last executing test programs:

27.237328272s ago: executing program 2 (id=113):
r0 = getpgid(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2480, 0x81)
r3 = syz_open_procfs$userns(r0, &(0x7f00000000c0))
mount_setattr(r2, &(0x7f0000000080)='./file1\x00', 0x1100, &(0x7f0000000180)={0x80, 0x10, 0xa0000, {r3}}, 0x20)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP")
r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r4, 0x0, 0x0, 0x8800000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x20002, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0xe498, 0x673}, [@IFLA_CARRIER={0x5, 0x21, 0x10}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4002, 0x2}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4cc51}, 0x4054)
sendfile(r5, r5, 0x0, 0xe3aa6ea)
syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0)

26.045759601s ago: executing program 2 (id=121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

25.734380901s ago: executing program 2 (id=123):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa0840, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x3010400, &(0x7f00000004c0)=ANY=[], 0x41, 0x240, &(0x7f0000000a80)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0xfffffffd, 0x1, 0x40009, 0xa4, 0xffb, 0x1, 0x6, 0xc1, 0x4, 0x1, 0x3, 0x1ff, 0x101, 0x1000, 0xfffffff9, 0x3, 0x3, 0x5, 0x4d, 0x0, 0xfff, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xd, 0x1000d, 0xe, 0x2b12, 0x100, 0x81, 0x1c00, 0xd, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x210ffc, 0x8, 0x5, 0x79b, 0x1, 0x1, 0x80, 0x6, 0xa, 0x8, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4009, 0xfd, 0x9, 0x2af, 0xf7, 0x376, 0x2, 0x6, 0x3, 0x4, 0x7, 0x4009, 0xe, 0x0, 0x100003, 0x8, 0x80000752, 0x2, 0x3, 0x0, 0x10001, 0x3, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0xfdffffff, 0x2, 0x40, 0x1084, 0x2, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0xffff, 0x2, 0xb, 0x100002, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x3, 0x2, 0x5, 0x8, 0x0, 0x101, 0x2, 0x40, 0x8, 0x9, 0x4, 0x401, 0x66d1, 0x8, 0x7, 0xfffffffe, 0x7, 0xc5c, 0xffffffff]}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)='\x00\x00\x00\x005\x00!', 0x7}], 0x2)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x1000)

25.562941757s ago: executing program 2 (id=126):
syz_open_procfs(0x0, &(0x7f0000003100)='fdinfo\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x8040480)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x40, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c37693ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r3 = fsmount(r0, 0x1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%pK    \x00'}, 0x20)
fchdir(r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000007f00)={0x2020}, 0x4b)
read$FUSE(r4, &(0x7f0000009f40)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x1}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

24.760236353s ago: executing program 2 (id=137):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d6632359cf3413d6e1522670d25613b700e6c6673002c6d6f64653d61646170746976652c686561702c09000000636f766572792c6673796e635f6d6f64653d706f7369782c757365725f78617474722c64697361626c655f726f6c6c5f666f72776172642c00000099dbe00589414f3d9fbcbd39d0f118d5695a79937a1d978b344d7a4ade72ba41a330106521321a6e610582b731c4a1e1d95b6ad5b4e9ed654acd52a832c01ccbb26ba71f86de07e38fcaa4a51d62e00cc844f667061f8c9f9a1824faaabeb3b88e2da58b7ddc94b9df0c6e483f9c8f7338954ee24c7463866842dc56a178c425dc91bac4f3f6a332bcfd14daf5e8ca565141312430b5d52e18624a6638d322828ddae5d12026da9e78a06d4fb94d74a6a4d0531a278a8feb5cbfccf1228f878a1b9e5e50fb01d16f1bcc552d7b918f2cece5eb6bd975361ed8e7e344cb8acaac3b091ba3976e3c9bce122d1f9c441d"], 0x1, 0x10601, &(0x7f0000010600)="$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")
r0 = open(&(0x7f0000000100)='./file1\x00', 0x4a07e, 0xdc)
fallocate(r0, 0x0, 0x0, 0x8800000) (async)
fallocate(r0, 0x0, 0x0, 0x8800000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x8800000) (async)
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x8800000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
lseek(r2, 0x2000, 0x0)
r3 = open(&(0x7f0000000040)='.\x00', 0x511082, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0xc0185879, &(0x7f00000004c0)={0x100, 0xffffffffffffffff, 0x401000, 0x2, 0x0, 0x0, 0x2401}) (async)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0xc0185879, &(0x7f00000004c0)={0x100, 0xffffffffffffffff, 0x401000, 0x2, 0x0, 0x0, 0x2401})

23.616903341s ago: executing program 2 (id=150):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x10})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000004000e374d76b010000005023620de30613add31f6b82a98b31fdd55dc55806d6317605ad4d5a742c98a50a1a47bdfcbcfe8194c3ab7cecb78269e1f7d415e404db8b356abb32ca14f18ff55419855b23f8c5e1", @ANYRES8=r3, @ANYRES16=0x0], 0x18}, 0x5041)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xdddd0000, 0x1a, 0x2, 0x40, 0xfd, 0x6, 0xd4, 0x0, 0x1, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x28, 0x7, 0xf, 0x3, 0xca}, {0xeeee0000, 0xdddd1000, 0xb, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x0, 0xa, 0x5}, {0xeeef0000, 0x3000, 0x9, 0xf, 0x43, 0x46, 0x2, 0xc, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x3f, 0x3, 0x9, 0x8, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x0, 0xa, 0x9d, 0x3, 0xfe, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x50, 0x18, 0x2, 0x7}, {0x4000, 0x401}, {0x9000, 0x5}, 0xa0000010, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x3, 0xb, 0x1]})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0x8, 0x2}, {0xf000, 0xdddd0000, 0x0, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x5, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x2, 0xa, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0xff, 0x5}, {0xeeee8000, 0xc000, 0xb, 0x7, 0xe, 0xe, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x5c, 0x4}, {0x7002, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x2, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x2, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x2000, 0x8}, 0x14, 0x0, 0x8000000, 0x20, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x8001]})
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x8000000004)

5.858953126s ago: executing program 32 (id=150):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x10})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000004000e374d76b010000005023620de30613add31f6b82a98b31fdd55dc55806d6317605ad4d5a742c98a50a1a47bdfcbcfe8194c3ab7cecb78269e1f7d415e404db8b356abb32ca14f18ff55419855b23f8c5e1", @ANYRES8=r3, @ANYRES16=0x0], 0x18}, 0x5041)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xdddd0000, 0x1a, 0x2, 0x40, 0xfd, 0x6, 0xd4, 0x0, 0x1, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x28, 0x7, 0xf, 0x3, 0xca}, {0xeeee0000, 0xdddd1000, 0xb, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x0, 0xa, 0x5}, {0xeeef0000, 0x3000, 0x9, 0xf, 0x43, 0x46, 0x2, 0xc, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x3f, 0x3, 0x9, 0x8, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x0, 0xa, 0x9d, 0x3, 0xfe, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x50, 0x18, 0x2, 0x7}, {0x4000, 0x401}, {0x9000, 0x5}, 0xa0000010, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x3, 0xb, 0x1]})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0x8, 0x2}, {0xf000, 0xdddd0000, 0x0, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x5, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x2, 0xa, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0xff, 0x5}, {0xeeee8000, 0xc000, 0xb, 0x7, 0xe, 0xe, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x5c, 0x4}, {0x7002, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x2, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x2, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x2000, 0x8}, 0x14, 0x0, 0x8000000, 0x20, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x8001]})
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x8000000004)

4.646087196s ago: executing program 0 (id=191):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (fail_nth: 2)

4.301920527s ago: executing program 0 (id=194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x4070bd28, 0x1}, 0x14}}, 0x18)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20004051)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x800008, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32], 0x6, 0x2d9, &(0x7f00000028c0)="$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")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, 0x1, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x60000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x395e}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9c4d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x748}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000)

4.280186248s ago: executing program 0 (id=195):
syz_emit_ethernet(0x7e, &(0x7f0000002340)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x48, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1ff, 0x9]}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6}, 0xc800}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfe}}}}}}}}}, 0x0)

4.24325604s ago: executing program 0 (id=196):
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x824c0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r1], 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00')
r2 = socket$inet6(0xa, 0x3, 0x2)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={<r3=>r0, &(0x7f0000000200)='}\xd6\x00', 0x630a00, &(0x7f00000002c0)={@align=0x7, {0xe31, 0x4, 0x2, 0x11b80}}, 0x0, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xfffffff4})
gettid()
setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000400)={@dev={0xac, 0x14, 0x14, 0x34}, @loopback, @multicast1}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x18, r5, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x7fff, @mcast1, 0x1}, 0x1c)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xfffffffd}, 0x1c)
time(0xfffffffffffffffc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x24}}, 0x8004)

4.149012823s ago: executing program 0 (id=197):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)

4.137326473s ago: executing program 0 (id=199):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x404, &(0x7f0000000340)={[{@journal_checksum}, {@usrquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c1rHOUfAPDv7jZpkub364sibQVbqFBfaDYvSBP1oCf1UBALXhRqTLaxZpMN2U1tQg+p3nrwIIqCePDuX+DFniyCeNa7eJCK1ggqCCs7u5vmbeui6S5kPh+Y7jPzbPf7PFm+DzPPzOwEkFona/9kIgYj4puIOFhf3fyGk/WXtdtXp2pLJqrV8z9nItvY1nxr8/8diIjViOiLiJeei3g9sz1ueXlldrJYLCw21vOVuYV8eXnlzKW5yZnCTGF+ZPzsxMT48NjoxK719fq7b14/9/kLvZ/9/s6tm+99+UWtWYONuo392E31rvfE4Q3b9kXE0/ciWBfkGv3p73ZD+Fdq3999EXEqyf+DkUu+TSANqtVq9a/q/lbVq1Vgz8om+8CZ7FBE1MvZ7NBQfR/+/hjIFkvlyuMXS0vz0/V95UPRk714qVgYbhwrHIqeTG19JCnfWR/dsj4WkewDv5/rT9aHpkrF6c4OdcAWB7bk/2+5ev4DKeGQH9JL/kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0ilF8+dqy3V5v3v05eXl2ZLl89MF8qzQ3NLU0NTpcWFoZlSaSa5Z2funz6vWCotjDwRS1fylUK5ki8vr1yYKy3NVy4k9/VfKPR0pFdAOw6fuPFdJiJWn+xPlpreRp1chb2tWs1Et+9BBroj1+0BCOgaU3+QXo7xgR1+oneTvlYVC7vfFqAzst1uANA1p485/wdpZf4f0sv8P6SXfXzA/D+kj/l/SK/BFs//+t+GZ3cNR8T/I+LbXM/+5rO+gL0g+2Omsf9/+uDDg1trezN/JKcIeiPirY/Pf3hlslJZHKlt/2V9e+WjxvbRbrQfaFczT5t5DACk19rtq1PNpZNxf3q2fhHC9vj7GnOTfck5yoG1zKZrFTK7dO3C6rWIOLpT/Ezjeef1Mx8Da7lt8Y80XjP1j0jauy95bnpn4h/bEP+hDfGP/+e/CqTDjdr4M7xT/mWTnI71/Ns8/gzu0rUTrce/7Pr4l2sx/p1oM8Ybn7z9Q8v41yKO7xi/Ga8vibU1fq1tp9uMf+vVlx9oVVf9tP45O8VvqpXylbmFfHl55UzyO3IzhfmR8bMTE+PDY6MT+WSOOt+cqd7uqaNf37xb/wdaxG/V/2cabXq0zf7/+eBXr5y8S/xHTu38/R9pEb+mPyIeazP+r6Pfv9aqrhZ/ukX/s3eJX9s21mb88gfP72/zrQBAB5SXV2Yni8XCooKCgsJ6odsjE3Cv3Un6brcEAAAAAAAAAAAAaFcnLifudh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaCvwMAAP//lPzWnA==")

3.497809044s ago: executing program 5 (id=201):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x16}, 0x50) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async)
r3 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, 0x6e)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20140000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00e40a82306b933179", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf25010000e504530319350a9683bf5ba6716c124c"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x24000014) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000005c0)=""/117, 0x18}, 0x20) (async)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) (async)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) (async)
ioctl$UI_DEV_CREATE(r6, 0x5501) (async)
write$input_event(r6, &(0x7f00000000c0)={{}, 0x12, 0x40, 0x1800005}, 0x18)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

3.429983516s ago: executing program 5 (id=203):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00')
fchdir(r2)
r3 = open(&(0x7f0000000100)='.\x00', 0x40080, 0x150)
getdents(r3, 0x0, 0x0)

3.418982577s ago: executing program 5 (id=204):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
socket(0x1e, 0x2, 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000540)="343a06375e", 0x5}, {&(0x7f0000000480)="4391c5e4", 0x4}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unshare(0x60000600)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000ff00000006000000040000000000000e0400001ca240358aad0000000000000000000000000d04000000000000000000000400000000040000000000000803000000"], 0x0, 0x52}, 0x20)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4, [{0xff000000}]}, 0x68)
connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8002, 0x7ff})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000380)={<r7=>0xffffffffffffffff})
sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac000000000705000000000000000000010240000000001c6cf32c2400078008000240000000030800024000000000080002400000c31008000c0002400000000000000009240007800800014000000c7208000240000000060800014000000005080002400000000008000540000000000c00064000000000000000060c0006400000003bbc0000040c000640010073797a3100"/167], 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x2004)

3.31818107s ago: executing program 3 (id=205):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x404, &(0x7f0000000340)={[{@journal_checksum}, {@usrquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") (fail_nth: 8)

2.864905575s ago: executing program 4 (id=206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r1, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r3, 0x1)
open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)

2.609955353s ago: executing program 3 (id=207):
socket$inet_udp(0x2, 0x2, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8002, 0x7ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
mincore(&(0x7f0000ff6000/0x8000)=nil, 0x8000, &(0x7f0000000080)=""/19)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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")
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)={[{@stripe}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@sysvgroups}, {@orlov}, {@grpquota}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
getdents64(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)

2.11965908s ago: executing program 5 (id=209):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)

2.073944061s ago: executing program 5 (id=210):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r1, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r3, 0x1)
open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)

1.913586726s ago: executing program 1 (id=212):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

1.870055007s ago: executing program 3 (id=213):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80)

1.78202768s ago: executing program 3 (id=214):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00')
fchdir(r2)
r3 = open(&(0x7f0000000100)='.\x00', 0x40080, 0x150)
getdents(r3, 0x0, 0x0)

1.78171s ago: executing program 3 (id=215):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x10})
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$inet(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc)
r7 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "47247dc7230dc99a233797db22ee94b796feb05fb7a96f78d1bdab4f5d51a05ef4ceda61cf2e5dfaa6c5ae8503e0919454e2512e410c9181e12a9f50750aaf3d"}, 0x48, 0xffffffffffffffff)
keyctl$read(0xb, r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119b00000000008510000002000000853ba19644489165f1003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

1.630562846s ago: executing program 4 (id=216):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x42, 0x41}, 0x50)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000140)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x4}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x370, &(0x7f0000000880)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
syslog(0x9, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
fchown(0xffffffffffffffff, r4, r5)
read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
chown(0x0, r6, r5)
r7 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)

1.226474249s ago: executing program 5 (id=217):
r0 = syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x151, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x10, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x40, 0x4, {0x7, 0x25, 0x1, 0xc, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd4, 0x1, 0x0, {0x7, 0x25, 0x1, 0x8, 0xe4, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40012001, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
pidfd_send_signal(0xffffffffffffffff, 0x15, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = epoll_create1(0x80000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000000000006110a0000000000063012200000000009511090000000000166747940a558ead579ef1a48ae180eb1fc7c701025fbcaa58039c35fc8a248a9f032715eeaab7f7034897e7a5dd1d3e377b4e953b95a84140839d861f7932e09ce013f7036797b9bdcf38ba2b129408847336c9df07ec316601af0b765d3c399b2a0ce24e2bc0756df3db773c95563e8d1d9d5f93fb1aa16926b1ef421c6e1d6791a93dab6236414ce21ea4286abbcb6105c11ed60407d50a1aed5806299b7553ab10a6fecfaeca15dc1e2e0061c1827497391467375b3e1c4d5bec69ae5f6be3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f00000000c0)={0xe000000e})
read$eventfd(r5, &(0x7f0000000000), 0x8)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000023c0)=0x8ba)
epoll_pwait(r4, 0x0, 0x0, 0x3, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000001380)=""/4083, 0xff3}], 0x1, 0x178, 0x402)
connect$pppl2tp(r6, &(0x7f0000002380)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x3, 0x2, {0xa, 0x4e24, 0x5, @local, 0x7dc}}}, 0x32)
close(r6)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000800, 0x4}, {0x0, 0x8, 0x0, 0x4}, 0xfffffdfe, 0x0, 0x1}, {{@in=@private, 0x4, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x4}}, 0xe8)
syz_usb_control_io$uac1(r0, &(0x7f0000001280)={0x14, &(0x7f0000001140)={0x0, 0xb, 0x91, {0x91, 0x30, "4844b867a0a945e78dd6fe6b77634c4346eb676ebca81d3740fdb976c50bb27a18c4ab170fdd43d5782779c62d5fc57f941e8fa9a96ea0ec4ca785e7e20ac66e4fcbdeea987a08b6060cd804a72b0d20f57b6d6038105458d24ae811625e82c835ab79264102e831c20b5734cc584cc622b8def958ea53aad33485c94cba766348ebad7835bf298f2ffdc6697246a9"}}, &(0x7f0000001200)={0x0, 0x3, 0x45, @string={0x45, 0x3, "9cea67584fbfa6ee1a9a7b6806c683def2002c70b63735d6058447a6cc20af9b33f6c80551f19d312152a95edc929f9d108cd12962c38d7a35d1b8e5562a27964e3e6f"}}}, &(0x7f0000001500)={0x44, &(0x7f00000012c0)={0x0, 0xd, 0x42, "2b35d0d65cdcdcd08118b1065695edec313f52b3a8c05d1d60abaa3df64f0024dd55dc8d57aed75fbc908c123c0fbeba17b41371dd121adf7c87f904faec80b9e9df"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x34}, &(0x7f00000013c0)={0x20, 0x81, 0x3, "721fff"}, &(0x7f0000001400)={0x20, 0x82, 0x2, "7690"}, &(0x7f0000001440)={0x20, 0x83, 0x3, 'TDa'}, &(0x7f0000001480)={0x20, 0x84, 0x3, "776ad0"}, &(0x7f00000014c0)={0x20, 0x85, 0x3, "f3f808"}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000002400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@struct={0xd, 0x2, 0x0, 0x4, 0x0, 0x11, [{0x1, 0x1, 0xf2}, {0xc, 0x5}]}, @ptr]}, {0x0, [0x0, 0x0, 0x5e]}}, &(0x7f0000000100)=""/4084, 0x4d, 0xff4, 0x1}, 0x28)

1.018068596s ago: executing program 1 (id=218):
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8953, 0x0)
r0 = socket(0x18, 0x2, 0xfffffffe)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000))

1.017923886s ago: executing program 1 (id=219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000c00)=""/237, 0xed}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000280)=""/117, 0x75}, {&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000002100)=""/4097, 0x1001}, {&(0x7f0000000100)=""/232, 0xe8}], 0x7}, 0x100556}], 0x2, 0x2000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

1.017767846s ago: executing program 1 (id=220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9})
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"})
r2 = syz_open_pts(r1, 0x101000)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17)
r4 = socket$inet(0x2, 0x803, 0x1)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7ffffffffffffff00000000000000000000200000e5000000000000000000000000000000000000ffffff7f000000000000000000000000fbffffffffffffff000000000000000000000000000000000000020000000000000000000001fec06b6e00000000000000000004ff4d4172a7d42b8191623eb2d972de17e818bb7eeaf0a909acd71ae2b0e251d1ad0a3e6f0357f02d1ea576a194026a7da777ac36b32f3092ef668b9714d1"], 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'bridge_slave_1\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7, 0x7, 0x3, 0xe37, 0x4, 0x7, 0x6, 0x9}})
write(r4, &(0x7f0000000240)="08008edf773c8000", 0x8)
setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000140)="9f", 0x1)
recvmmsg(r4, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0xff02}, 0xffffffff}], 0x1, 0x40000120, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002"], 0x58}}, 0x0)

769.621874ms ago: executing program 4 (id=221):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001"], 0x78}}, 0x40000)

664.534387ms ago: executing program 4 (id=222):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000000002000500f9c2bd9f11ecd6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
preadv(r0, &(0x7f0000003740)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/108, 0x6c}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f00000035c0)=""/146, 0x92}, {&(0x7f0000003680)=""/185, 0xb9}], 0x6, 0x8, 0x0)
shutdown(0xffffffffffffffff, 0x0)
syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0)
syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
fchdir(0xffffffffffffffff)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x800d, &(0x7f0000000180)={[{@nogrpid}, {@nobarrier}]}, 0x1, 0x52e, &(0x7f0000000f00)="$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")

270.60318ms ago: executing program 4 (id=223):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)

215.972122ms ago: executing program 4 (id=224):
socket$inet_udp(0x2, 0x2, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8002, 0x7ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
mincore(&(0x7f0000ff6000/0x8000)=nil, 0x8000, &(0x7f0000000080)=""/19)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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")
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)={[{@stripe}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@sysvgroups}, {@orlov}, {@grpquota}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
getdents64(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)

153.966774ms ago: executing program 1 (id=225):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0e9045e, &(0x7f0000000b00)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@commit={'commit', 0x3d, 0x5}}]}, 0xea, 0x491, &(0x7f0000000f00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
process_vm_writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/58, 0x3a}, {&(0x7f0000000340)=""/101, 0x65}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/25, 0x19}, {&(0x7f0000000600)=""/148, 0x94}], 0x8, &(0x7f00000034c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/196, 0xc4}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
unshare(0x4000600)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r4, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r5 = socket$inet(0x2, 0xa, 0x0)
ptrace$setopts(0xd865c2ba8ed52a68, r0, 0x7fff, 0x100000)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'wg2\x00', {0x2, 0x4e20, @broadcast}})

68.949277ms ago: executing program 3 (id=226):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r1, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r3, 0x1)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)

0s ago: executing program 1 (id=227):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r1, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r3, 0x1)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)

kernel console output (not intermixed with test programs):

14]  ? __x64_sys_pwritev2+0xd0/0xd0
[   78.840684][  T914]  ? __ia32_sys_read+0x90/0x90
[   78.845459][  T914]  __x64_sys_pwritev2+0xbf/0xd0
[   78.850313][  T914]  x64_sys_call+0x346/0x9a0
[   78.854817][  T914]  do_syscall_64+0x4c/0xa0
[   78.859325][  T914]  ? clear_bhb_loop+0x50/0xa0
[   78.864010][  T914]  ? clear_bhb_loop+0x50/0xa0
[   78.868690][  T914]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.874587][  T914] RIP: 0033:0x7f4becbf1e59
[   78.879011][  T914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.898621][  T914] RSP: 002b:00007f4beb64c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[   78.907037][  T914] RAX: ffffffffffffffda RBX: 00007f4bece6afa0 RCX: 00007f4becbf1e59
[   78.915015][  T914] RDX: 0000000000000001 RSI: 0000200000000cc0 RDI: 0000000000000004
[   78.922992][  T914] RBP: 00007f4beb64c090 R08: 000000000000000c R09: 0000000000000004
[   78.931051][  T914] R10: 0000000000000fff R11: 0000000000000246 R12: 0000000000000001
[   78.939033][  T914] R13: 00007f4bece6b038 R14: 00007f4bece6afa0 R15: 00007fff20cca468
[   78.947099][  T914]  </TASK>
[   78.950119][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   78.957600][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   78.967660][  T288] Call Trace:
[   78.970941][  T288]  <TASK>
[   78.973869][  T288]  __dump_stack+0x21/0x30
[   78.978201][  T288]  dump_stack_lvl+0x110/0x170
[   78.982878][  T288]  ? show_regs_print_info+0x20/0x20
[   78.988165][  T288]  dump_stack+0x15/0x20
[   78.992322][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   78.997699][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   79.003156][  T288]  ? f2fs_get_block+0x140/0x140
[   79.008005][  T288]  ? may_link+0x3e8/0x560
[   79.012340][  T288]  ? may_create+0x470/0x470
[   79.016841][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   79.022212][  T288]  f2fs_empty_dir+0xca/0x240
[   79.026804][  T288]  f2fs_rmdir+0x3f/0x70
[   79.030959][  T288]  vfs_rmdir+0x313/0x460
[   79.035213][  T288]  do_rmdir+0x261/0x6b0
[   79.039374][  T288]  ? d_delete_notify+0x160/0x160
[   79.044322][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   79.049320][  T288]  x64_sys_call+0x4c0/0x9a0
[   79.053837][  T288]  do_syscall_64+0x4c/0xa0
[   79.058261][  T288]  ? clear_bhb_loop+0x50/0xa0
[   79.062945][  T288]  ? clear_bhb_loop+0x50/0xa0
[   79.067618][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   79.073513][  T288] RIP: 0033:0x7fe768f0af77
[   79.077928][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.097635][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   79.106050][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   79.114022][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   79.121998][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   79.129970][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   79.138052][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   79.146049][  T288]  </TASK>
[   79.163917][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   79.170338][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   79.177826][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   79.187896][  T288] Call Trace:
[   79.191214][  T288]  <TASK>
[   79.194135][  T288]  __dump_stack+0x21/0x30
[   79.198461][  T288]  dump_stack_lvl+0x110/0x170
[   79.203141][  T288]  ? show_regs_print_info+0x20/0x20
[   79.208331][  T288]  dump_stack+0x15/0x20
[   79.212478][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   79.217871][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   79.223338][  T288]  ? f2fs_get_block+0x140/0x140
[   79.228227][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   79.233686][  T288]  f2fs_find_data_page+0x189/0x3c0
[   79.238788][  T288]  f2fs_readdir+0x4af/0x9e0
[   79.243283][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   79.248736][  T288]  ? avc_policy_seqno+0x1b/0x70
[   79.253584][  T288]  ? down_read_killable+0xc1/0x110
[   79.258684][  T288]  ? security_file_permission+0x83/0xa0
[   79.264306][  T288]  iterate_dir+0x260/0x600
[   79.268729][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   79.274092][  T288]  __se_sys_getdents64+0xf2/0x250
[   79.279109][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   79.284316][  T288]  ? filldir+0x690/0x690
[   79.288554][  T288]  ? __x64_sys_umount+0x12d/0x170
[   79.293580][  T288]  ? debug_smp_processor_id+0x17/0x20
[   79.298948][  T288]  __x64_sys_getdents64+0x7b/0x90
[   79.303972][  T288]  x64_sys_call+0x592/0x9a0
[   79.308822][  T288]  do_syscall_64+0x4c/0xa0
[   79.313224][  T288]  ? clear_bhb_loop+0x50/0xa0
[   79.317885][  T288]  ? clear_bhb_loop+0x50/0xa0
[   79.322549][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   79.328424][  T288] RIP: 0033:0x7fe768f347f3
[   79.332831][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   79.352421][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   79.361011][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   79.368985][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   79.377034][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   79.385001][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   79.393247][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   79.401211][  T288]  </TASK>
[   79.407966][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   79.413993][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   79.421473][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   79.431724][  T288] Call Trace:
[   79.435015][  T288]  <TASK>
[   79.437990][  T288]  __dump_stack+0x21/0x30
[   79.442344][  T288]  dump_stack_lvl+0x110/0x170
[   79.447053][  T288]  ? show_regs_print_info+0x20/0x20
[   79.447542][  T933] loop4: detected capacity change from 0 to 256
[   79.452275][  T288]  dump_stack+0x15/0x20
[   79.452299][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   79.468306][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   79.473792][  T288]  ? f2fs_get_block+0x140/0x140
[   79.478662][  T288]  ? may_link+0x3e8/0x560
[   79.483025][  T288]  ? may_create+0x470/0x470
[   79.487525][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   79.492891][  T288]  f2fs_empty_dir+0xca/0x240
[   79.497483][  T288]  f2fs_rmdir+0x3f/0x70
[   79.501627][  T288]  vfs_rmdir+0x313/0x460
[   79.505861][  T288]  do_rmdir+0x261/0x6b0
[   79.510011][  T288]  ? d_delete_notify+0x160/0x160
[   79.514939][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   79.519772][  T288]  x64_sys_call+0x4c0/0x9a0
[   79.524263][  T288]  do_syscall_64+0x4c/0xa0
[   79.528664][  T288]  ? clear_bhb_loop+0x50/0xa0
[   79.533333][  T288]  ? clear_bhb_loop+0x50/0xa0
[   79.538312][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   79.544232][  T288] RIP: 0033:0x7fe768f0af77
[   79.548643][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.568243][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   79.576661][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   79.584733][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   79.592694][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   79.600654][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   79.608615][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   79.616582][  T288]  </TASK>
[   79.620174][  T442] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.621154][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   79.630453][  T442] usb 4-1: config 0 has no interfaces?
[   79.636554][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   79.649344][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   79.659480][  T288] Call Trace:
[   79.662758][  T288]  <TASK>
[   79.665703][  T288]  __dump_stack+0x21/0x30
[   79.670224][  T288]  dump_stack_lvl+0x110/0x170
[   79.674920][  T288]  ? show_regs_print_info+0x20/0x20
[   79.680256][  T288]  dump_stack+0x15/0x20
[   79.684420][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   79.689790][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   79.695414][  T288]  ? f2fs_get_block+0x140/0x140
[   79.700269][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   79.705735][  T288]  f2fs_find_data_page+0x189/0x3c0
[   79.710883][  T288]  f2fs_readdir+0x4af/0x9e0
[   79.715416][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   79.720818][  T288]  ? avc_policy_seqno+0x1b/0x70
[   79.725897][  T288]  ? down_read_killable+0xc1/0x110
[   79.731044][  T288]  ? security_file_permission+0x83/0xa0
[   79.736690][  T288]  iterate_dir+0x260/0x600
[   79.741147][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   79.746354][  T288]  __se_sys_getdents64+0xf2/0x250
[   79.751468][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   79.756666][  T288]  ? filldir+0x690/0x690
[   79.760920][  T288]  ? __x64_sys_umount+0x12d/0x170
[   79.765959][  T288]  ? debug_smp_processor_id+0x17/0x20
[   79.771335][  T288]  __x64_sys_getdents64+0x7b/0x90
[   79.776365][  T288]  x64_sys_call+0x592/0x9a0
[   79.780872][  T288]  do_syscall_64+0x4c/0xa0
[   79.785288][  T288]  ? clear_bhb_loop+0x50/0xa0
[   79.789962][  T288]  ? clear_bhb_loop+0x50/0xa0
[   79.794640][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   79.800530][  T288] RIP: 0033:0x7fe768f347f3
[   79.805030][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   79.824637][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   79.833053][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   79.841025][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   79.849003][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   79.856975][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   79.864956][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   79.872934][  T288]  </TASK>
[   79.889702][  T933] FAT-fs (loop4): Directory bread(block 64) failed
[   79.895554][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   79.907976][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   79.915548][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   79.920151][  T933] FAT-fs (loop4): Directory bread(block 65) failed
[   79.925714][  T288] Call Trace:
[   79.925723][  T288]  <TASK>
[   79.925731][  T288]  __dump_stack+0x21/0x30
[   79.925758][  T288]  dump_stack_lvl+0x110/0x170
[   79.925777][  T288]  ? show_regs_print_info+0x20/0x20
[   79.925799][  T288]  dump_stack+0x15/0x20
[   79.945928][  T933] FAT-fs (loop4): Directory bread(block 66) failed
[   79.947502][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   79.960352][  T933] FAT-fs (loop4): Directory bread(block 67) failed
[   79.963428][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   79.978242][  T933] FAT-fs (loop4): Directory bread(block 68) failed
[   79.980859][  T288]  ? f2fs_get_block+0x140/0x140
[   79.980884][  T288]  ? may_link+0x3e8/0x560
[   79.996548][  T288]  ? may_create+0x470/0x470
[   79.997841][  T933] FAT-fs (loop4): Directory bread(block 69) failed
[   80.001149][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   80.013013][  T288]  f2fs_empty_dir+0xca/0x240
[   80.017627][  T288]  f2fs_rmdir+0x3f/0x70
[   80.019363][  T933] FAT-fs (loop4): Directory bread(block 70) failed
[   80.021791][  T288]  vfs_rmdir+0x313/0x460
[   80.032544][  T288]  do_rmdir+0x261/0x6b0
[   80.036714][  T288]  ? d_delete_notify+0x160/0x160
[   80.038352][  T933] FAT-fs (loop4): Directory bread(block 71) failed
[   80.041667][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   80.041690][  T288]  x64_sys_call+0x4c0/0x9a0
[   80.057531][  T288]  do_syscall_64+0x4c/0xa0
[   80.059210][  T933] FAT-fs (loop4): Directory bread(block 72) failed
[   80.061960][  T288]  ? clear_bhb_loop+0x50/0xa0
[   80.073131][  T288]  ? clear_bhb_loop+0x50/0xa0
[   80.077827][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.078877][  T933] FAT-fs (loop4): Directory bread(block 73) failed
[   80.083741][  T288] RIP: 0033:0x7fe768f0af77
[   80.094755][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.114486][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   80.122927][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   80.130922][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   80.139025][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   80.147129][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   80.155114][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   80.163119][  T288]  </TASK>
[   80.175352][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   80.181756][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   80.189244][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   80.199333][  T288] Call Trace:
[   80.202635][  T288]  <TASK>
[   80.205585][  T288]  __dump_stack+0x21/0x30
[   80.209945][  T288]  dump_stack_lvl+0x110/0x170
[   80.214643][  T288]  ? show_regs_print_info+0x20/0x20
[   80.219865][  T288]  dump_stack+0x15/0x20
[   80.224058][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   80.229449][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   80.235099][  T288]  ? f2fs_get_block+0x140/0x140
[   80.239966][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   80.243485][  T940] loop1: detected capacity change from 0 to 4096
[   80.245534][  T288]  f2fs_find_data_page+0x189/0x3c0
[   80.245558][  T288]  f2fs_readdir+0x4af/0x9e0
[   80.261514][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   80.263912][  T938] loop0: detected capacity change from 0 to 2048
[   80.266733][  T288]  ? avc_policy_seqno+0x1b/0x70
[   80.266756][  T288]  ? down_read_killable+0xc1/0x110
[   80.266777][  T288]  ? security_file_permission+0x83/0xa0
[   80.288587][  T288]  iterate_dir+0x260/0x600
[   80.293022][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   80.298341][  T288]  __se_sys_getdents64+0xf2/0x250
[   80.303381][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   80.308594][  T288]  ? filldir+0x690/0x690
[   80.312854][  T288]  ? __x64_sys_umount+0x12d/0x170
[   80.317890][  T288]  ? debug_smp_processor_id+0x17/0x20
[   80.323376][  T288]  __x64_sys_getdents64+0x7b/0x90
[   80.328414][  T288]  x64_sys_call+0x592/0x9a0
[   80.332942][  T288]  do_syscall_64+0x4c/0xa0
[   80.337378][  T288]  ? clear_bhb_loop+0x50/0xa0
[   80.342065][  T288]  ? clear_bhb_loop+0x50/0xa0
[   80.346750][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.352655][  T288] RIP: 0033:0x7fe768f347f3
[   80.357083][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   80.376706][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   80.385140][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   80.393127][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   80.401109][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   80.409092][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   80.417097][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   80.425080][  T288]  </TASK>
[   80.425283][  T442] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   80.437752][  T442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.445072][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   80.445920][  T442] usb 4-1: Product: syz
[   80.445936][  T442] usb 4-1: Manufacturer: syz
[   80.445949][  T442] usb 4-1: SerialNumber: syz
[   80.464905][  T442] usb 4-1: config 0 descriptor??
[   80.466053][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   80.478240][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   80.484502][  T940] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   80.488315][  T288] Call Trace:
[   80.488326][  T288]  <TASK>
[   80.488332][  T288]  __dump_stack+0x21/0x30
[   80.488359][  T288]  dump_stack_lvl+0x110/0x170
[   80.513192][  T288]  ? show_regs_print_info+0x20/0x20
[   80.518422][  T288]  dump_stack+0x15/0x20
[   80.522602][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   80.527997][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   80.533560][  T288]  ? f2fs_get_block+0x140/0x140
[   80.538424][  T288]  ? may_link+0x3e8/0x560
[   80.542773][  T288]  ? may_create+0x470/0x470
[   80.547378][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   80.552758][  T288]  f2fs_empty_dir+0xca/0x240
[   80.557364][  T288]  f2fs_rmdir+0x3f/0x70
[   80.561520][  T288]  vfs_rmdir+0x313/0x460
[   80.565767][  T288]  do_rmdir+0x261/0x6b0
[   80.569933][  T288]  ? d_delete_notify+0x160/0x160
[   80.574892][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   80.579763][  T288]  x64_sys_call+0x4c0/0x9a0
[   80.584281][  T288]  do_syscall_64+0x4c/0xa0
[   80.588709][  T288]  ? clear_bhb_loop+0x50/0xa0
[   80.593398][  T288]  ? clear_bhb_loop+0x50/0xa0
[   80.598100][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.604017][  T288] RIP: 0033:0x7fe768f0af77
[   80.608435][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.628042][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   80.636455][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   80.644427][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   80.652397][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   80.660368][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   80.668337][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   80.676314][  T288]  </TASK>
[   80.680338][  T940] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   80.688019][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   80.697903][  T940] EXT4-fs (loop1): Test dummy encryption mode enabled
[   80.704724][  T442] usb 4-1: can't set config #0, error -71
[   80.711004][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   80.714257][  T941] attempt to access beyond end of device
[   80.714257][  T941] loop4: rw=2049, want=1480, limit=256
[   80.718512][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   80.718526][  T288] Call Trace:
[   80.718531][  T288]  <TASK>
[   80.718538][  T288]  __dump_stack+0x21/0x30
[   80.718565][  T288]  dump_stack_lvl+0x110/0x170
[   80.718584][  T288]  ? show_regs_print_info+0x20/0x20
[   80.718606][  T288]  dump_stack+0x15/0x20
[   80.718625][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   80.718648][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   80.718667][  T288]  ? f2fs_get_block+0x140/0x140
[   80.718685][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   80.718707][  T288]  f2fs_find_data_page+0x189/0x3c0
[   80.718725][  T288]  f2fs_readdir+0x4af/0x9e0
[   80.718748][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   80.718768][  T288]  ? avc_policy_seqno+0x1b/0x70
[   80.718785][  T288]  ? down_read_killable+0xc1/0x110
[   80.718806][  T288]  ? security_file_permission+0x83/0xa0
[   80.718828][  T288]  iterate_dir+0x260/0x600
[   80.718847][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   80.718868][  T288]  __se_sys_getdents64+0xf2/0x250
[   80.718888][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   80.718908][  T288]  ? filldir+0x690/0x690
[   80.718927][  T288]  ? __x64_sys_umount+0x12d/0x170
[   80.718945][  T288]  ? debug_smp_processor_id+0x17/0x20
[   80.718964][  T288]  __x64_sys_getdents64+0x7b/0x90
[   80.718984][  T288]  x64_sys_call+0x592/0x9a0
[   80.719002][  T288]  do_syscall_64+0x4c/0xa0
[   80.719022][  T288]  ? clear_bhb_loop+0x50/0xa0
[   80.719046][  T288]  ? clear_bhb_loop+0x50/0xa0
[   80.719062][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.719080][  T288] RIP: 0033:0x7fe768f347f3
[   80.719097][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   80.719113][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   80.719135][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   80.719149][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   80.719162][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   80.719175][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   80.719187][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   80.719203][  T288]  </TASK>
[   80.730975][  T941] attempt to access beyond end of device
[   80.730975][  T941] loop4: rw=2049, want=1832, limit=256
[   80.745930][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   80.748136][  T941] attempt to access beyond end of device
[   80.748136][  T941] loop4: rw=2049, want=2272, limit=256
[   80.774542][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   80.778030][  T442] usb 4-1: USB disconnect, device number 3
[   80.781407][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   80.816374][  T940] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003]
[   80.817156][  T288] Call Trace:
[   80.817166][  T288]  <TASK>
[   80.821764][  T940] System zones: 
[   80.826848][  T288]  __dump_stack+0x21/0x30
[   80.826877][  T288]  dump_stack_lvl+0x110/0x170
[   80.826897][  T288]  ? show_regs_print_info+0x20/0x20
[   80.835741][  T940] 0-5
[   80.837107][  T288]  dump_stack+0x15/0x20
[   80.841444][  T940] 
[   80.843963][  T940] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback.
[   80.846555][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   80.846587][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   81.082827][  T288]  ? f2fs_get_block+0x140/0x140
[   81.087688][  T288]  ? may_link+0x3e8/0x560
[   81.092060][  T288]  ? may_create+0x470/0x470
[   81.096566][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   81.101935][  T288]  f2fs_empty_dir+0xca/0x240
[   81.106558][  T288]  f2fs_rmdir+0x3f/0x70
[   81.110713][  T288]  vfs_rmdir+0x313/0x460
[   81.114952][  T288]  do_rmdir+0x261/0x6b0
[   81.119107][  T288]  ? d_delete_notify+0x160/0x160
[   81.124043][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   81.128893][  T288]  x64_sys_call+0x4c0/0x9a0
[   81.133399][  T288]  do_syscall_64+0x4c/0xa0
[   81.137813][  T288]  ? clear_bhb_loop+0x50/0xa0
[   81.142491][  T288]  ? clear_bhb_loop+0x50/0xa0
[   81.147162][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.153063][  T288] RIP: 0033:0x7fe768f0af77
[   81.157477][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.177204][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   81.185634][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   81.193779][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   81.201751][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   81.209722][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   81.217698][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   81.225672][  T288]  </TASK>
[   81.230041][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   81.244811][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   81.252318][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   81.262392][  T288] Call Trace:
[   81.265693][  T288]  <TASK>
[   81.268636][  T288]  __dump_stack+0x21/0x30
[   81.271378][   T30] kauditd_printk_skb: 1 callbacks suppressed
[   81.271391][   T30] audit: type=1400 audit(1780501990.291:216): avc:  denied  { append } for  pid=939 comm="syz.1.167" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   81.272982][  T288]  dump_stack_lvl+0x110/0x170
[   81.284503][   T30] audit: type=1400 audit(1780501990.291:217): avc:  denied  { map } for  pid=939 comm="syz.1.167" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   81.302377][  T288]  ? show_regs_print_info+0x20/0x20
[   81.302409][  T288]  dump_stack+0x15/0x20
[   81.302427][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   81.302450][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   81.302467][  T288]  ? f2fs_get_block+0x140/0x140
[   81.302484][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   81.302504][  T288]  f2fs_find_data_page+0x189/0x3c0
[   81.302521][  T288]  f2fs_readdir+0x4af/0x9e0
[   81.302543][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   81.302562][  T288]  ? avc_policy_seqno+0x1b/0x70
[   81.302579][  T288]  ? down_read_killable+0xc1/0x110
[   81.302599][  T288]  ? security_file_permission+0x83/0xa0
[   81.302619][  T288]  iterate_dir+0x260/0x600
[   81.302638][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   81.302657][  T288]  __se_sys_getdents64+0xf2/0x250
[   81.302676][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   81.339032][   T30] audit: type=1400 audit(1780501990.291:218): avc:  denied  { setopt } for  pid=939 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.340197][  T288]  ? filldir+0x690/0x690
[   81.435077][  T288]  ? __x64_sys_umount+0x12d/0x170
[   81.440210][  T288]  ? debug_smp_processor_id+0x17/0x20
[   81.445681][  T288]  __x64_sys_getdents64+0x7b/0x90
[   81.450763][  T288]  x64_sys_call+0x592/0x9a0
[   81.455304][  T288]  do_syscall_64+0x4c/0xa0
[   81.459781][  T288]  ? clear_bhb_loop+0x50/0xa0
[   81.462805][  T938] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none.
[   81.464656][  T288]  ? clear_bhb_loop+0x50/0xa0
[   81.484082][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.490083][  T288] RIP: 0033:0x7fe768f347f3
[   81.494514][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   81.514215][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   81.522744][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   81.530741][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   81.538813][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   81.546797][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   81.554794][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   81.562797][  T288]  </TASK>
[   81.566587][    T8] attempt to access beyond end of device
[   81.566587][    T8] loop4: rw=1, want=1240, limit=256
[   81.578640][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   81.584652][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   81.592128][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   81.602198][  T288] Call Trace:
[   81.605484][  T288]  <TASK>
[   81.608426][  T288]  __dump_stack+0x21/0x30
[   81.612774][  T288]  dump_stack_lvl+0x110/0x170
[   81.617465][  T288]  ? show_regs_print_info+0x20/0x20
[   81.622681][  T288]  dump_stack+0x15/0x20
[   81.626866][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   81.632459][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   81.637958][  T288]  ? f2fs_get_block+0x140/0x140
[   81.642838][  T288]  ? may_link+0x3e8/0x560
[   81.647186][  T288]  ? may_create+0x470/0x470
[   81.651703][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   81.657090][  T288]  f2fs_empty_dir+0xca/0x240
[   81.661781][  T288]  f2fs_rmdir+0x3f/0x70
[   81.665947][  T288]  vfs_rmdir+0x313/0x460
[   81.670216][  T288]  do_rmdir+0x261/0x6b0
[   81.674390][  T288]  ? d_delete_notify+0x160/0x160
[   81.679345][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   81.684207][  T288]  x64_sys_call+0x4c0/0x9a0
[   81.688727][  T288]  do_syscall_64+0x4c/0xa0
[   81.693170][  T288]  ? clear_bhb_loop+0x50/0xa0
[   81.697857][  T288]  ? clear_bhb_loop+0x50/0xa0
[   81.702545][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.708454][  T288] RIP: 0033:0x7fe768f0af77
[   81.712898][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.732523][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   81.741136][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   81.749206][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   81.757178][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   81.765148][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   81.773306][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   81.781302][  T288]  </TASK>
[   81.795246][   T30] audit: type=1400 audit(1780501991.211:219): avc:  denied  { ioctl } for  pid=939 comm="syz.1.167" path="/31/file2/file1" dev="loop1" ino=15 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   81.801508][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   81.825853][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   81.833437][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   81.843489][  T288] Call Trace:
[   81.846766][  T288]  <TASK>
[   81.849699][  T288]  __dump_stack+0x21/0x30
[   81.854035][  T288]  dump_stack_lvl+0x110/0x170
[   81.858714][  T288]  ? show_regs_print_info+0x20/0x20
[   81.863916][  T288]  dump_stack+0x15/0x20
[   81.868073][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   81.873451][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   81.878916][  T288]  ? f2fs_get_block+0x140/0x140
[   81.883765][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   81.889228][  T288]  f2fs_find_data_page+0x189/0x3c0
[   81.894343][  T288]  f2fs_readdir+0x4af/0x9e0
[   81.898847][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   81.904049][  T288]  ? avc_policy_seqno+0x1b/0x70
[   81.908903][  T288]  ? down_read_killable+0xc1/0x110
[   81.914018][  T288]  ? security_file_permission+0x83/0xa0
[   81.919749][  T288]  iterate_dir+0x260/0x600
[   81.924193][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   81.929404][  T288]  __se_sys_getdents64+0xf2/0x250
[   81.934628][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   81.939842][  T288]  ? filldir+0x690/0x690
[   81.944123][  T288]  ? __x64_sys_umount+0x12d/0x170
[   81.949342][  T288]  ? debug_smp_processor_id+0x17/0x20
[   81.954720][  T288]  __x64_sys_getdents64+0x7b/0x90
[   81.959746][  T288]  x64_sys_call+0x592/0x9a0
[   81.964259][  T288]  do_syscall_64+0x4c/0xa0
[   81.969138][  T288]  ? clear_bhb_loop+0x50/0xa0
[   81.973819][  T288]  ? clear_bhb_loop+0x50/0xa0
[   81.978490][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.984389][  T288] RIP: 0033:0x7fe768f347f3
[   81.988802][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   82.008510][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   82.016924][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   82.024899][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   82.032871][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   82.040843][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   82.048819][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   82.056792][  T288]  </TASK>
[   82.074843][  T940] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   82.092508][  T940] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #15: comm syz.1.167: mark_inode_dirty error
[   82.111200][  T940] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   82.135795][  T940] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #15: comm syz.1.167: mark_inode_dirty error
[   82.174102][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   82.180334][  T940] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.167: Invalid block bitmap block 2 in block_group 0
[   82.193742][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   82.201227][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   82.211381][  T288] Call Trace:
[   82.214670][  T288]  <TASK>
[   82.217609][  T288]  __dump_stack+0x21/0x30
[   82.221956][  T288]  dump_stack_lvl+0x110/0x170
[   82.226655][  T288]  ? show_regs_print_info+0x20/0x20
[   82.231957][  T288]  dump_stack+0x15/0x20
[   82.235491][  T940] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   82.236129][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   82.250857][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   82.253880][  T940] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #15: comm syz.1.167: mark_inode_dirty error
[   82.256331][  T288]  ? f2fs_get_block+0x140/0x140
[   82.256356][  T288]  ? may_link+0x3e8/0x560
[   82.256374][  T288]  ? may_create+0x470/0x470
[   82.281229][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   82.286638][  T288]  f2fs_empty_dir+0xca/0x240
[   82.287451][  T940] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   82.291240][  T288]  f2fs_rmdir+0x3f/0x70
[   82.291263][  T288]  vfs_rmdir+0x313/0x460
[   82.291282][  T288]  do_rmdir+0x261/0x6b0
[   82.313256][  T288]  ? d_delete_notify+0x160/0x160
[   82.318208][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   82.319007][  T940] EXT4-fs error (device loop1): ext4_ext_truncate:4472: inode #15: comm syz.1.167: mark_inode_dirty error
[   82.323067][  T288]  x64_sys_call+0x4c0/0x9a0
[   82.323091][  T288]  do_syscall_64+0x4c/0xa0
[   82.343629][  T288]  ? clear_bhb_loop+0x50/0xa0
[   82.348450][  T288]  ? clear_bhb_loop+0x50/0xa0
[   82.353147][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.355939][  T940] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   82.359051][  T288] RIP: 0033:0x7fe768f0af77
[   82.359074][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.392445][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   82.400893][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   82.408976][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   82.416973][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   82.424980][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   82.432972][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   82.441055][  T288]  </TASK>
[   82.447474][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   82.460249][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   82.467759][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   82.477836][  T288] Call Trace:
[   82.481135][  T288]  <TASK>
[   82.484077][  T288]  __dump_stack+0x21/0x30
[   82.488520][  T288]  dump_stack_lvl+0x110/0x170
[   82.493236][  T288]  ? show_regs_print_info+0x20/0x20
[   82.498450][  T288]  dump_stack+0x15/0x20
[   82.502618][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   82.508080][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   82.513584][  T288]  ? f2fs_get_block+0x140/0x140
[   82.518461][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   82.523941][  T288]  f2fs_find_data_page+0x189/0x3c0
[   82.529194][  T288]  f2fs_readdir+0x4af/0x9e0
[   82.533716][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   82.538932][  T288]  ? avc_policy_seqno+0x1b/0x70
[   82.543801][  T288]  ? down_read_killable+0xc1/0x110
[   82.548956][  T288]  ? security_file_permission+0x83/0xa0
[   82.554514][  T288]  iterate_dir+0x260/0x600
[   82.558949][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   82.564196][  T288]  __se_sys_getdents64+0xf2/0x250
[   82.569237][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   82.574453][  T288]  ? filldir+0x690/0x690
[   82.578709][  T288]  ? __x64_sys_umount+0x12d/0x170
[   82.583749][  T288]  ? debug_smp_processor_id+0x17/0x20
[   82.589139][  T288]  __x64_sys_getdents64+0x7b/0x90
[   82.594181][  T288]  x64_sys_call+0x592/0x9a0
[   82.598782][  T288]  do_syscall_64+0x4c/0xa0
[   82.603217][  T288]  ? clear_bhb_loop+0x50/0xa0
[   82.607914][  T288]  ? clear_bhb_loop+0x50/0xa0
[   82.612629][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.618564][  T288] RIP: 0033:0x7fe768f347f3
[   82.623196][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   82.642824][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   82.651264][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   82.659244][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   82.667227][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   82.675308][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   82.683287][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   82.691271][  T288]  </TASK>
[   82.693809][  T938] EXT4-fs (loop0): shut down requested (2)
[   82.701924][    T8] Quota error (device loop1): qtree_write_dquot: dquota write failed
[   82.710601][    T8] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[   82.724718][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   82.731805][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   82.739382][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   82.749553][  T288] Call Trace:
[   82.752848][  T288]  <TASK>
[   82.755777][  T288]  __dump_stack+0x21/0x30
[   82.760186][  T288]  dump_stack_lvl+0x110/0x170
[   82.764885][  T288]  ? show_regs_print_info+0x20/0x20
[   82.770095][  T288]  dump_stack+0x15/0x20
[   82.774252][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   82.779637][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   82.785095][  T288]  ? f2fs_get_block+0x140/0x140
[   82.789947][  T288]  ? may_link+0x3e8/0x560
[   82.794373][  T288]  ? may_create+0x470/0x470
[   82.798879][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   82.804253][  T288]  f2fs_empty_dir+0xca/0x240
[   82.808855][  T288]  f2fs_rmdir+0x3f/0x70
[   82.813008][  T288]  vfs_rmdir+0x313/0x460
[   82.817252][  T288]  do_rmdir+0x261/0x6b0
[   82.821415][  T288]  ? d_delete_notify+0x160/0x160
[   82.826357][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   82.831207][  T288]  x64_sys_call+0x4c0/0x9a0
[   82.835709][  T288]  do_syscall_64+0x4c/0xa0
[   82.840125][  T288]  ? clear_bhb_loop+0x50/0xa0
[   82.844802][  T288]  ? clear_bhb_loop+0x50/0xa0
[   82.849476][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.855364][  T288] RIP: 0033:0x7fe768f0af77
[   82.859777][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.879381][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   82.887886][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   82.895857][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   82.903825][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   82.911892][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   82.919888][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   82.928049][  T288]  </TASK>
[   82.941538][    T8] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   82.952435][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   82.958727][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   82.961139][  T963] loop3: detected capacity change from 0 to 512
[   82.966205][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   82.966220][  T288] Call Trace:
[   82.966226][  T288]  <TASK>
[   82.966232][  T288]  __dump_stack+0x21/0x30
[   82.966259][  T288]  dump_stack_lvl+0x110/0x170
[   82.966277][  T288]  ? show_regs_print_info+0x20/0x20
[   83.003235][  T288]  dump_stack+0x15/0x20
[   83.007419][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   83.012995][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   83.015297][    T8] Quota error (device loop1): qtree_write_dquot: dquota write failed
[   83.018479][  T288]  ? f2fs_get_block+0x140/0x140
[   83.031392][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   83.036865][  T288]  f2fs_find_data_page+0x189/0x3c0
[   83.042093][  T288]  f2fs_readdir+0x4af/0x9e0
[   83.046608][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   83.051809][  T288]  ? avc_policy_seqno+0x1b/0x70
[   83.056664][  T288]  ? down_read_killable+0xc1/0x110
[   83.061784][  T288]  ? security_file_permission+0x83/0xa0
[   83.067334][  T288]  iterate_dir+0x260/0x600
[   83.071756][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   83.076958][  T288]  __se_sys_getdents64+0xf2/0x250
[   83.081984][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   83.087198][  T288]  ? filldir+0x690/0x690
[   83.091470][  T288]  ? debug_smp_processor_id+0x17/0x20
[   83.096846][  T288]  __x64_sys_getdents64+0x7b/0x90
[   83.101868][  T288]  x64_sys_call+0x592/0x9a0
[   83.106371][  T288]  do_syscall_64+0x4c/0xa0
[   83.110796][  T288]  ? clear_bhb_loop+0x50/0xa0
[   83.115474][  T288]  ? clear_bhb_loop+0x50/0xa0
[   83.120148][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   83.126045][  T288] RIP: 0033:0x7fe768f347f3
[   83.130461][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   83.150064][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   83.158483][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   83.166460][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   83.174429][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   83.182398][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   83.190368][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   83.198345][  T288]  </TASK>
[   83.203443][    T8] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[   83.223667][  T938] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[   83.250251][  T938] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[   83.259286][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   83.265632][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   83.271676][  T938] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[   83.273110][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   83.273124][  T288] Call Trace:
[   83.273130][  T288]  <TASK>
[   83.298183][  T288]  __dump_stack+0x21/0x30
[   83.302388][  T963] EXT4-fs (loop3): orphan cleanup on readonly fs
[   83.302636][  T288]  dump_stack_lvl+0x110/0x170
[   83.310088][  T963] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #3: comm syz.3.172: corrupted inode contents
[   83.313922][  T288]  ? show_regs_print_info+0x20/0x20
[   83.326001][  T963] EXT4-fs error (device loop3): ext4_dirty_inode:6108: inode #3: comm syz.3.172: mark_inode_dirty error
[   83.330748][  T288]  dump_stack+0x15/0x20
[   83.342466][  T963] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #3: comm syz.3.172: corrupted inode contents
[   83.345998][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   83.346028][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   83.346046][  T288]  ? f2fs_get_block+0x140/0x140
[   83.358075][  T963] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.172: mark_inode_dirty error
[   83.363032][  T288]  ? may_link+0x3e8/0x560
[   83.369014][  T963] Quota error (device loop3): write_blk: dquota write failed
[   83.373336][  T288]  ? may_create+0x470/0x470
[   83.388413][  T963] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.172: Failed to acquire dquot type 0
[   83.388771][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   83.396940][  T963] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #16: comm syz.3.172: corrupted inode contents
[   83.400748][  T288]  f2fs_empty_dir+0xca/0x240
[   83.412216][  T963] EXT4-fs error (device loop3): ext4_dirty_inode:6108: inode #16: comm syz.3.172: mark_inode_dirty error
[   83.417400][  T288]  f2fs_rmdir+0x3f/0x70
[   83.417420][  T288]  vfs_rmdir+0x313/0x460
[   83.417440][  T288]  do_rmdir+0x261/0x6b0
[   83.429507][  T963] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #16: comm syz.3.172: corrupted inode contents
[   83.433721][  T288]  ? d_delete_notify+0x160/0x160
[   83.445638][  T963] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.172: mark_inode_dirty error
[   83.449359][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   83.453691][  T963] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #16: comm syz.3.172: corrupted inode contents
[   83.457744][  T288]  x64_sys_call+0x4c0/0x9a0
[   83.457767][  T288]  do_syscall_64+0x4c/0xa0
[   83.457787][  T288]  ? clear_bhb_loop+0x50/0xa0
[   83.469929][  T963] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   83.474425][  T288]  ? clear_bhb_loop+0x50/0xa0
[   83.485792][  T963] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #16: comm syz.3.172: corrupted inode contents
[   83.490371][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   83.502345][  T963] EXT4-fs error (device loop3): ext4_truncate:4317: inode #16: comm syz.3.172: mark_inode_dirty error
[   83.506564][  T288] RIP: 0033:0x7fe768f0af77
[   83.506583][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.506598][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207
[   83.511288][  T963] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   83.515692][  T288]  ORIG_RAX: 0000000000000107
[   83.515703][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   83.515717][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   83.515730][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   83.524797][  T963] EXT4-fs (loop3): 1 truncate cleaned up
[   83.528887][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   83.528903][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   83.528919][  T288]  </TASK>
[   83.531048][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   83.547400][  T963] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,nobarrier,,errors=continue. Quota mode: writeback.
[   83.558146][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   83.676552][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   83.686617][  T288] Call Trace:
[   83.689939][  T288]  <TASK>
[   83.693055][  T288]  __dump_stack+0x21/0x30
[   83.697406][  T288]  dump_stack_lvl+0x110/0x170
[   83.702093][  T288]  ? show_regs_print_info+0x20/0x20
[   83.707299][  T288]  dump_stack+0x15/0x20
[   83.711458][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   83.716840][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   83.722300][  T288]  ? f2fs_get_block+0x140/0x140
[   83.727244][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   83.732704][  T288]  f2fs_find_data_page+0x189/0x3c0
[   83.737815][  T288]  f2fs_readdir+0x4af/0x9e0
[   83.742321][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   83.747516][  T288]  ? avc_policy_seqno+0x1b/0x70
[   83.752365][  T288]  ? down_read_killable+0xc1/0x110
[   83.757482][  T288]  ? security_file_permission+0x83/0xa0
[   83.763032][  T288]  iterate_dir+0x260/0x600
[   83.767451][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   83.772654][  T288]  __se_sys_getdents64+0xf2/0x250
[   83.777678][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   83.782875][  T288]  ? filldir+0x690/0x690
[   83.787121][  T288]  ? __x64_sys_umount+0x12d/0x170
[   83.792176][  T288]  ? debug_smp_processor_id+0x17/0x20
[   83.797544][  T288]  __x64_sys_getdents64+0x7b/0x90
[   83.802570][  T288]  x64_sys_call+0x592/0x9a0
[   83.807072][  T288]  do_syscall_64+0x4c/0xa0
[   83.811492][  T288]  ? clear_bhb_loop+0x50/0xa0
[   83.816185][  T288]  ? clear_bhb_loop+0x50/0xa0
[   83.820870][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   83.826760][  T288] RIP: 0033:0x7fe768f347f3
[   83.831181][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   83.850789][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   83.859214][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   83.867212][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   83.875414][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   83.883384][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   83.891351][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   83.899326][  T288]  </TASK>
[   83.903886][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   83.910077][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   83.917559][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   83.927629][  T288] Call Trace:
[   83.930920][  T288]  <TASK>
[   83.933855][  T288]  __dump_stack+0x21/0x30
[   83.938205][  T288]  dump_stack_lvl+0x110/0x170
[   83.942889][  T288]  ? show_regs_print_info+0x20/0x20
[   83.948182][  T288]  dump_stack+0x15/0x20
[   83.952340][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   83.957804][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   83.963261][  T288]  ? f2fs_get_block+0x140/0x140
[   83.968109][  T288]  ? may_link+0x3e8/0x560
[   83.972435][  T288]  ? may_create+0x470/0x470
[   83.976936][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   83.982308][  T288]  f2fs_empty_dir+0xca/0x240
[   83.986993][  T288]  f2fs_rmdir+0x3f/0x70
[   83.991149][  T288]  vfs_rmdir+0x313/0x460
[   83.995479][  T288]  do_rmdir+0x261/0x6b0
[   83.999637][  T288]  ? d_delete_notify+0x160/0x160
[   84.004660][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   84.009513][  T288]  x64_sys_call+0x4c0/0x9a0
[   84.014014][  T288]  do_syscall_64+0x4c/0xa0
[   84.018431][  T288]  ? clear_bhb_loop+0x50/0xa0
[   84.023106][  T288]  ? clear_bhb_loop+0x50/0xa0
[   84.027781][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   84.033672][  T288] RIP: 0033:0x7fe768f0af77
[   84.038087][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.057689][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   84.066103][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   84.074252][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   84.082235][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   84.090216][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   84.098277][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   84.106255][  T288]  </TASK>
[   84.114802][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   84.135280][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   84.142813][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   84.152875][  T288] Call Trace:
[   84.156192][  T288]  <TASK>
[   84.159221][  T288]  __dump_stack+0x21/0x30
[   84.163566][  T288]  dump_stack_lvl+0x110/0x170
[   84.168248][  T288]  ? show_regs_print_info+0x20/0x20
[   84.173581][  T288]  dump_stack+0x15/0x20
[   84.177746][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   84.183124][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   84.188581][  T288]  ? f2fs_get_block+0x140/0x140
[   84.193431][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   84.198888][  T288]  f2fs_find_data_page+0x189/0x3c0
[   84.204004][  T288]  f2fs_readdir+0x4af/0x9e0
[   84.208508][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   84.213707][  T288]  ? avc_policy_seqno+0x1b/0x70
[   84.218557][  T288]  ? down_read_killable+0xc1/0x110
[   84.223666][  T288]  ? security_file_permission+0x83/0xa0
[   84.229226][  T288]  iterate_dir+0x260/0x600
[   84.233654][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   84.238945][  T288]  __se_sys_getdents64+0xf2/0x250
[   84.243983][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   84.249184][  T288]  ? filldir+0x690/0x690
[   84.253429][  T288]  ? __x64_sys_umount+0x12d/0x170
[   84.258450][  T288]  ? debug_smp_processor_id+0x17/0x20
[   84.263823][  T288]  __x64_sys_getdents64+0x7b/0x90
[   84.268894][  T288]  x64_sys_call+0x592/0x9a0
[   84.273426][  T288]  do_syscall_64+0x4c/0xa0
[   84.277866][  T288]  ? clear_bhb_loop+0x50/0xa0
[   84.282551][  T288]  ? clear_bhb_loop+0x50/0xa0
[   84.287231][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   84.293124][  T288] RIP: 0033:0x7fe768f347f3
[   84.297547][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   84.317164][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   84.325580][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   84.333551][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   84.341525][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   84.349499][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   84.357473][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   84.365456][  T288]  </TASK>
[   84.400105][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   84.412722][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   84.420246][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   84.430340][  T288] Call Trace:
[   84.433641][  T288]  <TASK>
[   84.436596][  T288]  __dump_stack+0x21/0x30
[   84.440970][  T288]  dump_stack_lvl+0x110/0x170
[   84.445674][  T288]  ? show_regs_print_info+0x20/0x20
[   84.450902][  T288]  dump_stack+0x15/0x20
[   84.455085][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   84.460494][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   84.465979][  T288]  ? f2fs_get_block+0x140/0x140
[   84.470856][  T288]  ? may_link+0x3e8/0x560
[   84.475209][  T288]  ? may_create+0x470/0x470
[   84.478304][  T978] loop0: detected capacity change from 0 to 256
[   84.479744][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   84.491361][  T288]  f2fs_empty_dir+0xca/0x240
[   84.495970][  T288]  f2fs_rmdir+0x3f/0x70
[   84.500148][  T288]  vfs_rmdir+0x313/0x460
[   84.504396][  T288]  do_rmdir+0x261/0x6b0
[   84.508554][  T288]  ? d_delete_notify+0x160/0x160
[   84.513588][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   84.518624][  T288]  x64_sys_call+0x4c0/0x9a0
[   84.523142][  T288]  do_syscall_64+0x4c/0xa0
[   84.527581][  T288]  ? clear_bhb_loop+0x50/0xa0
[   84.532304][  T288]  ? clear_bhb_loop+0x50/0xa0
[   84.536994][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   84.542890][  T288] RIP: 0033:0x7fe768f0af77
[   84.547304][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.566910][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   84.575323][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   84.583428][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   84.591421][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   84.599508][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   84.607494][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   84.615476][  T288]  </TASK>
[   84.662557][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   84.668652][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   84.676123][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   84.686290][  T288] Call Trace:
[   84.689565][  T288]  <TASK>
[   84.692575][  T288]  __dump_stack+0x21/0x30
[   84.696899][  T288]  dump_stack_lvl+0x110/0x170
[   84.701612][  T288]  ? show_regs_print_info+0x20/0x20
[   84.707176][  T288]  dump_stack+0x15/0x20
[   84.711339][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   84.716915][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   84.722382][  T288]  ? f2fs_get_block+0x140/0x140
[   84.727240][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   84.732696][  T288]  f2fs_find_data_page+0x189/0x3c0
[   84.737800][  T288]  f2fs_readdir+0x4af/0x9e0
[   84.742310][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   84.747496][  T288]  ? avc_policy_seqno+0x1b/0x70
[   84.752724][  T288]  ? down_read_killable+0xc1/0x110
[   84.757829][  T288]  ? security_file_permission+0x83/0xa0
[   84.763364][  T288]  iterate_dir+0x260/0x600
[   84.767771][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   84.772969][  T288]  __se_sys_getdents64+0xf2/0x250
[   84.778003][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   84.783210][  T288]  ? filldir+0x690/0x690
[   84.787473][  T288]  ? __x64_sys_umount+0x12d/0x170
[   84.792489][  T288]  ? debug_smp_processor_id+0x17/0x20
[   84.795265][   T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   84.797856][  T288]  __x64_sys_getdents64+0x7b/0x90
[   84.810326][  T288]  x64_sys_call+0x592/0x9a0
[   84.814829][  T288]  do_syscall_64+0x4c/0xa0
[   84.819235][  T288]  ? clear_bhb_loop+0x50/0xa0
[   84.823899][  T288]  ? clear_bhb_loop+0x50/0xa0
[   84.828565][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   84.834444][  T288] RIP: 0033:0x7fe768f347f3
[   84.838843][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   84.858477][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   84.866971][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   84.874928][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   84.882885][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   84.890846][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   84.898806][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   84.906767][  T288]  </TASK>
[   84.912001][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   84.944874][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   84.952378][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   84.962450][  T288] Call Trace:
[   84.965738][  T288]  <TASK>
[   84.968705][  T288]  __dump_stack+0x21/0x30
[   84.973064][  T288]  dump_stack_lvl+0x110/0x170
[   84.977750][  T288]  ? show_regs_print_info+0x20/0x20
[   84.982972][  T288]  dump_stack+0x15/0x20
[   84.987141][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   84.992529][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   84.998085][  T288]  ? f2fs_get_block+0x140/0x140
[   85.003039][  T288]  ? may_link+0x3e8/0x560
[   85.007380][  T288]  ? irqentry_exit_cond_resched+0x29/0x30
[   85.013123][  T288]  ? may_create+0x470/0x470
[   85.017694][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   85.023172][  T288]  f2fs_empty_dir+0xca/0x240
[   85.027775][  T288]  f2fs_rmdir+0x3f/0x70
[   85.031944][  T288]  vfs_rmdir+0x313/0x460
[   85.036200][  T288]  do_rmdir+0x261/0x6b0
[   85.040371][  T288]  ? d_delete_notify+0x160/0x160
[   85.045327][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   85.050201][  T288]  x64_sys_call+0x4c0/0x9a0
[   85.054715][  T288]  do_syscall_64+0x4c/0xa0
[   85.059132][  T288]  ? clear_bhb_loop+0x50/0xa0
[   85.063806][  T288]  ? clear_bhb_loop+0x50/0xa0
[   85.068480][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   85.074373][  T288] RIP: 0033:0x7fe768f0af77
[   85.078785][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.098391][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   85.106890][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   85.114861][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   85.122829][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   85.130799][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   85.138768][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   85.146748][  T288]  </TASK>
[   85.161121][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   85.167499][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   85.175087][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   85.185175][  T288] Call Trace:
[   85.188488][  T288]  <TASK>
[   85.191435][  T288]  __dump_stack+0x21/0x30
[   85.195800][  T288]  dump_stack_lvl+0x110/0x170
[   85.200505][  T288]  ? show_regs_print_info+0x20/0x20
[   85.205861][  T288]  dump_stack+0x15/0x20
[   85.210053][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   85.215462][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   85.217647][  T985] FAULT_INJECTION: forcing a failure.
[   85.217647][  T985] name failslab, interval 1, probability 0, space 0, times 0
[   85.220950][  T288]  ? f2fs_get_block+0x140/0x140
[   85.220978][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   85.243984][  T288]  f2fs_find_data_page+0x189/0x3c0
[   85.249130][  T288]  f2fs_readdir+0x4af/0x9e0
[   85.249164][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   85.258871][  T288]  ? avc_policy_seqno+0x1b/0x70
[   85.259308][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.263728][  T288]  ? down_read_killable+0xc1/0x110
[   85.272735][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.277648][  T288]  ? security_file_permission+0x83/0xa0
[   85.277674][  T288]  iterate_dir+0x260/0x600
[   85.277694][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   85.286737][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.292166][  T288]  __se_sys_getdents64+0xf2/0x250
[   85.296806][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.301764][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   85.310772][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.315569][  T288]  ? filldir+0x690/0x690
[   85.315591][  T288]  ? __x64_sys_umount+0x12d/0x170
[   85.324479][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.329524][  T288]  ? debug_smp_processor_id+0x17/0x20
[   85.329546][  T288]  __x64_sys_getdents64+0x7b/0x90
[   85.329565][  T288]  x64_sys_call+0x592/0x9a0
[   85.329582][  T288]  do_syscall_64+0x4c/0xa0
[   85.338471][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.342570][  T288]  ? clear_bhb_loop+0x50/0xa0
[   85.347783][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.356331][  T288]  ? clear_bhb_loop+0x50/0xa0
[   85.356351][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   85.361843][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.366723][  T288] RIP: 0033:0x7fe768f347f3
[   85.366742][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   85.371353][  T986] netlink: 7 bytes leftover after parsing attributes in process `syz.4.176'.
[   85.375637][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   85.375662][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   85.466419][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   85.474400][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   85.482384][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   85.490361][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   85.498340][  T288]  </TASK>
[   85.501362][  T985] CPU: 1 PID: 985 Comm: syz.3.178 Not tainted syzkaller #0
[   85.502589][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   85.508580][  T985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   85.508592][  T985] Call Trace:
[   85.508597][  T985]  <TASK>
[   85.508604][  T985]  __dump_stack+0x21/0x30
[   85.508630][  T985]  dump_stack_lvl+0x110/0x170
[   85.508650][  T985]  ? show_regs_print_info+0x20/0x20
[   85.508672][  T985]  ? genl_rcv_msg+0x2e7/0xfa0
[   85.549778][  T985]  dump_stack+0x15/0x20
[   85.553943][  T985]  should_fail+0x3c1/0x510
[   85.558370][  T985]  __should_failslab+0xa4/0xe0
[   85.563139][  T985]  should_failslab+0x9/0x20
[   85.567672][  T985]  slab_pre_alloc_hook+0x3b/0xe0
[   85.572613][  T985]  ? __alloc_skb+0xe0/0x740
[   85.577117][  T985]  kmem_cache_alloc+0x44/0x260
[   85.581890][  T985]  __alloc_skb+0xe0/0x740
[   85.586218][  T985]  netlink_ack+0x372/0xb50
[   85.590643][  T985]  ? vfs_writev+0x2df/0x570
[   85.595145][  T985]  ? wg_get_device_done+0xf0/0xf0
[   85.600269][  T985]  ? netlink_dump+0xd60/0xd60
[   85.604955][  T985]  ? selinux_nlmsg_lookup+0x33c/0x4c0
[   85.610346][  T985]  ? irqentry_exit+0x37/0x40
[   85.614952][  T985]  ? exc_page_fault+0x5e/0xb0
[   85.619638][  T985]  netlink_rcv_skb+0x27a/0x440
[   85.624411][  T985]  ? genl_bind+0x2d0/0x2d0
[   85.628833][  T985]  ? netlink_ack+0xb50/0xb50
[   85.633601][  T985]  ? down_read+0xab/0x100
[   85.637932][  T985]  ? __down_common+0x380/0x380
[   85.642699][  T985]  ? __netlink_lookup+0x387/0x3b0
[   85.647728][  T985]  genl_rcv+0x28/0x40
[   85.651920][  T985]  netlink_unicast+0x876/0xa40
[   85.656690][  T985]  netlink_sendmsg+0x879/0xb80
[   85.661458][  T985]  ? netlink_getsockopt+0x530/0x530
[   85.666693][  T985]  ? __x64_sys_writev+0x7d/0x90
[   85.671547][  T985]  ? security_socket_sendmsg+0x82/0xa0
[   85.677034][  T985]  sock_write_iter+0x2a6/0x3a0
[   85.681814][  T985]  ? sock_read_iter+0x380/0x380
[   85.686666][  T985]  ? file_has_perm+0x52d/0x700
[   85.691439][  T985]  do_iter_readv_writev+0x478/0x5f0
[   85.696648][  T985]  ? generic_file_rw_checks+0x2a0/0x2a0
[   85.702193][  T985]  ? fsnotify_perm+0x67/0x5b0
[   85.706875][  T985]  ? security_file_permission+0x79/0xa0
[   85.712423][  T985]  ? security_file_permission+0x83/0xa0
[   85.717967][  T985]  do_iter_write+0x1fa/0x7b0
[   85.722563][  T985]  vfs_writev+0x2df/0x570
[   85.726888][  T985]  ? do_writev+0x2c0/0x2c0
[   85.731302][  T985]  ? __fget_files+0x2c4/0x320
[   85.735980][  T985]  ? __fdget_pos+0x1f7/0x380
[   85.740657][  T985]  ? do_writev+0x76/0x2c0
[   85.745003][  T985]  do_writev+0x14e/0x2c0
[   85.749268][  T985]  ? do_readv+0x450/0x450
[   85.753618][  T985]  ? debug_smp_processor_id+0x17/0x20
[   85.758998][  T985]  __x64_sys_writev+0x7d/0x90
[   85.763815][  T985]  x64_sys_call+0x974/0x9a0
[   85.768341][  T985]  do_syscall_64+0x4c/0xa0
[   85.772777][  T985]  ? clear_bhb_loop+0x50/0xa0
[   85.777460][  T985]  ? clear_bhb_loop+0x50/0xa0
[   85.782278][  T985]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   85.788171][  T985] RIP: 0033:0x7f5048150e59
[   85.792588][  T985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.812193][  T985] RSP: 002b:00007f5046bab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   85.820608][  T985] RAX: ffffffffffffffda RBX: 00007f50483c9fa0 RCX: 00007f5048150e59
[   85.828582][  T985] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000003
[   85.836555][  T985] RBP: 00007f5046bab090 R08: 0000000000000000 R09: 0000000000000000
[   85.844539][  T985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   85.852694][  T985] R13: 00007f50483ca038 R14: 00007f50483c9fa0 R15: 00007ffe91c3e5d8
[   85.860872][  T985]  </TASK>
[   85.864573][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   85.872064][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   85.882123][  T288] Call Trace:
[   85.885426][  T288]  <TASK>
[   85.888529][  T288]  __dump_stack+0x21/0x30
[   85.892868][  T288]  dump_stack_lvl+0x110/0x170
[   85.897564][  T288]  ? show_regs_print_info+0x20/0x20
[   85.902853][  T288]  dump_stack+0x15/0x20
[   85.907007][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   85.912385][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   85.917857][  T288]  ? f2fs_get_block+0x140/0x140
[   85.922706][  T288]  ? may_link+0x3e8/0x560
[   85.927034][  T288]  ? may_create+0x470/0x470
[   85.931540][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   85.936915][  T288]  f2fs_empty_dir+0xca/0x240
[   85.941508][  T288]  f2fs_rmdir+0x3f/0x70
[   85.945674][  T288]  vfs_rmdir+0x313/0x460
[   85.950018][  T288]  do_rmdir+0x261/0x6b0
[   85.954203][  T288]  ? d_delete_notify+0x160/0x160
[   85.959170][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   85.964031][  T288]  x64_sys_call+0x4c0/0x9a0
[   85.968536][  T288]  do_syscall_64+0x4c/0xa0
[   85.972956][  T288]  ? clear_bhb_loop+0x50/0xa0
[   85.977635][  T288]  ? clear_bhb_loop+0x50/0xa0
[   85.982307][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   85.988198][  T288] RIP: 0033:0x7fe768f0af77
[   85.992638][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.012242][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   86.020666][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   86.028643][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   86.036617][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   86.044767][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   86.052738][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   86.060710][  T288]  </TASK>
[   86.064700][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   86.071056][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   86.078553][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   86.088629][  T288] Call Trace:
[   86.091920][  T288]  <TASK>
[   86.094854][  T288]  __dump_stack+0x21/0x30
[   86.099195][  T288]  dump_stack_lvl+0x110/0x170
[   86.103873][  T288]  ? show_regs_print_info+0x20/0x20
[   86.109075][  T288]  dump_stack+0x15/0x20
[   86.113236][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   86.118618][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   86.124096][  T288]  ? f2fs_get_block+0x140/0x140
[   86.129145][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   86.134626][  T288]  f2fs_find_data_page+0x189/0x3c0
[   86.139740][  T288]  f2fs_readdir+0x4af/0x9e0
[   86.144266][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   86.149638][  T288]  ? avc_policy_seqno+0x1b/0x70
[   86.154491][  T288]  ? down_read_killable+0xc1/0x110
[   86.159601][  T288]  ? security_file_permission+0x83/0xa0
[   86.165184][  T288]  iterate_dir+0x260/0x600
[   86.169884][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   86.175109][  T288]  __se_sys_getdents64+0xf2/0x250
[   86.180157][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   86.185379][  T288]  ? filldir+0x690/0x690
[   86.189633][  T288]  ? __x64_sys_umount+0x12d/0x170
[   86.194659][  T288]  ? debug_smp_processor_id+0x17/0x20
[   86.200030][  T288]  __x64_sys_getdents64+0x7b/0x90
[   86.205073][  T288]  x64_sys_call+0x592/0x9a0
[   86.209598][  T288]  do_syscall_64+0x4c/0xa0
[   86.214027][  T288]  ? clear_bhb_loop+0x50/0xa0
[   86.218714][  T288]  ? clear_bhb_loop+0x50/0xa0
[   86.223390][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.229286][  T288] RIP: 0033:0x7fe768f347f3
[   86.233707][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   86.253400][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   86.261904][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   86.269876][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   86.277871][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   86.285847][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   86.293905][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   86.301888][  T288]  </TASK>
[   86.326504][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   86.332615][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   86.340101][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   86.350176][  T288] Call Trace:
[   86.351150][  T993] loop4: detected capacity change from 0 to 256
[   86.353479][  T288]  <TASK>
[   86.353489][  T288]  __dump_stack+0x21/0x30
[   86.353516][  T288]  dump_stack_lvl+0x110/0x170
[   86.371661][  T288]  ? show_regs_print_info+0x20/0x20
[   86.376974][  T288]  dump_stack+0x15/0x20
[   86.381164][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   86.386625][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   86.392094][  T288]  ? f2fs_get_block+0x140/0x140
[   86.396948][  T288]  ? may_link+0x3e8/0x560
[   86.401364][  T288]  ? may_create+0x470/0x470
[   86.405883][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   86.411271][  T288]  f2fs_empty_dir+0xca/0x240
[   86.415920][  T288]  f2fs_rmdir+0x3f/0x70
[   86.420161][  T288]  vfs_rmdir+0x313/0x460
[   86.424421][  T288]  do_rmdir+0x261/0x6b0
[   86.428573][  T288]  ? d_delete_notify+0x160/0x160
[   86.433509][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   86.438357][  T288]  x64_sys_call+0x4c0/0x9a0
[   86.442925][  T288]  do_syscall_64+0x4c/0xa0
[   86.447361][  T288]  ? clear_bhb_loop+0x50/0xa0
[   86.452182][  T288]  ? clear_bhb_loop+0x50/0xa0
[   86.456860][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.462748][  T288] RIP: 0033:0x7fe768f0af77
[   86.467156][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.486865][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   86.495357][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   86.503325][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   86.511299][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   86.519289][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   86.527254][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   86.535240][  T288]  </TASK>
[   86.540076][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   86.546198][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   86.553692][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   86.563778][  T288] Call Trace:
[   86.567072][  T288]  <TASK>
[   86.570052][  T288]  __dump_stack+0x21/0x30
[   86.574399][  T288]  dump_stack_lvl+0x110/0x170
[   86.579089][  T288]  ? show_regs_print_info+0x20/0x20
[   86.584301][  T288]  dump_stack+0x15/0x20
[   86.588461][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   86.593833][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   86.599290][  T288]  ? f2fs_get_block+0x140/0x140
[   86.604152][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   86.609614][  T288]  f2fs_find_data_page+0x189/0x3c0
[   86.614725][  T288]  f2fs_readdir+0x4af/0x9e0
[   86.619238][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   86.624432][  T288]  ? avc_policy_seqno+0x1b/0x70
[   86.629288][  T288]  ? down_read_killable+0xc1/0x110
[   86.634410][  T288]  ? security_file_permission+0x83/0xa0
[   86.639956][  T288]  iterate_dir+0x260/0x600
[   86.644385][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   86.649586][  T288]  __se_sys_getdents64+0xf2/0x250
[   86.654613][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   86.659916][  T288]  ? filldir+0x690/0x690
[   86.664161][  T288]  ? __x64_sys_umount+0x12d/0x170
[   86.669185][  T288]  ? debug_smp_processor_id+0x17/0x20
[   86.674562][  T288]  __x64_sys_getdents64+0x7b/0x90
[   86.679674][  T288]  x64_sys_call+0x592/0x9a0
[   86.684181][  T288]  do_syscall_64+0x4c/0xa0
[   86.688602][  T288]  ? clear_bhb_loop+0x50/0xa0
[   86.693280][  T288]  ? clear_bhb_loop+0x50/0xa0
[   86.697966][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.703897][  T288] RIP: 0033:0x7fe768f347f3
[   86.708328][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   86.727933][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   86.736351][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   86.744400][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   86.752370][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   86.760339][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   86.768309][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   86.776285][  T288]  </TASK>
[   86.780181][   T30] kauditd_printk_skb: 3 callbacks suppressed
[   86.780194][   T30] audit: type=1400 audit(1780501995.981:222): avc:  denied  { ioctl } for  pid=994 comm="syz.0.181" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17160 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   86.814429][   T26] usb 2-1: unable to get BOS descriptor or descriptor too short
[   86.832616][  T996] netlink: 'syz.3.190': attribute type 28 has an invalid length.
[   86.845655][  T993] FAT-fs (loop4): Directory bread(block 64) failed
[   86.852222][  T993] FAT-fs (loop4): Directory bread(block 65) failed
[   86.858939][  T993] FAT-fs (loop4): Directory bread(block 66) failed
[   86.866197][   T30] audit: type=1400 audit(1780501996.201:223): avc:  denied  { create } for  pid=995 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   86.885513][  T993] FAT-fs (loop4): Directory bread(block 67) failed
[   86.892081][  T993] FAT-fs (loop4): Directory bread(block 68) failed
[   86.898670][   T30] audit: type=1400 audit(1780501996.201:224): avc:  denied  { write } for  pid=995 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   86.915277][   T26] usb 2-1: unable to read config index 0 descriptor/start: -71
[   86.919987][  T998] loop3: detected capacity change from 0 to 1024
[   86.925425][   T26] usb 2-1: can't read configurations, error -71
[   86.932626][  T993] FAT-fs (loop4): Directory bread(block 69) failed
[   86.948885][   T30] audit: type=1400 audit(1780501996.201:225): avc:  denied  { read } for  pid=994 comm="syz.0.181" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   86.955622][  T993] FAT-fs (loop4): Directory bread(block 70) failed
[   86.974025][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   86.985781][  T993] FAT-fs (loop4): Directory bread(block 71) failed
[   86.992844][  T993] FAT-fs (loop4): Directory bread(block 72) failed
[   86.999771][  T998] EXT4-fs (loop3): Ignoring removed orlov option
[   87.005228][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   87.006479][  T993] FAT-fs (loop4): Directory bread(block 73) failed
[   87.013573][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   87.013586][  T288] Call Trace:
[   87.013592][  T288]  <TASK>
[   87.013600][  T288]  __dump_stack+0x21/0x30
[   87.040696][  T288]  dump_stack_lvl+0x110/0x170
[   87.045409][  T288]  ? show_regs_print_info+0x20/0x20
[   87.050644][  T288]  dump_stack+0x15/0x20
[   87.054827][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   87.060240][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   87.065727][  T288]  ? f2fs_get_block+0x140/0x140
[   87.070607][  T288]  ? may_link+0x3e8/0x560
[   87.074954][  T288]  ? may_create+0x470/0x470
[   87.079500][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   87.084905][  T288]  f2fs_empty_dir+0xca/0x240
[   87.089531][  T288]  f2fs_rmdir+0x3f/0x70
[   87.093710][  T288]  vfs_rmdir+0x313/0x460
[   87.097981][  T288]  do_rmdir+0x261/0x6b0
[   87.102157][  T288]  ? d_delete_notify+0x160/0x160
[   87.107112][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   87.111995][  T288]  x64_sys_call+0x4c0/0x9a0
[   87.116535][  T288]  do_syscall_64+0x4c/0xa0
[   87.121065][  T288]  ? clear_bhb_loop+0x50/0xa0
[   87.125773][  T288]  ? clear_bhb_loop+0x50/0xa0
[   87.130479][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   87.136402][  T288] RIP: 0033:0x7fe768f0af77
[   87.140843][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.160473][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   87.168920][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   87.176927][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   87.184936][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   87.192939][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   87.200943][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   87.208680][  T998] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback.
[   87.208952][  T288]  </TASK>
[   87.212332][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   87.240382][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   87.247878][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   87.257959][  T288] Call Trace:
[   87.261271][  T288]  <TASK>
[   87.264222][  T288]  __dump_stack+0x21/0x30
[   87.268585][  T288]  dump_stack_lvl+0x110/0x170
[   87.273287][  T288]  ? show_regs_print_info+0x20/0x20
[   87.278515][  T288]  dump_stack+0x15/0x20
[   87.282698][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   87.288100][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   87.293585][  T288]  ? f2fs_get_block+0x140/0x140
[   87.298461][  T288]  ? selinux_inode_getattr+0x2c8/0x3e0
[   87.303959][  T288]  f2fs_find_data_page+0x189/0x3c0
[   87.309099][  T288]  f2fs_readdir+0x4af/0x9e0
[   87.313624][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   87.318866][  T288]  ? avc_policy_seqno+0x1b/0x70
[   87.323734][  T288]  ? down_read_killable+0xc1/0x110
[   87.328864][  T288]  ? security_file_permission+0x83/0xa0
[   87.334427][  T288]  iterate_dir+0x260/0x600
[   87.338843][  T288]  ? f2fs_fill_dentries+0xd10/0xd10
[   87.344032][  T288]  __se_sys_getdents64+0xf2/0x250
[   87.349048][  T288]  ? __x64_sys_getdents64+0x90/0x90
[   87.354256][  T288]  ? filldir+0x690/0x690
[   87.358508][  T288]  ? debug_smp_processor_id+0x17/0x20
[   87.363993][  T288]  __x64_sys_getdents64+0x7b/0x90
[   87.369061][  T288]  x64_sys_call+0x592/0x9a0
[   87.373562][  T288]  do_syscall_64+0x4c/0xa0
[   87.378013][  T288]  ? clear_bhb_loop+0x50/0xa0
[   87.382684][  T288]  ? clear_bhb_loop+0x50/0xa0
[   87.387351][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   87.393230][  T288] RIP: 0033:0x7fe768f347f3
[   87.397636][  T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   87.417229][  T288] RSP: 002b:00007ffe7a9fce88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   87.425639][  T288] RAX: ffffffffffffffda RBX: 00005555581ae950 RCX: 00007fe768f347f3
[   87.433604][  T288] RDX: 0000000000008000 RSI: 00005555581ae980 RDI: 0000000000000006
[   87.441574][  T288] RBP: 00005555581ae980 R08: 00007fe76915ce20 R09: 0000000000000001
[   87.449722][  T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555581ae954
[   87.457683][  T288] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffe7aa00220
[   87.465658][  T288]  </TASK>
[   91.890890][ T1007] fat__get_entry: 620 callbacks suppressed
[   91.891015][ T1007] FAT-fs (loop4): Directory bread(block 64) failed
[   91.903768][ T1007] FAT-fs (loop4): Directory bread(block 65) failed
[   91.910563][ T1007] FAT-fs (loop4): Directory bread(block 66) failed
[   91.917414][ T1007] FAT-fs (loop4): Directory bread(block 67) failed
[   91.924156][ T1007] FAT-fs (loop4): Directory bread(block 68) failed
[   91.930980][ T1007] FAT-fs (loop4): Directory bread(block 69) failed
[   91.937825][ T1007] FAT-fs (loop4): Directory bread(block 70) failed
[   91.944545][ T1007] FAT-fs (loop4): Directory bread(block 71) failed
[   91.951420][ T1007] FAT-fs (loop4): Directory bread(block 72) failed
[   91.958172][ T1007] FAT-fs (loop4): Directory bread(block 73) failed
[   93.658468][ T1006] attempt to access beyond end of device
[   93.658468][ T1006] loop4: rw=2049, want=1480, limit=256
[   93.669891][ T1006] attempt to access beyond end of device
[   93.669891][ T1006] loop4: rw=2049, want=1832, limit=256
[   93.681394][ T1006] attempt to access beyond end of device
[   93.681394][ T1006] loop4: rw=2049, want=2272, limit=256
[   93.686036][  T288] F2FS-fs (loop2): access invalid blkaddr:36
[   93.741813][  T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   93.749333][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   93.759408][  T288] Call Trace:
[   93.762707][  T288]  <TASK>
[   93.765667][  T288]  __dump_stack+0x21/0x30
[   93.770215][  T288]  dump_stack_lvl+0x110/0x170
[   93.774931][  T288]  ? show_regs_print_info+0x20/0x20
[   93.780157][  T288]  dump_stack+0x15/0x20
[   93.784326][  T288]  f2fs_is_valid_blkaddr+0xca0/0x12a0
[   93.789699][  T288]  f2fs_get_read_data_page+0x43f/0x6e0
[   93.795162][  T288]  ? f2fs_get_block+0x140/0x140
[   93.800020][  T288]  ? may_link+0x3e8/0x560
[   93.804351][  T288]  ? may_create+0x470/0x470
[   93.808853][  T288]  f2fs_get_lock_data_page+0x59/0x230
[   93.814229][  T288]  f2fs_empty_dir+0xca/0x240
[   93.818842][  T288]  f2fs_rmdir+0x3f/0x70
[   93.823009][  T288]  vfs_rmdir+0x313/0x460
[   93.827255][  T288]  do_rmdir+0x261/0x6b0
[   93.831592][  T288]  ? d_delete_notify+0x160/0x160
[   93.836528][  T288]  __x64_sys_unlinkat+0xc7/0xf0
[   93.841382][  T288]  x64_sys_call+0x4c0/0x9a0
[   93.845883][  T288]  do_syscall_64+0x4c/0xa0
[   93.850312][  T288]  ? clear_bhb_loop+0x50/0xa0
[   93.854987][  T288]  ? clear_bhb_loop+0x50/0xa0
[   93.859660][  T288]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   93.865551][  T288] RIP: 0033:0x7fe768f0af77
[   93.869968][  T288] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.889571][  T288] RSP: 002b:00007ffe7a9fceb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   93.897986][  T288] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe768f0af77
[   93.905967][  T288] RDX: 0000000000000200 RSI: 00007ffe7a9fe060 RDI: 00000000ffffff9c
[   93.913942][  T288] RBP: 00007fe768fa11ca R08: 0000000000008680 R09: 0000000000000001
[   93.921926][  T288] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffe7a9fe060
[   93.930037][  T288] R13: 00007fe768fa11ca R14: 000055555818b4e8 R15: 00007ffe7aa00220
[   93.938025][  T288]  </TASK>
[   93.969735][    T8] attempt to access beyond end of device
[   93.969735][    T8] loop4: rw=1, want=1240, limit=256
[   94.034254][ T1019] __nla_validate_parse: 43 callbacks suppressed
[   94.034273][ T1019] netlink: 64 bytes leftover after parsing attributes in process `syz.3.187'.
[   94.087921][ T1022] loop0: detected capacity change from 0 to 512
[   94.097744][ T1019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'.
[   94.107446][   T30] audit: type=1400 audit(1780502003.531:226): avc:  denied  { mounton } for  pid=1025 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   94.236336][ T1022] EXT4-fs (loop0): orphan cleanup on readonly fs
[   94.264101][ T1022] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #3: comm syz.0.186: corrupted inode contents
[   94.271908][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.275997][ T1022] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #3: comm syz.0.186: mark_inode_dirty error
[   94.294647][ T1022] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #3: comm syz.0.186: corrupted inode contents
[   94.298439][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.306756][ T1022] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.186: mark_inode_dirty error
[   94.325511][ T1022] Quota error (device loop0): write_blk: dquota write failed
[   94.332961][ T1022] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   94.333582][ T1025] device bridge_slave_0 entered promiscuous mode
[   94.353364][ T1022] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.186: Failed to acquire dquot type 0
[   94.364799][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.371880][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.379682][ T1025] device bridge_slave_1 entered promiscuous mode
[   94.382516][ T1022] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.186: corrupted inode contents
[   94.398264][   T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   94.435739][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.442902][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.450233][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.457292][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.471629][ T1022] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #16: comm syz.0.186: mark_inode_dirty error
[   94.483562][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   94.501596][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.514285][ T1021] loop4: detected capacity change from 0 to 2048
[   94.524978][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.535959][ T1022] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.186: corrupted inode contents
[   94.552736][ T1022] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.186: mark_inode_dirty error
[   94.570035][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.573625][ T1022] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.186: corrupted inode contents
[   94.601550][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.613806][ T1022] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   94.637265][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.645314][   T26] usb 2-1: Using ep0 maxpacket: 8
[   94.650998][ T1021] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none.
[   94.651810][ T1022] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.186: corrupted inode contents
[   94.691265][ T1025] device veth0_vlan entered promiscuous mode
[   94.700348][ T1022] EXT4-fs error (device loop0): ext4_truncate:4317: inode #16: comm syz.0.186: mark_inode_dirty error
[   94.706425][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.733919][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.752617][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.765294][   T26] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.778784][ T1022] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   94.795917][   T26] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   94.815508][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.824893][ T1022] EXT4-fs (loop0): 1 truncate cleaned up
[   94.831719][ T1025] device veth1_macvtap entered promiscuous mode
[   94.840167][   T26] usb 2-1: config 0 interface 0 has no altsetting 0
[   94.847061][   T26] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00
[   94.859922][  T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.868603][ T1022] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,nobarrier,,errors=continue. Quota mode: writeback.
[   94.881985][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.893294][  T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.903583][   T26] usb 2-1: config 0 descriptor??
[   94.927880][   T30] audit: type=1400 audit(1780502004.351:227): avc:  denied  { mounton } for  pid=1025 comm="syz-executor" path="/root/syzkaller.gfb7Wb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   94.990691][ T1021] EXT4-fs (loop4): shut down requested (2)
[   95.008568][ T1043] FAULT_INJECTION: forcing a failure.
[   95.008568][ T1043] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   95.021962][ T1021] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[   95.031187][ T1043] CPU: 0 PID: 1043 Comm: syz.0.191 Not tainted syzkaller #0
[   95.038500][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   95.048660][ T1043] Call Trace:
[   95.051948][ T1043]  <TASK>
[   95.054885][ T1043]  __dump_stack+0x21/0x30
[   95.059240][ T1043]  dump_stack_lvl+0x110/0x170
[   95.063936][ T1043]  ? show_regs_print_info+0x20/0x20
[   95.069149][ T1043]  ? walk_page_range+0x4b8/0x540
[   95.074097][ T1043]  dump_stack+0x15/0x20
[   95.078377][ T1043]  should_fail+0x3c1/0x510
[   95.082808][ T1043]  should_fail_usercopy+0x1a/0x20
[   95.087853][ T1043]  _copy_to_user+0x20/0x90
[   95.092283][ T1043]  pagemap_read+0x42f/0x600
[   95.096798][ T1043]  ? clear_refs_write+0x5b0/0x5b0
[   95.101843][ T1043]  ? fsnotify_perm+0x269/0x5b0
[   95.106619][ T1043]  ? security_file_permission+0x83/0xa0
[   95.112184][ T1043]  ? clear_refs_write+0x5b0/0x5b0
[   95.117225][ T1043]  vfs_read+0x28d/0xc40
[   95.121399][ T1043]  ? kernel_read+0x1f0/0x1f0
[   95.126002][ T1043]  ? __fget_files+0x2c4/0x320
[   95.130788][ T1043]  ? __fdget+0x1a1/0x230
[   95.135037][ T1043]  ? __x64_sys_pread64+0xf2/0x220
[   95.140073][ T1043]  __x64_sys_pread64+0x197/0x220
[   95.145028][ T1043]  ? ksys_pread64+0x1b0/0x1b0
[   95.149801][ T1043]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   95.155887][ T1043]  x64_sys_call+0x3a1/0x9a0
[   95.160398][ T1043]  do_syscall_64+0x4c/0xa0
[   95.164829][ T1043]  ? clear_bhb_loop+0x50/0xa0
[   95.165515][ T1021] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[   95.169497][ T1043]  ? clear_bhb_loop+0x50/0xa0
[   95.169521][ T1043]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   95.179637][ T1021] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[   95.182969][ T1043] RIP: 0033:0x7f9c41586e59
[   95.202088][ T1043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.221688][ T1043] RSP: 002b:00007f9c3ffe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[   95.230197][ T1043] RAX: ffffffffffffffda RBX: 00007f9c417fffa0 RCX: 00007f9c41586e59
[   95.238163][ T1043] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000004
[   95.246144][ T1043] RBP: 00007f9c3ffe1090 R08: 0000000000000000 R09: 0000000000000000
[   95.254109][ T1043] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.262092][ T1043] R13: 00007f9c41800038 R14: 00007f9c417fffa0 R15: 00007ffc4d1c9f68
[   95.270058][ T1043]  </TASK>
[   95.296016][ T1048] loop0: detected capacity change from 0 to 256
[   95.331483][ T1052] loop4: detected capacity change from 0 to 512
[   95.358421][ T1052] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   95.387984][ T1052] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[   95.404426][ T1052] ext4 filesystem being mounted at /41/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.419510][   T30] audit: type=1400 audit(1780502004.841:228): avc:  denied  { append } for  pid=1049 comm="syz.4.192" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   95.444108][   T30] audit: type=1400 audit(1780502004.841:229): avc:  denied  { bind } for  pid=1056 comm="syz.0.196" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   95.464292][   T30] audit: type=1400 audit(1780502004.841:230): avc:  denied  { node_bind } for  pid=1056 comm="syz.0.196" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   95.493384][ T1064] loop0: detected capacity change from 0 to 512
[   95.506894][   T26] wacom 0003:056A:00B0.0002: unknown main item tag 0x3
[   95.513282][ T1066] loop4: detected capacity change from 0 to 256
[   95.513965][   T26] wacom 0003:056A:00B0.0002: unknown main item tag 0x0
[   95.527195][   T26] wacom 0003:056A:00B0.0002: unknown main item tag 0x0
[   95.534122][   T26] wacom 0003:056A:00B0.0002: unknown main item tag 0x0
[   95.541082][   T26] wacom 0003:056A:00B0.0002: unknown main item tag 0x0
[   95.541540][  T348] device bridge_slave_1 left promiscuous mode
[   95.549444][   T26] wacom 0003:056A:00B0.0002: unknown main item tag 0x0
[   95.556838][  T348] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.561283][   T26] wacom 0003:056A:00B0.0002: unknown main item tag 0x0
[   95.574964][   T26] wacom 0003:056A:00B0.0002: unknown main item tag 0x0
[   95.582242][   T26] wacom 0003:056A:00B0.0002: Unknown device_type for 'HID 056a:00b0'. Assuming pen.
[   95.591775][ T1064] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[   95.591939][  T348] device bridge_slave_0 left promiscuous mode
[   95.605790][ T1066] FAT-fs (loop4): Directory bread(block 64) failed
[   95.607550][   T26] wacom 0003:056A:00B0.0002: hidraw0: USB HID v0.04 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0
[   95.624658][  T348] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.626929][ T1066] FAT-fs (loop4): Directory bread(block 65) failed
[   95.632974][   T26] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.0002/input/input4
[   95.640123][ T1066] FAT-fs (loop4): Directory bread(block 66) failed
[   95.655130][   T30] audit: type=1400 audit(1780502005.081:231): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1574 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.659680][ T1066] FAT-fs (loop4): Directory bread(block 67) failed
[   95.679810][   T30] audit: type=1400 audit(1780502005.081:232): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1574 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.686797][ T1066] FAT-fs (loop4): Directory bread(block 68) failed
[   95.716191][   T30] audit: type=1400 audit(1780502005.141:233): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1574 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   95.716279][  T348] device veth1_macvtap left promiscuous mode
[   95.741130][ T1066] FAT-fs (loop4): Directory bread(block 69) failed
[   95.741202][ T1066] FAT-fs (loop4): Directory bread(block 70) failed
[   95.769001][ T1066] FAT-fs (loop4): Directory bread(block 71) failed
[   95.775866][ T1066] FAT-fs (loop4): Directory bread(block 72) failed
[   95.782541][ T1066] FAT-fs (loop4): Directory bread(block 73) failed
[   95.784368][  T348] device veth0_vlan left promiscuous mode
[   95.860853][ T1072] FAULT_INJECTION: forcing a failure.
[   95.860853][ T1072] name failslab, interval 1, probability 0, space 0, times 0
[   95.874330][ T1072] CPU: 1 PID: 1072 Comm: syz.5.200 Not tainted syzkaller #0
[   95.881778][ T1072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   95.891876][ T1072] Call Trace:
[   95.895177][ T1072]  <TASK>
[   95.898126][ T1072]  __dump_stack+0x21/0x30
[   95.902502][ T1072]  dump_stack_lvl+0x110/0x170
[   95.907310][ T1072]  ? show_regs_print_info+0x20/0x20
[   95.912532][ T1072]  dump_stack+0x15/0x20
[   95.916699][ T1072]  should_fail+0x3c1/0x510
[   95.921117][ T1072]  __should_failslab+0xa4/0xe0
[   95.925886][ T1072]  should_failslab+0x9/0x20
[   95.930397][ T1072]  slab_pre_alloc_hook+0x3b/0xe0
[   95.935333][ T1072]  ? __d_alloc+0x2d/0x6a0
[   95.939850][ T1072]  kmem_cache_alloc+0x44/0x260
[   95.944635][ T1072]  __d_alloc+0x2d/0x6a0
[   95.948875][ T1072]  ? current_time+0x1ad/0x2c0
[   95.953645][ T1072]  d_alloc_pseudo+0x1d/0x70
[   95.958159][ T1072]  alloc_file_pseudo+0xe0/0x200
[   95.963026][ T1072]  ? alloc_empty_file_noaccount+0x80/0x80
[   95.968841][ T1072]  ? shmem_get_inode+0x69a/0x9e0
[   95.973776][ T1072]  ? __kasan_check_write+0x14/0x20
[   95.978884][ T1072]  ? clear_nlink+0x8a/0xe0
[   95.983299][ T1072]  __shmem_file_setup+0x1df/0x2b0
[   95.988321][ T1072]  shmem_file_setup+0x2f/0x40
[   95.992995][ T1072]  __se_sys_memfd_create+0x1e6/0x3b0
[   95.998288][ T1072]  __x64_sys_memfd_create+0x5b/0x70
[   96.003484][ T1072]  x64_sys_call+0x473/0x9a0
[   96.007991][ T1072]  do_syscall_64+0x4c/0xa0
[   96.012406][ T1072]  ? clear_bhb_loop+0x50/0xa0
[   96.017082][ T1072]  ? clear_bhb_loop+0x50/0xa0
[   96.021848][ T1072]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   96.027753][ T1072] RIP: 0033:0x7f284cc9de59
[   96.032172][ T1072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.051907][ T1072] RSP: 002b:00007f284b6f7e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   96.060346][ T1072] RAX: ffffffffffffffda RBX: 00000000000002d9 RCX: 00007f284cc9de59
[   96.068321][ T1072] RDX: 00007f284b6f7ee0 RSI: 0000000000000000 RDI: 00007f284cd33f4f
[   96.076290][ T1072] RBP: 00002000000028c0 R08: 00000000ffffffff R09: 0000000000000000
[   96.084354][ T1072] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0
[   96.092329][ T1072] R13: 00007f284b6f7ee0 R14: 00007f284b6f7ea0 R15: 0000200000000400
[   96.100322][ T1072]  </TASK>
[   96.113972][ T1071] attempt to access beyond end of device
[   96.113972][ T1071] loop4: rw=2049, want=1480, limit=256
[   96.125767][ T1071] attempt to access beyond end of device
[   96.125767][ T1071] loop4: rw=2049, want=1832, limit=256
[   96.137483][ T1071] attempt to access beyond end of device
[   96.137483][ T1071] loop4: rw=2049, want=2272, limit=256
[   96.166277][ T1013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[   96.178326][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[   96.180365][  T317] usb 2-1: USB disconnect, device number 9
[   96.312702][ T1089] FAULT_INJECTION: forcing a failure.
[   96.312702][ T1089] name failslab, interval 1, probability 0, space 0, times 0
[   96.325548][ T1089] CPU: 0 PID: 1089 Comm: syz.3.205 Not tainted syzkaller #0
[   96.332857][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   96.342924][ T1089] Call Trace:
[   96.346212][ T1089]  <TASK>
[   96.349137][ T1089]  __dump_stack+0x21/0x30
[   96.353461][ T1089]  dump_stack_lvl+0x110/0x170
[   96.358127][ T1089]  ? show_regs_print_info+0x20/0x20
[   96.363331][ T1089]  ? avc_denied+0x1b0/0x1b0
[   96.367826][ T1089]  dump_stack+0x15/0x20
[   96.371985][ T1089]  should_fail+0x3c1/0x510
[   96.376392][ T1089]  __should_failslab+0xa4/0xe0
[   96.381149][ T1089]  should_failslab+0x9/0x20
[   96.385642][ T1089]  slab_pre_alloc_hook+0x3b/0xe0
[   96.390571][ T1089]  ? vm_area_alloc+0x24/0x130
[   96.395247][ T1089]  kmem_cache_alloc+0x44/0x260
[   96.400004][ T1089]  vm_area_alloc+0x24/0x130
[   96.404509][ T1089]  mmap_region+0xaa6/0x1710
[   96.409005][ T1089]  ? selinux_mmap_addr+0xbe/0xe0
[   96.413944][ T1089]  ? security_mmap_addr+0x72/0x90
[   96.419060][ T1089]  do_mmap+0x812/0xf10
[   96.423132][ T1089]  vm_mmap_pgoff+0x1ec/0x430
[   96.427714][ T1089]  ? account_locked_vm+0x260/0x260
[   96.432819][ T1089]  ? kfree+0xc4/0x270
[   96.436793][ T1089]  ksys_mmap_pgoff+0xf6/0x1d0
[   96.441487][ T1089]  __x64_sys_mmap+0xfa/0x110
[   96.446100][ T1089]  x64_sys_call+0x83/0x9a0
[   96.450503][ T1089]  do_syscall_64+0x4c/0xa0
[   96.454935][ T1089]  ? clear_bhb_loop+0x50/0xa0
[   96.459615][ T1089]  ? clear_bhb_loop+0x50/0xa0
[   96.464316][ T1089]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   96.470217][ T1089] RIP: 0033:0x7f5048150bc2
[   96.474631][ T1089] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[   96.494322][ T1089] RSP: 002b:00007f5046baadf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   96.502751][ T1089] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5048150bc2
[   96.510722][ T1089] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[   96.518692][ T1089] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[   96.526666][ T1089] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[   96.534645][ T1089] R13: 00007f5046baaee0 R14: 00007f5046baaea0 R15: 0000200000000340
[   96.542636][ T1089]  </TASK>
[   96.744586][  T308] attempt to access beyond end of device
[   96.744586][  T308] loop4: rw=1, want=1240, limit=256
[   97.250085][ T1101] loop1: detected capacity change from 0 to 512
[   97.289584][ T1101] EXT4-fs (loop1): orphan cleanup on readonly fs
[   97.306346][ T1101] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #3: comm syz.1.208: corrupted inode contents
[   97.333786][ T1101] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #3: comm syz.1.208: mark_inode_dirty error
[   97.356916][ T1100] loop3: detected capacity change from 0 to 2048
[   97.363767][ T1101] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #3: comm syz.1.208: corrupted inode contents
[   97.412925][ T1101] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.208: mark_inode_dirty error
[   97.428977][ T1100] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none.
[   97.449219][ T1101] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.208: Failed to acquire dquot type 0
[   97.489855][ T1101] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.208: corrupted inode contents
[   97.507650][ T1101] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #16: comm syz.1.208: mark_inode_dirty error
[   97.534046][ T1101] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.208: corrupted inode contents
[   97.552654][ T1101] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.208: mark_inode_dirty error
[   97.564898][ T1101] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.208: corrupted inode contents
[   97.581701][ T1101] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   97.592148][ T1101] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.208: corrupted inode contents
[   97.604837][ T1101] EXT4-fs error (device loop1): ext4_truncate:4317: inode #16: comm syz.1.208: mark_inode_dirty error
[   97.616430][ T1101] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   97.625899][ T1101] EXT4-fs (loop1): 1 truncate cleaned up
[   97.631795][ T1101] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,nobarrier,,errors=continue. Quota mode: writeback.
[   97.674118][ T1096] EXT4-fs (loop3): shut down requested (2)
[   97.694021][ T1114] netlink: 152 bytes leftover after parsing attributes in process `syz.1.211'.
[   97.720368][ T1096] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[   97.729461][ T1096] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[   97.738616][ T1096] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[   97.999484][ T1125] loop4: detected capacity change from 0 to 256
[   98.014437][ T1125] FAT-fs (loop4): Directory bread(block 64) failed
[   98.021566][ T1125] FAT-fs (loop4): Directory bread(block 65) failed
[   98.028291][ T1125] FAT-fs (loop4): Directory bread(block 66) failed
[   98.035048][ T1125] FAT-fs (loop4): Directory bread(block 67) failed
[   98.041902][ T1125] FAT-fs (loop4): Directory bread(block 68) failed
[   98.048719][ T1125] FAT-fs (loop4): Directory bread(block 69) failed
[   98.055490][ T1125] FAT-fs (loop4): Directory bread(block 70) failed
[   98.062014][ T1125] FAT-fs (loop4): Directory bread(block 71) failed
[   98.068647][ T1125] FAT-fs (loop4): Directory bread(block 72) failed
[   98.075165][ T1125] FAT-fs (loop4): Directory bread(block 73) failed
[   98.085304][  T317] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   98.189267][ T1126] attempt to access beyond end of device
[   98.189267][ T1126] loop4: rw=2049, want=1480, limit=256
[   98.200458][ T1126] attempt to access beyond end of device
[   98.200458][ T1126] loop4: rw=2049, want=1832, limit=256
[   98.355231][  T317] usb 4-1: Using ep0 maxpacket: 32
[   98.475320][  T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.486380][  T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.496357][  T317] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   98.505626][  T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.514772][  T317] usb 4-1: config 0 descriptor??
[   98.555784][  T317] hub 4-1:0.0: USB hub found
[   98.643639][ T1135] netlink: 104 bytes leftover after parsing attributes in process `syz.1.220'.
[   98.653426][ T1135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.220'.
[   98.662374][ T1135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.220'.
[   98.685247][   T20] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   98.775278][  T317] hub 4-1:0.0: 1 port detected
[   98.853024][   T10] handle_bad_sector: 1 callbacks suppressed
[   98.853042][   T10] attempt to access beyond end of device
[   98.853042][   T10] loop4: rw=1, want=1240, limit=256
[   98.913121][ T1137] netlink: 64 bytes leftover after parsing attributes in process `syz.4.221'.
[   98.922089][ T1137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'.
[   98.925237][   T20] usb 6-1: Using ep0 maxpacket: 16
[   98.931326][ T1137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'.
[   98.944888][ T1137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'.
[   99.022012][ T1141] loop4: detected capacity change from 0 to 512
[   99.035274][  T317] hub 4-1:0.0: hub_hub_status failed (err = -71)
[   99.041649][  T317] hub 4-1:0.0: config failed, can't get hub status (err -71)
[   99.055357][   T20] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7
[   99.069868][ T1141] EXT4-fs (loop4): orphan cleanup on readonly fs
[   99.077207][ T1141] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #3: comm syz.4.222: corrupted inode contents
[   99.089229][ T1141] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #3: comm syz.4.222: mark_inode_dirty error
[   99.100896][ T1141] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #3: comm syz.4.222: corrupted inode contents
[   99.112957][ T1141] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.222: mark_inode_dirty error
[   99.124532][ T1141] __quota_error: 53 callbacks suppressed
[   99.124542][ T1141] Quota error (device loop4): write_blk: dquota write failed
[   99.137936][ T1141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   99.148098][ T1141] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.222: Failed to acquire dquot type 0
[   99.159966][ T1141] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #16: comm syz.4.222: corrupted inode contents
[   99.172259][ T1141] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #16: comm syz.4.222: mark_inode_dirty error
[   99.183735][ T1141] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #16: comm syz.4.222: corrupted inode contents
[   99.185274][  T317] usbhid 4-1:0.0: can't add hid device: -71
[   99.195755][ T1141] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.222: mark_inode_dirty error
[   99.201582][  T317] usbhid: probe of 4-1:0.0 failed with error -71
[   99.212769][ T1141] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #16: comm syz.4.222: corrupted inode contents
[   99.231029][ T1141] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   99.235380][   T20] usb 6-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40
[   99.242211][ T1141] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #16: comm syz.4.222: corrupted inode contents
[   99.248848][   T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.262005][  T317] usb 4-1: USB disconnect, device number 4
[   99.274325][   T20] usb 6-1: Product: syz
[   99.278698][   T20] usb 6-1: Manufacturer: syz
[   99.278694][ T1141] EXT4-fs error (device loop4): ext4_truncate:4317: inode #16: comm syz.4.222: mark_inode_dirty error
[   99.278784][ T1141] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   99.283348][   T20] usb 6-1: SerialNumber: syz
[   99.308803][ T1141] EXT4-fs (loop4): 1 truncate cleaned up
[   99.314519][ T1141] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,nobarrier,,errors=continue. Quota mode: writeback.
[   99.393606][ T1145] netlink: 152 bytes leftover after parsing attributes in process `syz.4.223'.
[   99.430112][ T1147] loop4: detected capacity change from 0 to 2048
[   99.440945][ T1149] loop1: detected capacity change from 0 to 512
[   99.517898][ T1149] xt_CT: No such helper "syz0"
[   99.524619][   T30] audit: type=1400 audit(1780502008.941:285): avc:  denied  { read } for  pid=1148 comm="syz.1.225" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   99.545863][ T1149] syz.1.225 uses obsolete (PF_INET,SOCK_PACKET)
[   99.552653][   T30] audit: type=1400 audit(1780502008.941:286): avc:  denied  { open } for  pid=1148 comm="syz.1.225" path="net:[4026532290]" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   99.582248][   T30] audit: type=1400 audit(1780502008.941:287): avc:  denied  { create } for  pid=1148 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   99.602430][   T30] audit: type=1400 audit(1780502008.971:288): avc:  denied  { bind } for  pid=1148 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   99.624319][   T30] audit: type=1400 audit(1780502008.971:289): avc:  denied  { create } for  pid=1148 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   99.658435][   T30] audit: type=1400 audit(1780502008.971:290): avc:  denied  { block_suspend } for  pid=1127 comm="syz.5.217" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.680238][ T1147] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none.
[   99.685318][   T30] audit: type=1400 audit(1780502008.971:291): avc:  denied  { view } for  pid=1127 comm="syz.5.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   99.714473][   T30] audit: type=1400 audit(1780502008.971:292): avc:  denied  { connect } for  pid=1127 comm="syz.5.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  199.775134][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  199.782122][    C1] 	(detected by 1, t=10002 jiffies, g=6589, q=300)
[  199.788635][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294957194-4294947191), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  199.802009][    C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g6589 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  199.813123][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  199.823106][    C1] rcu: RCU grace-period kthread stack dump:
[  199.829004][    C1] task:rcu_preempt     state:R  running task     stack:28640 pid:   14 ppid:     2 flags:0x00004000
[  199.839794][    C1] Call Trace:
[  199.843083][    C1]  <TASK>
[  199.846025][    C1]  __schedule+0xb6e/0x14c0
[  199.850490][    C1]  ? release_firmware_map_entry+0x190/0x190
[  199.856394][    C1]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[  199.862209][    C1]  ? __mod_timer+0x7da/0xb50
[  199.866809][    C1]  schedule+0x11e/0x1e0
[  199.870973][    C1]  schedule_timeout+0x159/0x340
[  199.875837][    C1]  ? console_conditional_schedule+0x30/0x30
[  199.881739][    C1]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  199.887211][    C1]  ? update_process_times+0x200/0x200
[  199.892594][    C1]  ? prepare_to_swait_event+0x308/0x320
[  199.898149][    C1]  rcu_gp_fqs_loop+0x2ae/0xf80
[  199.902926][    C1]  ? __kasan_check_write+0x14/0x20
[  199.908056][    C1]  ? debug_smp_processor_id+0x17/0x20
[  199.913458][    C1]  ? __note_gp_changes+0x4e2/0x9e0
[  199.918599][    C1]  ? rcu_gp_init+0xc00/0xc00
[  199.923205][    C1]  ? _raw_spin_unlock_irq+0x4e/0x70
[  199.928422][    C1]  ? rcu_gp_init+0x9a7/0xc00
[  199.933032][    C1]  rcu_gp_kthread+0x9b/0x360
[  199.937634][    C1]  ? _raw_spin_lock+0xf0/0xf0
[  199.942328][    C1]  ? wake_nocb_gp+0x1d0/0x1d0
[  199.947014][    C1]  ? __kasan_check_read+0x11/0x20
[  199.952051][    C1]  ? __kthread_parkme+0xac/0x200
[  199.957001][    C1]  kthread+0x411/0x500
[  199.961079][    C1]  ? wake_nocb_gp+0x1d0/0x1d0
[  199.965763][    C1]  ? kthread_blkcg+0xd0/0xd0
[  199.970367][    C1]  ret_from_fork+0x1f/0x30
[  199.974792][    C1]  </TASK>
[  199.977908][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  199.984233][    C1] NMI backtrace for cpu 1
[  199.988564][    C1] CPU: 1 PID: 1153 Comm: syz.3.226 Not tainted syzkaller #0
[  199.996039][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  200.006099][    C1] Call Trace:
[  200.009387][    C1]  <IRQ>
[  200.012238][    C1]  __dump_stack+0x21/0x30
[  200.016586][    C1]  dump_stack_lvl+0x110/0x170
[  200.021272][    C1]  ? show_regs_print_info+0x20/0x20
[  200.026480][    C1]  dump_stack+0x15/0x20
[  200.030647][    C1]  nmi_cpu_backtrace+0x2af/0x2c0
[  200.035610][    C1]  ? nmi_trigger_cpumask_backtrace+0x240/0x240
[  200.041787][    C1]  ? load_image+0x3e0/0x3e0
[  200.046309][    C1]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[  200.052386][    C1]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[  200.058460][    C1]  nmi_trigger_cpumask_backtrace+0x138/0x240
[  200.064458][    C1]  arch_trigger_cpumask_backtrace+0x10/0x20
[  200.070370][    C1]  rcu_check_gp_kthread_starvation+0x1e0/0x260
[  200.076537][    C1]  print_other_cpu_stall+0xe33/0x1010
[  200.082006][    C1]  ? print_cpu_stall+0x600/0x600
[  200.086958][    C1]  ? cgroup_rstat_updated+0xf5/0x360
[  200.092436][    C1]  rcu_sched_clock_irq+0x8b2/0x12c0
[  200.097644][    C1]  ? rcu_boost_kthread_setaffinity+0x320/0x320
[  200.103815][    C1]  ? hrtimer_run_queues+0x166/0x430
[  200.109031][    C1]  update_process_times+0x198/0x200
[  200.114240][    C1]  tick_sched_timer+0x17c/0x240
[  200.119108][    C1]  ? tick_setup_sched_timer+0x450/0x450
[  200.124661][    C1]  __hrtimer_run_queues+0x39f/0x8c0
[  200.129882][    C1]  ? hrtimer_interrupt+0x8c0/0x8c0
[  200.134999][    C1]  ? ktime_get_update_offsets_now+0x2fa/0x310
[  200.141079][    C1]  hrtimer_interrupt+0x3c7/0x8c0
[  200.146205][    C1]  __sysvec_apic_timer_interrupt+0xfa/0x3e0
[  200.152161][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  200.157807][    C1]  </IRQ>
[  200.160743][    C1]  <TASK>
[  200.163714][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  200.169712][    C1] RIP: 0010:_raw_spin_unlock_irq+0x49/0x70
[  200.175533][    C1] Code: 12 48 89 fb 48 c7 c7 78 47 6d 86 e8 b1 76 f4 fc 48 89 df 48 83 3d be 5e b8 01 00 74 27 e8 63 22 9b fc 66 90 fb bf 01 00 00 00 <e8> e2 f3 92 fc 65 8b 05 b3 84 4d 7b 85 c0 74 03 5b 5d c3 e8 13 90
[  200.195151][    C1] RSP: 0000:ffffc90000b47b98 EFLAGS: 00000246
[  200.201231][    C1] RAX: 0000000000000001 RBX: 0000000000000021 RCX: dffffc0000000000
[  200.209209][    C1] RDX: ffffc90003b45000 RSI: 000000000007ffff RDI: 0000000000000001
[  200.217188][    C1] RBP: ffffc90000b47ba0 R08: ffffc90000b47dff R09: 1ffff92000168fbf
[  200.225172][    C1] R10: dffffc0000000000 R11: fffff52000168fc0 R12: 1ffff1102371ea5c
[  200.233679][    C1] R13: dffffc0000000000 R14: ffff88811b8f52e0 R15: 000000001c000004
[  200.241854][    C1]  ? _raw_spin_unlock_irq+0x41/0x70
[  200.247089][    C1]  get_signal+0x13b2/0x1480
[  200.251621][    C1]  arch_do_signal_or_restart+0xdf/0x11c0
[  200.257268][    C1]  ? ktime_get+0x12f/0x160
[  200.261693][    C1]  ? lapic_next_event+0x5f/0x70
[  200.266556][    C1]  ? get_sigframe_size+0x10/0x10
[  200.271511][    C1]  ? kvm_sched_clock_read+0x18/0x40
[  200.276726][    C1]  ? sched_clock+0x9/0x10
[  200.281151][    C1]  ? sched_clock_cpu+0x18/0x3c0
[  200.286023][    C1]  exit_to_user_mode_loop+0xa7/0xe0
[  200.291250][    C1]  exit_to_user_mode_prepare+0x87/0xd0
[  200.296854][    C1]  irqentry_exit_to_user_mode+0x9/0x10
[  200.302339][    C1]  irqentry_exit+0x12/0x40
[  200.306774][    C1]  sysvec_apic_timer_interrupt+0x64/0xc0
[  200.312425][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  200.318503][    C1] RIP: 0033:0x7f5048150e57
[  200.323065][    C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  200.342856][    C1] RSP: 002b:00007f5046bab028 EFLAGS: 00000246
[  200.348941][    C1] RAX: 0000000000000049 RBX: 00007f50483c9fa0 RCX: 00007f5048150e59
[  200.356922][    C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003
[  200.364903][    C1] RBP: 00007f50481e6d6f R08: 0000000000000000 R09: 0000000000000000
[  200.375920][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.383900][    C1] R13: 00007f50483ca038 R14: 00007f50483c9fa0 R15: 00007ffe91c3e5d8
[  200.391883][    C1]  </TASK>
[  285.445821][    C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 185s!
[  285.454807][    C0] Showing busy workqueues and worker pools:
[  285.460738][    C0] workqueue events: flags=0x0
[  285.465434][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  285.465474][    C0]     pending: psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker
[  285.465526][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  285.465558][    C0]     pending: vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker
[  285.465604][    C0] workqueue events_long: flags=0x0
[  285.502685][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.502741][    C0]     pending: br_multicast_gc_work
[  285.502767][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  285.502803][    C0]     pending: br_multicast_gc_work, br_multicast_gc_work
[  285.502851][    C0] workqueue events_unbound: flags=0x2
[  285.536064][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4
[  285.536109][    C0]     pending: toggle_allocation_gate, flush_memcg_stats_dwork
[  285.536261][    C0] workqueue events_power_efficient: flags=0x80
[  285.557184][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  285.557225][    C0]     pending: wg_ratelimiter_gc_entries, neigh_periodic_work
[  285.557266][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  285.557299][    C0]     pending: neigh_periodic_work, gc_worker, check_lifetime
[  285.557343][    C0] workqueue netns: flags=0xe000a
[  285.592664][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3
[  285.592699][    C0]     in-flight: 348:cleanup_net
[  285.592728][    C0] workqueue mm_percpu_wq: flags=0x8
[  285.609894][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.609931][    C0]     pending: vmstat_update
[  285.609955][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.609987][    C0]     pending: vmstat_update
[  285.610010][    C0] workqueue writeback: flags=0x4a
[  285.639780][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=5/256 refcnt=7
[  285.639816][    C0]     pending: wb_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn
[  285.639884][    C0] workqueue kblockd: flags=0x18
[  285.660046][    C0]   pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=5/256 refcnt=6
[  285.660081][    C0]     pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work
[  285.660205][    C0]   pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2
[  285.660238][    C0]     pending: blk_mq_timeout_work
[  285.660259][    C0] workqueue usb_hub_wq: flags=0x4
[  285.698611][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  285.698657][    C0]     in-flight: 20:hub_event hub_event
[  285.698799][    C0] workqueue dm_bufio_cache: flags=0x8
[  285.717417][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.717459][    C0]     pending: work_fn
[  285.717519][    C0] workqueue ipv6_addrconf: flags=0x40008
[  285.735069][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2
[  285.735122][    C0]     pending: addrconf_verify_work
[  285.748053][    C0] workqueue wg-kex-wg0: flags=0x6
[  285.753092][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  285.753150][    C0]     pending: wg_packet_handshake_send_worker
[  285.753181][    C0] workqueue wg-crypt-wg0: flags=0x28
[  285.771875][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.771919][    C0]     pending: wg_packet_encrypt_worker
[  285.771945][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.771978][    C0]     pending: wg_packet_encrypt_worker
[  285.772003][    C0] workqueue wg-crypt-wg1: flags=0x28
[  285.803787][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.803828][    C0]     pending: wg_packet_encrypt_worker
[  285.803853][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.803885][    C0]     pending: wg_packet_encrypt_worker
[  285.803907][    C0] workqueue wg-kex-wg2: flags=0x6
[  285.835578][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  285.835617][    C0]     pending: wg_packet_handshake_send_worker
[  285.835644][    C0] workqueue wg-crypt-wg2: flags=0x28
[  285.854383][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.854422][    C0]     pending: wg_packet_encrypt_worker
[  285.854447][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.854479][    C0]     pending: wg_packet_encrypt_worker
[  285.854502][    C0] workqueue wg-kex-wg0: flags=0x6
[  285.886196][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  285.886230][    C0]     pending: wg_packet_handshake_send_worker
[  285.886255][    C0] workqueue wg-crypt-wg0: flags=0x28
[  285.904906][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.904947][    C0]     pending: wg_packet_encrypt_worker
[  285.904973][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.905004][    C0]     pending: wg_packet_encrypt_worker
[  285.905026][    C0] workqueue wg-kex-wg1: flags=0x6
[  285.936437][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  285.936483][    C0]     pending: wg_packet_handshake_send_worker
[  285.936511][    C0] workqueue wg-crypt-wg1: flags=0x28
[  285.955258][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.955297][    C0]     pending: wg_packet_encrypt_worker
[  285.955322][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.955356][    C0]     pending: wg_packet_encrypt_worker
[  285.955378][    C0] workqueue wg-kex-wg2: flags=0x6
[  285.987034][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  285.987073][    C0]     pending: wg_packet_handshake_send_worker
[  285.987105][    C0] workqueue wg-crypt-wg2: flags=0x28
[  286.005839][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.005880][    C0]     pending: wg_packet_encrypt_worker
[  286.005904][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.005937][    C0]     pending: wg_packet_encrypt_worker
[  286.005960][    C0] workqueue wg-kex-wg0: flags=0x6
[  286.037608][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.037648][    C0]     pending: wg_packet_handshake_send_worker
[  286.037674][    C0] workqueue wg-crypt-wg0: flags=0x28
[  286.056335][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.056371][    C0]     pending: wg_packet_encrypt_worker
[  286.056395][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.056429][    C0]     pending: wg_packet_encrypt_worker
[  286.056450][    C0] workqueue wg-kex-wg1: flags=0x6
[  286.087845][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.087880][    C0]     pending: wg_packet_handshake_send_worker
[  286.087904][    C0] workqueue wg-crypt-wg1: flags=0x28
[  286.106558][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.106593][    C0]     pending: wg_packet_encrypt_worker
[  286.106615][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.106647][    C0]     pending: wg_packet_encrypt_worker
[  286.106668][    C0] workqueue wg-crypt-wg2: flags=0x28
[  286.138311][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.138350][    C0]     pending: wg_packet_encrypt_worker
[  286.138373][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.138404][    C0]     pending: wg_packet_encrypt_worker
[  286.138426][    C0] workqueue wg-kex-wg0: flags=0x6
[  286.169836][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.169881][    C0]     pending: wg_packet_handshake_send_worker
[  286.169911][    C0] workqueue wg-crypt-wg0: flags=0x28
[  286.188564][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.188602][    C0]     pending: wg_packet_encrypt_worker
[  286.188628][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.188661][    C0]     pending: wg_packet_encrypt_worker
[  286.188685][    C0] workqueue wg-kex-wg1: flags=0x6
[  286.220118][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.220162][    C0]     pending: wg_packet_handshake_send_worker
[  286.220192][    C0] workqueue wg-crypt-wg1: flags=0x28
[  286.238850][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.238891][    C0]     pending: wg_packet_encrypt_worker
[  286.238915][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.238949][    C0]     pending: wg_packet_encrypt_worker
[  286.238971][    C0] workqueue wg-kex-wg2: flags=0x6
[  286.270486][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
[  286.270523][    C0]     pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
[  286.270620][    C0] workqueue wg-kex-wg0: flags=0x6
[  286.291967][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.292001][    C0]     pending: wg_packet_handshake_send_worker
[  286.292027][    C0] workqueue wg-crypt-wg0: flags=0x28
[  286.310677][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.310719][    C0]     pending: wg_packet_encrypt_worker
[  286.310745][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.310777][    C0]     pending: wg_packet_encrypt_worker
[  286.310800][    C0] workqueue wg-crypt-wg1: flags=0x28
[  286.342533][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.342573][    C0]     pending: wg_packet_encrypt_worker
[  286.342596][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.342628][    C0]     pending: wg_packet_encrypt_worker
[  286.342697][    C0] workqueue wg-kex-wg2: flags=0x6
[  286.374187][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.374223][    C0]     pending: wg_packet_handshake_send_worker
[  286.374248][    C0] workqueue wg-crypt-wg2: flags=0x28
[  286.392897][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.392935][    C0]     pending: wg_packet_encrypt_worker
[  286.392959][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.392991][    C0]     pending: wg_packet_encrypt_worker
[  286.393060][    C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=186s workers=6 idle: 526 305 6 309 316
[  286.393149][    C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=186s workers=7 idle: 308 10 414 8 448 45