK>
[  108.529353][ T3848]  __dump_stack+0x21/0x24
[  108.533716][ T3848]  dump_stack_lvl+0x110/0x170
[  108.538429][ T3848]  ? __cfi_dump_stack_lvl+0x8/0x8
[  108.543558][ T3848]  ? __this_cpu_preempt_check+0x13/0x20
[  108.549134][ T3848]  dump_stack+0x15/0x24
[  108.553309][ T3848]  should_fail_ex+0x3bf/0x510
[  108.557992][ T3848]  should_fail_alloc_page+0x61/0x90
[  108.563195][ T3848]  prepare_alloc_pages+0x131/0x570
[  108.568302][ T3848]  ? __alloc_pages_bulk+0x9d0/0x9d0
[  108.573523][ T3848]  ? __filemap_add_folio+0x933/0xc20
[  108.578803][ T3848]  __alloc_pages+0x15b/0x610
[  108.583393][ T3848]  ? __cfi___alloc_pages+0x10/0x10
[  108.588505][ T3848]  ? folio_add_lru+0x2d6/0x650
[  108.593271][ T3848]  ? security_file_alloc+0x33/0x130
[  108.598506][ T3848]  ? xas_start+0x31d/0x3e0
[  108.602918][ T3848]  ? xas_load+0x3a2/0x3c0
[  108.607239][ T3848]  __folio_alloc+0x12/0x40
[  108.611656][ T3848]  __filemap_get_folio+0x6fe/0xa70
[  108.616760][ T3848]  ? __cfi___filemap_get_folio+0x10/0x10
[  108.622384][ T3848]  ? __kasan_kmalloc_large+0xa4/0xb0
[  108.627664][ T3848]  ? __kmalloc_large_node+0x10e/0x1c0
[  108.633034][ T3848]  pagecache_get_page+0x2b/0x110
[  108.637964][ T3848]  aio_setup_ring+0x3a7/0xbc0
[  108.642657][ T3848]  ? free_ioctx_reqs+0x160/0x160
[  108.647611][ T3848]  ioctx_alloc+0x31d/0x720
[  108.652038][ T3848]  __se_sys_io_setup+0x6f/0x230
[  108.656936][ T3848]  __x64_sys_io_setup+0x5b/0x70
[  108.661805][ T3848]  x64_sys_call+0x840/0x9a0
[  108.666306][ T3848]  do_syscall_64+0x4c/0xa0
[  108.670729][ T3848]  ? clear_bhb_loop+0x30/0x80
[  108.675402][ T3848]  ? clear_bhb_loop+0x30/0x80
[  108.680100][ T3848]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  108.686007][ T3848] RIP: 0033:0x7f86b619e159
[  108.690425][ T3848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.710057][ T3848] RSP: 002b:00007f86b7146028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  108.718498][ T3848] RAX: ffffffffffffffda RBX: 00007f86b6425fa0 RCX: 00007f86b619e159
[  108.726488][ T3848] RDX: 0000000000000000 RSI: 00002000000028c0 RDI: 000000000000ffff
[  108.734461][ T3848] RBP: 00007f86b623506b R08: 0000000000000000 R09: 0000000000000000
[  108.742432][ T3848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.750405][ T3848] R13: 00007f86b6426038 R14: 00007f86b6425fa0 R15: 00007ffff5e7dd68
[  108.758386][ T3848]  </TASK>
[  108.762853][ T2007] smsc95xx: probe of 10-1:0.67 failed with error -71
[  108.770960][ T2007] usb 10-1: USB disconnect, device number 4
[  108.970146][ T3860] FAULT_INJECTION: forcing a failure.
[  108.970146][ T3860] name fail_futex, interval 1, probability 0, space 0, times 1
[  108.977682][ T3863] loop8: detected capacity change from 0 to 16
[  109.004275][ T3863] erofs: (device loop8): mounted with root inode @ nid 36.
[  109.005063][ T3860] CPU: 1 PID: 3860 Comm: syz.0.1336 Tainted: G        W          syzkaller #0
[  109.020383][ T3860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  109.030456][ T3860] Call Trace:
[  109.033759][ T3860]  <TASK>
[  109.036709][ T3860]  __dump_stack+0x21/0x24
[  109.041077][ T3860]  dump_stack_lvl+0x110/0x170
[  109.045788][ T3860]  ? __cfi_dump_stack_lvl+0x8/0x8
[  109.050847][ T3860]  dump_stack+0x15/0x24
[  109.055045][ T3860]  should_fail_ex+0x3bf/0x510
[  109.059760][ T3860]  should_fail+0xb/0x10
[  109.063942][ T3860]  get_futex_key+0x143/0xb10
[  109.068577][ T3860]  ? __cfi_get_futex_key+0x10/0x10
[  109.073728][ T3860]  futex_wake+0x150/0x8e0
[  109.078090][ T3860]  ? key_put+0x8a/0xc0
[  109.082208][ T3860]  ? keyctl_pkey_e_d_s+0x2af/0x310
[  109.087347][ T3860]  ? __cfi_futex_wake+0x10/0x10
[  109.092240][ T3860]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  109.097913][ T3860]  ? security_file_permission+0x8a/0xb0
[  109.103514][ T3860]  ? __se_sys_keyctl+0x44e/0xe10
[  109.108490][ T3860]  do_futex+0x2bf/0x430
[  109.112678][ T3860]  ? __cfi_do_futex+0x10/0x10
[  109.117384][ T3860]  ? __kasan_check_write+0x14/0x20
[  109.120627][   T28] audit: type=1400 audit(1790162969.114:732): avc:  denied  { link } for  pid=3862 comm="syz.8.1337" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  109.122517][ T3860]  ? mutex_unlock+0x8f/0x230
[  109.122547][ T3860]  __se_sys_futex+0x136/0x310
[  109.122571][ T3860]  ? __x64_sys_futex+0x100/0x100
[  109.122589][ T3860]  ? xfd_validate_state+0x70/0x150
[  109.122617][ T3860]  __x64_sys_futex+0xe5/0x100
[  109.122637][ T3860]  x64_sys_call+0x7ec/0x9a0
[  109.122659][ T3860]  do_syscall_64+0x4c/0xa0
[  109.122686][ T3860]  ? clear_bhb_loop+0x30/0x80
[  109.122716][ T3860]  ? clear_bhb_loop+0x30/0x80
[  109.122738][ T3860]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.122759][ T3860] RIP: 0033:0x7f621dd9e159
[  109.122778][ T3860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.122796][ T3860] RSP: 002b:00007f621ec320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  109.122830][ T3860] RAX: ffffffffffffffda RBX: 00007f621e025fa8 RCX: 00007f621dd9e159
[  109.157270][   T28] audit: type=1400 audit(1790162969.124:733): avc:  denied  { unlink } for  pid=3668 comm="syz-executor" name="bus" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  109.159149][ T3860] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f621e025fac
[  109.159170][ T3860] RBP: 00007f621e025fa0 R08: 0038282201ed9b8e R09: 0000000000000000
[  109.193706][ T3868] input: syz0 as /devices/virtual/input/input16
[  109.197686][ T3860] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  109.197714][ T3860] R13: 00007f621e026038 R14: 00007ffc72a93a50 R15: 00007ffc72a93b38
[  109.197734][ T3860]  </TASK>
[  109.363570][   T28] audit: type=1400 audit(1790162969.444:734): avc:  denied  { setattr } for  pid=3874 comm="syz.8.1343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  109.402273][ T3877] loop9: detected capacity change from 0 to 512
[  109.422848][ T3877] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  109.501379][ T3886] loop8: detected capacity change from 0 to 2048
[  109.551625][ T3894] loop9: detected capacity change from 0 to 128
[  109.560899][ T3886]  loop8: p1 < > p3
[  109.570458][ T3886] loop8: p3 size 134217728 extends beyond EOD, truncated
[  109.584809][   T28] audit: type=1400 audit(1790162969.664:735): avc:  denied  { read write } for  pid=3885 comm="syz.8.1348" name="loop8p3" dev="devtmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  109.612527][   T28] audit: type=1400 audit(1790162969.664:736): avc:  denied  { open } for  pid=3885 comm="syz.8.1348" path="/dev/loop8p3" dev="devtmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  109.616493][ T3894] incfs: ino conflict with backing FS 1
[  109.636005][   T28] audit: type=1400 audit(1790162969.704:737): avc:  denied  { mounton } for  pid=3893 comm="syz.9.1352" path="/35/file1/bus" dev="loop9" ino=1048728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  109.665514][  T313] blk_print_req_error: 2 callbacks suppressed
[  109.665532][  T313] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  109.697431][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.718660][  T313] udevd[313]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  109.718715][  T337] udevd[337]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  109.735355][ T3894] FAT-fs (loop9): Filesystem has been set read-only
[  109.747302][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.756018][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.764627][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.774319][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.783087][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.797060][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.805876][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.814447][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.823311][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.832201][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.840914][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.849539][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.858214][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.867163][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.878678][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.888046][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.897407][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.906029][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.914751][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.923465][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.932131][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.940704][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.949583][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.958385][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.964699][ T3923] loop8: detected capacity change from 0 to 1024
[  109.967351][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.977037][ T3923] EXT4-fs: Ignoring removed orlov option
[  109.983587][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  109.997348][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.006416][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.007355][ T3923] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  110.015026][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.040184][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.048788][   T28] audit: type=1400 audit(1790162970.124:738): avc:  denied  { setattr } for  pid=3922 comm="syz.8.1363" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  110.050608][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.080364][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.089385][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.097850][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.100905][   T28] audit: type=1400 audit(1790162970.184:739): avc:  denied  { rename } for  pid=3922 comm="syz.8.1363" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  110.107053][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.138237][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.146938][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.155556][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.164185][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.172682][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.181231][ T3894] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  110.190530][ T3668] EXT4-fs (loop8): unmounting filesystem.
[  110.249837][ T3931] loop9: detected capacity change from 0 to 128
[  110.258882][ T3931] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  110.267760][ T3931] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.283037][ T3931] fscrypt (loop9, inode 12): Mutually exclusive encryption flags (0x17)
[  110.296606][ T3340] EXT4-fs (loop9): unmounting filesystem.
[  110.319256][ T3934] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1366'.
[  110.423301][ T3952] loop8: detected capacity change from 0 to 256
[  110.433127][ T3952] FAT-fs (loop8): Unrecognized mount option "shortnam" or missing value
[  110.648282][ T3964] Bluetooth: ISO socket layer initialized
[  110.655532][   T28] audit: type=1400 audit(1790162970.734:740): avc:  denied  { write } for  pid=3963 comm="syz.0.1376" path="socket:[58221]" dev="sockfs" ino=58221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  110.657457][ T3967] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1377'.
[  110.772961][ T3976] loop0: detected capacity change from 0 to 512
[  110.795388][ T3958] loop9: detected capacity change from 0 to 40427
[  110.806893][ T3976] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  110.823299][ T3958] F2FS-fs (loop9): invalid crc value
[  110.835665][ T3958] F2FS-fs (loop9): Found nat_bits in checkpoint
[  110.842790][ T3976] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  110.885573][ T3976] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1381: invalid indirect mapped block 4278190080 (level 0)
[  110.908773][ T3958] F2FS-fs (loop9): Start checkpoint disabled!
[  110.915427][ T3958] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  110.925589][ T3976] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1381: invalid indirect mapped block 1 (level 1)
[  110.949385][ T3958] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  110.980783][ T3976] EXT4-fs (loop0): 1 truncate cleaned up
[  110.992009][ T3976] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  111.074270][ T3958] F2FS-fs (loop9): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  111.088170][ T3426] EXT4-fs (loop0): unmounting filesystem.
[  111.180889][ T3018] kworker/u4:8: attempt to access beyond end of device
[  111.180889][ T3018] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  111.195078][ T3018] kworker/u4:8: attempt to access beyond end of device
[  111.195078][ T3018] loop9: rw=2049, sector=40984, nr_sectors = 8 limit=40427
[  111.310428][ T4019] loop0: detected capacity change from 0 to 512
[  111.321008][ T4017] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1398'.
[  111.346874][ T4017] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1398'.
[  111.359164][ T4017] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1398'.
[  111.370209][ T4019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  111.379943][ T4019] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.396666][ T4017] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1398'.
[  111.416539][ T3426] EXT4-fs (loop0): unmounting filesystem.
[  111.423796][ T4017] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1398'.
[  111.433497][ T4017] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1398'.
[  111.527686][ T4031] loop0: detected capacity change from 0 to 4096
[  111.577944][ T4031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  111.638947][ T3426] EXT4-fs (loop0): unmounting filesystem.
[  111.778853][ T4050] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1406'.
[  111.780062][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  111.780077][   T28] audit: type=1400 audit(1790162971.864:744): avc:  denied  { nlmsg_read } for  pid=4042 comm="syz.7.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  111.885289][   T28] audit: type=1400 audit(1790162971.904:745): avc:  denied  { read write } for  pid=4049 comm="syz.8.1409" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  111.900071][ T3426] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[  111.945517][   T28] audit: type=1400 audit(1790162971.904:746): avc:  denied  { open } for  pid=4049 comm="syz.8.1409" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  111.945562][ T3426] FAT-fs (loop0): Filesystem has been set read-only
[  111.990201][   T28] audit: type=1400 audit(1790162971.904:747): avc:  denied  { ioctl } for  pid=4049 comm="syz.8.1409" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  112.021895][   T28] audit: type=1400 audit(1790162971.904:748): avc:  denied  { mounton } for  pid=4045 comm="syz.0.1407" path="/37/bus/bus" dev="loop0" ino=1048740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  112.087688][ T4055] netlink: 'syz.0.1410': attribute type 1 has an invalid length.
[  112.102415][ T4055] netlink: 'syz.0.1410': attribute type 2 has an invalid length.
[  112.125593][   T61] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  112.149739][ T4058] FAULT_INJECTION: forcing a failure.
[  112.149739][ T4058] name failslab, interval 1, probability 0, space 0, times 0
[  112.191756][ T4058] CPU: 0 PID: 4058 Comm: syz.0.1412 Tainted: G        W          syzkaller #0
[  112.200667][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.210756][ T4058] Call Trace:
[  112.214062][ T4058]  <TASK>
[  112.217028][ T4058]  __dump_stack+0x21/0x24
[  112.221403][ T4058]  dump_stack_lvl+0x110/0x170
[  112.226150][ T4058]  ? __cfi_dump_stack_lvl+0x8/0x8
[  112.231212][ T4058]  ? __cfi_avc_has_perm+0x10/0x10
[  112.236266][ T4058]  dump_stack+0x15/0x24
[  112.240466][ T4058]  should_fail_ex+0x3bf/0x510
[  112.245174][ T4058]  __should_failslab+0xac/0xf0
[  112.250059][ T4058]  should_failslab+0x9/0x20
[  112.254597][ T4058]  __kmem_cache_alloc_node+0x3d/0x2d0
[  112.259999][ T4058]  ? __request_module+0x2a7/0x910
[  112.265069][ T4058]  ? __request_module+0x2a7/0x910
[  112.270166][ T4058]  kmalloc_trace+0x29/0xb0
[  112.274622][ T4058]  ? inet_create+0x348/0xef0
[  112.279242][ T4058]  __request_module+0x2a7/0x910
[  112.284134][ T4058]  ? __cfi___request_module+0x10/0x10
[  112.289544][ T4058]  ? kasan_save_alloc_info+0x1f/0x30
[  112.294860][ T4058]  ? __kasan_slab_alloc+0x72/0x80
[  112.299928][ T4058]  ? security_inode_alloc+0x33/0x120
[  112.305265][ T4058]  ? __kasan_check_write+0x14/0x20
[  112.310407][ T4058]  ? _raw_spin_lock+0x94/0xf0
[  112.315123][ T4058]  ? __cfi__raw_spin_lock+0x10/0x10
[  112.320373][ T4058]  inet_create+0x348/0xef0
[  112.324823][ T4058]  __sock_create+0x39e/0x7c0
[  112.329458][ T4058]  __sys_socket+0xcd/0x1a0
[  112.333910][ T4058]  __x64_sys_socket+0x7a/0x90
[  112.338618][ T4058]  x64_sys_call+0x449/0x9a0
[  112.343166][ T4058]  do_syscall_64+0x4c/0xa0
[  112.347618][ T4058]  ? clear_bhb_loop+0x30/0x80
[  112.352317][ T4058]  ? clear_bhb_loop+0x30/0x80
[  112.357809][ T4058]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  112.363762][ T4058] RIP: 0033:0x7f621dd9e159
[  112.368203][ T4058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.387865][ T4058] RSP: 002b:00007f621ec32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  112.389150][   T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.396307][ T4058] RAX: ffffffffffffffda RBX: 00007f621e025fa0 RCX: 00007f621dd9e159
[  112.396330][ T4058] RDX: 0000000000000106 RSI: 0000000000000002 RDI: 0000000000000002
[  112.396343][ T4058] RBP: 00007f621de3506b R08: 0000000000000000 R09: 0000000000000000
[  112.396356][ T4058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.420272][   T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.423439][ T4058] R13: 00007f621e026038 R14: 00007f621e025fa0 R15: 00007ffc72a93b38
[  112.423464][ T4058]  </TASK>
[  112.444839][   T61] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  112.517584][   T61] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  112.534269][   T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.558613][   T61] usb 9-1: config 0 descriptor??
[  112.810732][ T4040] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  112.977986][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  112.992226][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.008306][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.024369][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.042645][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.050276][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.058929][ T4060] F2FS-fs (loop9): Invalid segment/section count (458783, 24 x 150994945)
[  113.076874][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.081980][ T4060] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  113.084334][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.105680][ T4060] F2FS-fs (loop9): invalid crc value
[  113.117474][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.122024][ T4060] F2FS-fs (loop9): Found nat_bits in checkpoint
[  113.124961][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.124986][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.158852][ T4060] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  113.166157][ T4060] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  113.167071][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.188552][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.205949][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.213494][   T61] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  113.224100][   T61] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  113.233919][   T61] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  113.265617][   T61] usb 9-1: USB disconnect, device number 3
[  113.302533][ T4081] fido_id[4081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  113.582437][ T4122] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  113.611788][ T4127] overlayfs: failed to clone upperpath
[  113.693710][ T4141] tipc: Resetting bearer <eth:syz_tun>
[  113.761634][ T4154] ip_tables: iptables: counters copy to user failed while replacing table
[  113.804761][   T61] kernel write not supported for file bpf-prog (pid: 61 comm: kworker/1:2)
[  113.828222][ T4160] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1458'.
[  113.899404][ T2007] smpboot: CPU 1 is now offline
[  113.909682][ T4164] x86: Booting SMP configuration:
[  113.930811][ T4164] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  114.017990][ T4176] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  114.555024][ T4220] 9pnet: p9_errstr2errno: server reported unknown error ��n$�[
[  114.555024][ T4220] Q&|x�6
[  114.602766][ T4222] set_capacity_and_notify: 2 callbacks suppressed
[  114.602787][ T4222] loop0: detected capacity change from 0 to 256
[  114.631371][ T4222] exfat: Deprecated parameter 'namecase'
[  114.652059][ T4222] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  114.944846][   T28] audit: type=1400 audit(1790162975.024:749): avc:  denied  { mounton } for  pid=4249 comm="syz.4.1498" path="/186/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  114.968188][ T4250] overlayfs: failed to clone lowerpath
[  115.053422][   T28] audit: type=1400 audit(1790162975.134:750): avc:  denied  { getopt } for  pid=4254 comm="syz.4.1500" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  115.232708][ T4248] loop9: detected capacity change from 0 to 40427
[  115.246689][ T4248] F2FS-fs (loop9): invalid crc value
[  115.253141][ T4274] FAULT_INJECTION: forcing a failure.
[  115.253141][ T4274] name failslab, interval 1, probability 0, space 0, times 0
[  115.275294][ T4274] CPU: 0 PID: 4274 Comm: syz.8.1508 Tainted: G        W          syzkaller #0
[  115.284200][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  115.294282][ T4274] Call Trace:
[  115.297586][ T4274]  <TASK>
[  115.300540][ T4274]  __dump_stack+0x21/0x24
[  115.304913][ T4274]  dump_stack_lvl+0x110/0x170
[  115.309637][ T4274]  ? __cfi_dump_stack_lvl+0x8/0x8
[  115.314696][ T4274]  ? kernel_text_address+0xa0/0xd0
[  115.319836][ T4274]  ? unwind_get_return_address+0x4d/0x90
[  115.325588][ T4274]  dump_stack+0x15/0x24
[  115.329797][ T4274]  should_fail_ex+0x3bf/0x510
[  115.334510][ T4274]  ? mas_alloc_nodes+0x2d8/0x850
[  115.339488][ T4274]  __should_failslab+0xac/0xf0
[  115.344300][ T4274]  should_failslab+0x9/0x20
[  115.345518][ T4284] __nla_validate_parse: 4 callbacks suppressed
[  115.345533][ T4284] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1511'.
[  115.348826][ T4274]  kmem_cache_alloc+0x3b/0x320
[  115.348860][ T4274]  mas_alloc_nodes+0x2d8/0x850
[  115.373646][ T4274]  mas_preallocate+0xe3d/0x1430
[  115.378540][ T4274]  ? __cfi_mas_preallocate+0x10/0x10
[  115.383873][ T4274]  ? rwsem_write_trylock+0x136/0x300
[  115.389183][ T4274]  __vma_adjust+0x622/0x1f10
[  115.394333][ T4274]  ? __cfi___vma_adjust+0x10/0x10
[  115.399404][ T4274]  ? rwsem_write_trylock+0x136/0x300
[  115.404720][ T4274]  __split_vma+0x725/0x980
[  115.409181][ T4274]  do_mas_align_munmap+0x787/0x1330
[  115.410322][ T4289] loop0: detected capacity change from 0 to 512
[  115.414417][ T4274]  ? do_mas_munmap+0x2b0/0x2b0
[  115.414456][ T4274]  ? mas_walk+0x207/0x250
[  115.430132][ T4274]  do_mas_munmap+0x23d/0x2b0
[  115.434852][ T4274]  __vm_munmap+0x1af/0x310
[  115.439307][ T4274]  ? vm_munmap+0x30/0x30
[  115.443593][ T4274]  ? xfd_validate_state+0x70/0x150
[  115.447756][ T4293] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  115.448747][ T4274]  ? fpregs_restore_userregs+0x128/0x260
[  115.458215][ T4293] tipc: Disabling bearer <udp:syz0>
[  115.462089][ T4274]  __x64_sys_munmap+0x6b/0x80
[  115.471959][ T4274]  x64_sys_call+0x8a/0x9a0
[  115.476405][ T4274]  do_syscall_64+0x4c/0xa0
[  115.480836][ T4274]  ? clear_bhb_loop+0x30/0x80
[  115.485519][ T4274]  ? clear_bhb_loop+0x30/0x80
[  115.490202][ T4274]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.496098][ T4274] RIP: 0033:0x7f4f7f99e159
[  115.500519][ T4274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.520125][ T4274] RSP: 002b:00007f4f80954028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b
[  115.528545][ T4274] RAX: ffffffffffffffda RBX: 00007f4f7fc25fa0 RCX: 00007f4f7f99e159
[  115.536516][ T4274] RDX: 0000000000000000 RSI: 0000000000c5059c RDI: 00007f4f7ddd7000
[  115.544485][ T4274] RBP: 00007f4f7fa3506b R08: 0000000000000000 R09: 0000000000000000
[  115.552456][ T4274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.560424][ T4274] R13: 00007f4f7fc26038 R14: 00007f4f7fc25fa0 R15: 00007ffd80ccad88
[  115.568401][ T4274]  </TASK>
[  115.573242][ T4248] F2FS-fs (loop9): Found nat_bits in checkpoint
[  115.621951][ T4302] 9pnet_fd: Insufficient options for proto=fd
[  115.629232][ T4289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  115.646884][ T4248] F2FS-fs (loop9): Start checkpoint disabled!
[  115.663528][ T4248] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  115.679749][ T4248] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  115.751503][ T4289] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.755860][   T28] audit: type=1400 audit(1790162975.844:751): avc:  denied  { append } for  pid=4247 comm="syz.9.1497" path="/45/file0/file0" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  115.811641][ T4289] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  115.815427][ T4248] F2FS-fs (loop9): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  115.857549][ T4289] EXT4-fs (loop0): Remounting filesystem read-only
[  115.884089][ T3426] EXT4-fs (loop0): unmounting filesystem.
[  115.891887][ T3018] kworker/u4:8: attempt to access beyond end of device
[  115.891887][ T3018] loop9: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  115.956706][ T4340] loop0: detected capacity change from 0 to 128
[  115.982745][ T4340] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  115.995590][  T383] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  116.002116][ T4340] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  116.063085][   T28] audit: type=1400 audit(1790162976.144:752): avc:  denied  { rename } for  pid=4338 comm="syz.0.1538" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  116.107356][ T3426] EXT4-fs (loop0): unmounting filesystem.
[  116.167241][ T4357] zero sized request
[  116.197858][ T4359] loop9: detected capacity change from 0 to 256
[  116.217304][  T383] usb 9-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  116.228963][  T383] usb 9-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  116.237331][  T383] usb 9-1: Product: syz
[  116.248564][  T383] usb 9-1: config 0 descriptor??
[  116.256489][  T383] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  116.265354][  T383] usb 9-1: Detected FT232H
[  116.338792][ T4372] loop9: detected capacity change from 0 to 512
[  116.457666][  T383] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  116.503039][ T4383] loop9: detected capacity change from 0 to 512
[  116.526507][ T4383] EXT4-fs (loop9): 1 truncate cleaned up
[  116.532417][ T4383] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  116.545849][   T28] audit: type=1400 audit(1790179617.637:753): avc:  denied  { setopt } for  pid=4382 comm="syz.9.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  116.576988][ T3340] EXT4-fs (loop9): unmounting filesystem.
[  116.866913][  T383] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  117.073505][ T2008] usb 9-1: USB disconnect, device number 4
[  117.090015][ T2008] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  117.101448][ T2008] ftdi_sio 9-1:0.0: device disconnected
[  117.519826][ T4417] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2393757465 (2393757465 ns) > initial count (338819041 ns). Using initial count to start timer.
[  117.845543][  T384] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  118.025537][  T384] usb 1-1: Using ep0 maxpacket: 16
[  118.031954][  T384] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.042198][  T384] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.051837][  T384] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  118.061061][  T384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  118.069112][  T384] usb 1-1: SerialNumber: syz
[  118.075867][  T384] usb 1-1: 0:2 : does not exist
[  118.406827][ T4438] loop9: detected capacity change from 0 to 40427
[  118.416892][ T4438] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  118.424804][ T4438] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  118.435429][ T4438] F2FS-fs (loop9): Found nat_bits in checkpoint
[  118.478332][ T4443] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1578'.
[  118.478406][ T4438] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  118.497070][ T4438] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  118.516392][ T4443] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1578'.
[  118.750795][   T28] audit: type=1400 audit(1790179619.837:754): avc:  denied  { create } for  pid=4457 comm="syz.8.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  118.752124][ T4462] loop9: detected capacity change from 0 to 128
[  118.790685][ T4462] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  118.823372][ T4462] FAT-fs (loop9): error, parent dir link count too low (2)
[  118.830760][ T4462] FAT-fs (loop9): Filesystem has been set read-only
[  118.844146][ T3340] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  118.884536][  T384] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  118.900431][  T384] usb 1-1: USB disconnect, device number 7
[  119.273220][ T4479] loop9: detected capacity change from 0 to 1024
[  119.280337][ T4479] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.287561][ T4479] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  119.317194][ T4479] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  119.325918][ T4479] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.343900][ T4479] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: comm syz.9.1592: lblock 0 mapped to illegal pblock 0 (length 1)
[  119.357871][ T4479] EXT4-fs (loop9): Remounting filesystem read-only
[  119.376632][ T3340] EXT4-fs (loop9): unmounting filesystem.
[  119.592184][   T28] audit: type=1404 audit(1790179620.677:755): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  119.611679][   T28] audit: type=1400 audit(1790179620.697:756): avc:  denied  { getattr } for  pid=4501 comm="syz.4.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0
[  119.638753][   T28] audit: type=1400 audit(1790179620.727:757): avc:  denied  { read write } for  pid=3426 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.663420][   T28] audit: type=1400 audit(1790179620.727:758): avc:  denied  { read write } for  pid=3668 comm="syz-executor" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.732079][   T28] audit: type=1400 audit(1790179620.817:759): avc:  denied  { read write } for  pid=3426 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.756526][   T28] audit: type=1400 audit(1790179620.817:760): avc:  denied  { read write } for  pid=3426 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.765515][    C1] ==================================================================
[  119.781234][   T28] audit: type=1400 audit(1790179620.817:761): avc:  denied  { read write } for  pid=4509 comm="syz.0.1604" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0
[  119.788665][    C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0
[  119.788698][    C1] Read of size 8 at addr ffff888123cd5590 by task syz.0.1613/4512
[  119.788713][    C1] 
[  119.788719][    C1] CPU: 1 PID: 4512 Comm: syz.0.1613 Tainted: G        W          syzkaller #0
[  119.788737][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  119.788747][    C1] Call Trace:
[  119.788753][    C1]  <IRQ>
[  119.788760][    C1]  __dump_stack+0x21/0x24
[  119.788786][    C1]  dump_stack_lvl+0x110/0x170
[  119.813013][   T28] audit: type=1400 audit(1790179620.847:762): avc:  denied  { read write } for  pid=3426 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.819649][    C1]  ? __cfi_dump_stack_lvl+0x8/0x8
[  119.819679][    C1]  ? debug_smp_processor_id+0x17/0x20
[  119.819700][    C1]  ? rcu_cblist_dequeue+0x6c/0xb0
[  119.903196][    C1]  print_address_description+0x71/0x200
[  119.908742][    C1]  print_report+0x4a/0x60
[  119.913064][    C1]  kasan_report+0x122/0x150
[  119.917567][    C1]  ? rcu_cblist_dequeue+0x6c/0xb0
[  119.922595][    C1]  __asan_report_load8_noabort+0x14/0x20
[  119.928217][    C1]  rcu_cblist_dequeue+0x6c/0xb0
[  119.933059][    C1]  rcu_do_batch+0x4bc/0xc30
[  119.937558][    C1]  ? rcu_core+0xf00/0xf00
[  119.941895][    C1]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[  119.947698][    C1]  ? note_gp_changes+0x140/0x220
[  119.952646][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  119.957495][    C1]  rcu_core+0x486/0xf00
[  119.961675][    C1]  ? rcu_cpu_kthread_park+0x90/0x90
[  119.966862][    C1]  ? kvm_sched_clock_read+0x18/0x40
[  119.972060][    C1]  ? run_rebalance_domains+0xf7/0x1c0
[  119.977435][    C1]  rcu_core_si+0x9/0x10
[  119.981587][    C1]  handle_softirqs+0x1d7/0x600
[  119.986340][    C1]  __irq_exit_rcu+0x52/0xf0
[  119.990833][    C1]  irq_exit_rcu+0x9/0x10
[  119.995067][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  120.000689][    C1]  </IRQ>
[  120.003615][    C1]  <TASK>
[  120.006590][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  120.012592][    C1] RIP: 0010:vm_normal_page+0x6/0x200
[  120.017881][    C1] Code: e8 ef a5 56 03 4c 89 f7 31 f6 e8 65 a7 07 00 eb d1 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 c1 52 38 b8 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 50 49 89 d6 48 89 f3 49 89 ff e8 04 9e c6 ff
[  120.037496][    C1] RSP: 0018:ffffc90008a473c8 EFLAGS: 00000202
[  120.043584][    C1] RAX: 0000000000000001 RBX: 1ffff110264e22c7 RCX: ffff888111d8bcc0
[  120.051575][    C1] RDX: 800000011842b007 RSI: 00007f621c8c7000 RDI: ffff8881158dc210
[  120.059553][    C1] RBP: ffffc90008a473d0 R08: ffff888111d8bcc7 R09: 1ffff110223b1798
[  120.067519][    C1] R10: dffffc0000000000 R11: ffffed10223b1799 R12: 00007f621ca00000
[  120.075491][    C1] R13: 800000011842b007 R14: dffffc0000000000 R15: 00007f621c8c7000
[  120.083486][    C1]  unmap_page_range+0xc4d/0x2360
[  120.088490][    C1]  ? __cfi_unmap_page_range+0x10/0x10
[  120.093868][    C1]  ? mas_find+0xdf/0x380
[  120.098105][    C1]  unmap_vmas+0x34c/0x480
[  120.102431][    C1]  ? __cfi_unmap_vmas+0x10/0x10
[  120.107368][    C1]  ? __cfi_lru_add_drain_cpu+0x10/0x10
[  120.112840][    C1]  ? __kasan_check_write+0x14/0x20
[  120.117946][    C1]  exit_mmap+0x2a4/0xc10
[  120.122195][    C1]  ? perf_event_exit_event+0x530/0x530
[  120.127644][    C1]  ? __cfi_exit_mmap+0x10/0x10
[  120.132398][    C1]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  120.137864][    C1]  ? __cfi_exit_aio+0x10/0x10
[  120.142535][    C1]  ? uprobe_clear_state+0x2c6/0x320
[  120.147730][    C1]  __mmput+0x92/0x340
[  120.151704][    C1]  mmput+0x4b/0x150
[  120.155502][    C1]  do_exit+0xa62/0x29f0
[  120.159649][    C1]  ? preempt_schedule+0xbc/0xd0
[  120.164502][    C1]  ? __cfi_do_exit+0x10/0x10
[  120.169083][    C1]  ? ttwu_do_wakeup+0x468/0x490
[  120.173935][    C1]  ? __kasan_check_write+0x14/0x20
[  120.179051][    C1]  ? _raw_spin_lock_irq+0x95/0xf0
[  120.184076][    C1]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  120.189617][    C1]  do_group_exit+0x21b/0x2e0
[  120.194202][    C1]  ? __kasan_check_write+0x14/0x20
[  120.199305][    C1]  ? recalc_sigpending+0x168/0x1c0
[  120.204407][    C1]  get_signal+0x167c/0x1700
[  120.208916][    C1]  ? __cfi_get_signal+0x10/0x10
[  120.213802][    C1]  arch_do_signal_or_restart+0xd1/0x11c0
[  120.219442][    C1]  ? do_futex+0x2bf/0x430
[  120.223764][    C1]  ? __cfi_do_futex+0x10/0x10
[  120.228436][    C1]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  120.234584][    C1]  ? __se_sys_futex+0x136/0x310
[  120.239428][    C1]  ? __kasan_check_write+0x14/0x20
[  120.244553][    C1]  exit_to_user_mode_loop+0x7a/0xb0
[  120.249743][    C1]  exit_to_user_mode_prepare+0x87/0xd0
[  120.255194][    C1]  syscall_exit_to_user_mode+0x1a/0x30
[  120.260646][    C1]  do_syscall_64+0x58/0xa0
[  120.265057][    C1]  ? clear_bhb_loop+0x30/0x80
[  120.269723][    C1]  ? clear_bhb_loop+0x30/0x80
[  120.274390][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  120.280272][    C1] RIP: 0033:0x7f621dd9e159
[  120.284681][    C1] Code: Unable to access opcode bytes at 0x7f621dd9e12f.
[  120.291772][    C1] RSP: 002b:00007f621ec320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  120.300197][    C1] RAX: 0000000000000001 RBX: 00007f621e025fa8 RCX: 00007f621dd9e159
[  120.308162][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f621e025fac
[  120.316128][    C1] RBP: 00007f621e025fa0 R08: 002bd0c0785bd776 R09: 0000000000000000
[  120.324089][    C1] R10: 0000000000000034 R11: 0000000000000246 R12: 0000000000000000
[  120.332048][    C1] R13: 00007f621e026038 R14: 00007ffc72a93a50 R15: 00007ffc72a93b38
[  120.340023][    C1]  </TASK>
[  120.343064][    C1] 
[  120.345378][    C1] Allocated by task 4494:
[  120.349691][    C1]  kasan_set_track+0x4b/0x70
[  120.354293][    C1]  kasan_save_alloc_info+0x1f/0x30
[  120.359391][    C1]  __kasan_kmalloc+0x95/0xb0
[  120.363975][    C1]  __kmalloc+0xb4/0x1e0
[  120.368121][    C1]  l2tp_session_create+0x38/0xbd0
[  120.373144][    C1]  pppol2tp_connect+0xbf5/0x1640
[  120.378078][    C1]  __sys_connect+0x3da/0x460
[  120.382659][    C1]  __x64_sys_connect+0x7a/0x90
[  120.387423][    C1]  x64_sys_call+0x88d/0x9a0
[  120.391923][    C1]  do_syscall_64+0x4c/0xa0
[  120.396347][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  120.402241][    C1] 
[  120.404566][    C1] Freed by task 10:
[  120.408363][    C1]  kasan_set_track+0x4b/0x70
[  120.412950][    C1]  kasan_save_free_info+0x2b/0x40
[  120.417985][    C1]  ____kasan_slab_free+0x132/0x180
[  120.423091][    C1]  __kasan_slab_free+0x11/0x20
[  120.427846][    C1]  slab_free_freelist_hook+0xc2/0x190
[  120.433234][    C1]  __kmem_cache_free+0xb7/0x1b0
[  120.438080][    C1]  kfree+0x6f/0xf0
[  120.441823][    C1]  l2tp_session_put+0xaf/0x1a0
[  120.446574][    C1]  l2tp_session_delete+0x3df/0x4d0
[  120.451697][    C1]  l2tp_tunnel_del_work+0x199/0x410
[  120.456911][    C1]  process_one_work+0x717/0xc30
[  120.461750][    C1]  worker_thread+0xa4d/0x11d0
[  120.466414][    C1]  kthread+0x281/0x320
[  120.470480][    C1]  ret_from_fork+0x1f/0x30
[  120.474884][    C1] 
[  120.477197][    C1] Last potentially related work creation:
[  120.482896][    C1]  kasan_save_stack+0x3a/0x60
[  120.487574][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  120.492948][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  120.498748][    C1]  call_rcu+0xcf/0xf50
[  120.502817][    C1]  pppol2tp_release+0x1e3/0x2b0
[  120.507654][    C1]  sock_close+0xc9/0x220
[  120.511882][    C1]  __fput+0x1fd/0x8f0
[  120.515853][    C1]  ____fput+0x15/0x20
[  120.519822][    C1]  task_work_run+0x1e1/0x250
[  120.524402][    C1]  do_exit+0xb0d/0x29f0
[  120.528547][    C1]  __cfi___ia32_sys_exit+0x0/0x10
[  120.533559][    C1]  x64_sys_call+0x67/0x9a0
[  120.537983][    C1]  do_syscall_64+0x4c/0xa0
[  120.542387][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  120.548265][    C1] 
[  120.550598][    C1] Second to last potentially related work creation:
[  120.557163][    C1]  kasan_save_stack+0x3a/0x60
[  120.561828][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  120.567190][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  120.572990][    C1]  call_rcu+0xcf/0xf50
[  120.577065][    C1]  fib6_del+0xbda/0xef0
[  120.581232][    C1]  fib6_clean_node+0x2af/0x550
[  120.585981][    C1]  fib6_walk_continue+0x55d/0x760
[  120.590996][    C1]  fib6_walk+0x153/0x290
[  120.595228][    C1]  fib6_clean_all+0x1a1/0x270
[  120.599888][    C1]  rt6_disable_ip+0x123/0x8e0
[  120.604569][    C1]  addrconf_ifdown+0x15d/0x1950
[  120.609427][    C1]  addrconf_notify+0x39f/0xe30
[  120.614182][    C1]  raw_notifier_call_chain+0xa1/0x110
[  120.619561][    C1]  __dev_notify_flags+0x276/0x5b0
[  120.624574][    C1]  dev_change_flags+0xe3/0x1a0
[  120.629344][    C1]  do_setlink+0xc02/0x2a10
[  120.633747][    C1]  rtnl_newlink+0x10b3/0x20d0
[  120.638420][    C1]  rtnetlink_rcv_msg+0xb28/0xde0
[  120.643373][    C1]  netlink_rcv_skb+0x200/0x450
[  120.648122][    C1]  rtnetlink_rcv+0x1c/0x20
[  120.652537][    C1]  netlink_unicast+0x8c1/0xa60
[  120.657287][    C1]  netlink_sendmsg+0x8b9/0xbd0
[  120.662042][    C1]  ____sys_sendmsg+0x5fb/0x9c0
[  120.666813][    C1]  ___sys_sendmsg+0x2a2/0x360
[  120.671479][    C1]  __x64_sys_sendmsg+0x20d/0x2e0
[  120.676405][    C1]  x64_sys_call+0x171/0x9a0
[  120.680892][    C1]  do_syscall_64+0x4c/0xa0
[  120.685298][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  120.691199][    C1] 
[  120.693524][    C1] The buggy address belongs to the object at ffff888123cd5400
[  120.693524][    C1]  which belongs to the cache kmalloc-512 of size 512
[  120.707562][    C1] The buggy address is located 400 bytes inside of
[  120.707562][    C1]  512-byte region [ffff888123cd5400, ffff888123cd5600)
[  120.720824][    C1] 
[  120.723154][    C1] The buggy address belongs to the physical page:
[  120.729550][    C1] page:ffffea00048f3500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x123cd4
[  120.739771][    C1] head:ffffea00048f3500 order:2 compound_mapcount:0 compound_pincount:0
[  120.748081][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[  120.754149][    C1] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00
[  120.762721][    C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  120.771300][    C1] page dumped because: kasan: bad access detected
[  120.777694][    C1] page_owner tracks the page as allocated
[  120.783437][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 93, tgid 93 (klogd), ts 57376945879, free_ts 56438511857
[  120.805213][    C1]  post_alloc_hook+0x1f5/0x210
[  120.810066][    C1]  prep_new_page+0x1c/0x110
[  120.814587][    C1]  get_page_from_freelist+0x2ca9/0x2d20
[  120.820135][    C1]  __alloc_pages+0x1fa/0x610
[  120.824721][    C1]  alloc_slab_page+0x6e/0xf0
[  120.829301][    C1]  new_slab+0x98/0x3e0
[  120.833359][    C1]  ___slab_alloc+0x70f/0xb70
[  120.837946][    C1]  __slab_alloc+0x5e/0xa0
[  120.842281][    C1]  __kmem_cache_alloc_node+0x204/0x2d0
[  120.847746][    C1]  __kmalloc_node_track_caller+0xa1/0x1e0
[  120.853483][    C1]  __alloc_skb+0x226/0x4a0
[  120.857921][    C1]  alloc_skb_with_frags+0xa8/0x620
[  120.863628][    C1]  sock_alloc_send_pskb+0x87f/0x9a0
[  120.870127][    C1]  unix_dgram_sendmsg+0x5c1/0x1710
[  120.875253][    C1]  __sys_sendto+0x4ac/0x660
[  120.879764][    C1]  __x64_sys_sendto+0xe5/0x100
[  120.884527][    C1] page last free stack trace:
[  120.889194][    C1]  free_unref_page_prepare+0x81b/0x820
[  120.894654][    C1]  free_unref_page+0x93/0x530
[  120.899424][    C1]  __free_pages+0x67/0x100
[  120.903869][    C1]  __vunmap+0xa3c/0xc00
[  120.908053][    C1]  vfree+0x61/0x90
[  120.911791][    C1]  kcov_close+0x2b/0x50
[  120.915937][    C1]  __fput+0x1fd/0x8f0
[  120.919945][    C1]  ____fput+0x15/0x20
[  120.923933][    C1]  task_work_run+0x1e1/0x250
[  120.928522][    C1]  do_exit+0xb0d/0x29f0
[  120.932692][    C1]  do_group_exit+0x21b/0x2e0
[  120.937283][    C1]  __x64_sys_exit_group+0x3f/0x40
[  120.942309][    C1]  x64_sys_call+0x7b4/0x9a0
[  120.946805][    C1]  do_syscall_64+0x4c/0xa0
[  120.951742][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  120.957637][    C1] 
[  120.959957][    C1] Memory state around the buggy address:
[  120.965583][    C1]  ffff888123cd5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.973649][    C1]  ffff888123cd5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.981705][    C1] >ffff888123cd5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.989761][    C1]                          ^
[  120.994350][    C1]  ffff888123cd5600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  121.002419][    C1]  ffff888123cd5680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  121.010475][    C1] ==================================================================
[  121.018596][    C1] Disabling lock debugging due to kernel taint
[  121.031282][   T28] audit: type=1400 audit(1790179622.117:763): avc:  denied  { read } for  pid=86 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Sep 23 16:07:02 syzkaller kern.alert kernel: [  120.777694][    C1] page_owner tracks the page as allocated
Sep 23 16:07:02 syzkaller kern.alert kernel: [  120.783437][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 93, tgid 93 (klogd), ts 57376945879, 
Sep 23 16:07:02 syzkaller kern.alert kernel: [  120.884527][    C1] page last free stack trace: