last executing test programs:

22.174807825s ago: executing program 0 (id=38):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000100)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$eJzs3c1vVFUbAPDnTD9p3/dtIW9UXEgTYyBRWlrAEGMi7AnBj52rSgtBCiW0RosklgQ3JsaNCxNXLsT/QkncunDrwo0rQ0KMYSGGyJg7vVNupzOlXzNTOr9fcuk993bueW7p03PvmXPmBtCxRrJ/ShH7I+Jqihgq7OuOfOfI0vfd//PGuWxJUS6//UeKG5+kxeKxUv51MH/xP0ORfi5F7OtaXe/cwvVLkzMz09fy8tj85atjcwvXD1+8PHlh+sL0lYlXJ04cP3b8xPiRLZ1fserTt97/cOizM+9++/XDNP7dr2dSnIxH+Tdk51X72r4t1Zz9zEaivORBcXv2cz2xxWPvFH8NVX9PHku1G9ixzue/j/+LiGdjKLoK/5tD8embbQ0OaKpyimobBXSctKn879/+QIAWq14HVO/t690Hr1Zq8lUJ0Ar3Ti11ACzlfk9EVPO/e6lvMPoj2zpwP63o50kRsbWeuSVZHT/9eOZWtkSDfjigORZvVnu5a9v/VMnN4eivlAbul1bkf6mwZNvf2mT9IzVl+Q+ts3gzIp7L2//e2FD+jxTy/71N1i//AQAAAAAAYPvcORURr9Qb/1daHv/TW2f8z2BEnNyG+p/8/l/pbr6StqE6oODeqYjXI8qpTv7nhrvy0n8r4wF60vmLM9NH8jmDh6KnLyuP1xy3OEL48Of7vmpUf3H8X7Zk9VfHAuZHuttdMxF3anJ+cqvnDUTcuxnxfGX874F8y8rxP1n7n+q0/1l+X11nHfteun220b4n5z/QLOVvIg7Wnf/z+HI7rf35HGOV64Gx6lXBai98/MX3jeqX/9A+Wfs/sHb+96Xi5/XMbez4vRFxdKG73Gj/Zq//e9M7XdXjZz6anJ+/Nh7Rm06v3j6xsZhht6rmQzVfsvw/9OLa/X/L1/+FPNwTEYvrrPOZR4O/Ndqn/Yf2yfJ/au32f3hl+7/xlYnbwz80qv/sutr/Y5U2/VC+Rf8fFK3+PI71JmhbwgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp1wpIv4TqTS6vF4qjY5GDEbE/2OgNDM7N//y+dkPrkxl+yrP/y9Vn/Q7tFRO1ef/DxfKEzXloxGxNyK+7NpTKY+em52ZavfJAwAAAAAAAAAAAAAAAAAAwA4xWJnzX+6rnf+f+b2r3dEBTdedf5Xv0Hm6N/3Kct+2BgK03ObzH3jarT//e5oaB9B6jfP/wcNyRUvDAVrI9T90rk3mv7cLYBfQ/kOnWmefXn+z4wDaQfsPAAAAAAC7yt4Dd35JEbH42p7KkunN9xnsD7tbqd0BAG1jDC90ru7ZdkcAtIt7fCAtr/1dd7J/49H/qTkBAQAAAAAAAAAAAACrHNxv/j90qrXn/xvbD7vZGvP/6yW/jwuAXaTxoz9Sb0sDAVrOPT7wpDt98/8BAAAAAAAAAAAAYAfov35pcmZm+trcwtO38sbOCGNjK4uTOyKMbV151Jwj90TEzjjBVq9U5961MYw2/10CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACW/RsAAP//2SQnmg==")
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, <r3=>r2}, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000007e6bb16c625fd82a26448d8f400b1a7dc52300c86e56f084a8daa12ad1"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000100)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$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") (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r2}, 0x4) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000007e6bb16c625fd82a26448d8f400b1a7dc52300c86e56f084a8daa12ad1"], 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) (async)

21.929682817s ago: executing program 0 (id=41):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
setrlimit(0x8c3418ce056940a8, &(0x7f0000000680)={0x7, 0x2}) (async)
setrlimit(0x8c3418ce056940a8, &(0x7f0000000680)={0x7, 0x2})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff030}, {0x80000006, 0x1, 0x0, 0x30}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="806cdbf5202f00019078ac1e0001ac1414aa0b0090780300006881c44b1900450000040000000000330000ac14140ae000000100"/62], 0x0)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) (async)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b<B\xc3k\xcd\x01\xe4\x05\n!\x02Y\xc7`ooveu`z\xb9\xf5r\xc0c\x95\xcbQbj5\xb1\x8f\xb9J\xa9#\x13\x92\x05H\x91\xa5\xdfxM\nD\xc70\xa11B\xf1\xab\xccw\x17\xbf\xc8W\xec\xb88\xc9\x1b*h\xc3c\x89n\x89ic\xfd\x9c\xfa~\xb5$VG\x85\xc2\x86\x89}*\x99\xda\x94\xba)\xb9b\xeb\xe9\x0f{V%TD\xbc\xee\x96C\x89No\xc9\n\x91\xe0\xfcqE4\x8c', 0x3a, '\x8c\xf0<\x06\xd3=(\xa0\x96k\xd8cf\x92\xd1\xed\xf5\x00\x00\xb5\xff\xd9o\x1c.\xecU \xc8\x12\xacf\x15I)S\xa5\xdb\x8f!\x8aA\xee$\x0e\x16\xf7wL\x9c~8\x10\xd2\nJ,D;Z \x92\xccY\xd7', 0x3a, './cgroup.cpu/cpuset.cpus/file0'}, 0x147)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x240440c4)
socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00124788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25040000001400020000000000000000000000000000000000140002007465616d5f736c6176655f3000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x240080c1)
syz_extract_tcp_res$synack(&(0x7f0000000600), 0x1, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000600)={<r5=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000640), 0x1, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000640)={<r6=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x11ce, &(0x7f0000000940)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, "2cc052", 0x1198, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, {[@routing={0x87, 0x4, 0x1, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @routing={0x0, 0x2, 0x0, 0x9, 0x0, [@mcast2]}, @fragment={0x4, 0x0, 0x9, 0x1, 0x0, 0x13, 0x67}, @fragment={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @routing={0x21, 0x8, 0x1, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @local, @loopback, @loopback]}, @srh={0x5c, 0xa, 0x4, 0x5, 0x40, 0x38, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x8f, 0x0, 0xa, [@dev={0xfe, 0x80, '\x00', 0x3a}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {{0x4e21, 0x4e22, r5, r6, 0x1, 0x0, 0x14, 0xc2, 0xb, 0x0, 0x4169, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "a73ee50d519c951476930de3e0dda12e"}, @mss={0x2, 0x4, 0x3ff}, @sack={0x5, 0xa, [0x8, 0xb18]}, @md5sig={0x13, 0x12, "34aeacc43cad5238d9661f7f910ac284"}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x7}]}}, {"1270d2d7d49a6b9e02c6a4fdb83a420bb63a509d338166c1fe2037f1d8d35c01a978defc61649010df44e79c25d618670de2367b5257b62f4ee6807efba36810926cbc06207ffab65e9850ff99e7fc436dcd816ccf0094f7ca16648d87b1f91f1d805b720b2024b778006964d61a021d7b1d0318eb14733b65eb578507c27762d9dc4356aee1c0fe2da4e45f9a6e26acde1b74ae4ae59c3c48864d0e7af29996e2c0c73a3d88af6c1d30df675986d8fc9152f9f9840061549431edb24e00e36a00abaef60720c68a5f3bb491db5c7540876d29de36b0197bbfa130d25e33cec18fcfb7925b48d74bdf06832e569f6ead4bc8c9ad925bb95fd679cd5762d0f2552b25484557252ab0251400088ae4002585708af081f97f889192776ff32d5f88108e9bb7ebb9ac330cfb7352bffc373a4c0129566640f35d3f3c5add685231883bd5392d31c89dd871d3be89907fddefec50ce4c5eb6474dddff13acec3ad9509e0b7f78e2b7bf87f6bcb71cb9284cfca25f36c7ed896da012892e9708672de72423c046e4e5023a47fec2ace2e2c25e3bd9826e823e4e353319e1c018a4f0234578f0e5a630dec98d0e0d477997a8f6c0dca160ee0f9e9de92bf717cd05951d107f5c10a19fbe41de3c96bd4950c057780b41082ad05770055b6a72ad5f80bae6b9dbf9ab188c1c37fd34ff2bb79085723e04b5d01f8181d482d6ae0168381e0936563fdcc93f2ce955d02c4ac30af4bdd7872f8c534e475763f90e5a267a149c187d6dd05f9aaefc4c8adedb3204585f9f75a8e2b170e58e08ce36264f7d5ff680a2b01b4ae1270cec01968aba8a0aee5a55ca37f34d2df98975a51c2527ef5fbe28a3e6c9554a1481fccbe72e45908aefa9b2fa4978bda72dad90ef162af675815c972b7e9a4de4f925546d21ce3bca5a9e129e9b155120c87cbe504bf355caf7dfa3ee7cf4adcd84197aa715e75ef0c7e5c0e53a28a9e0f29c94f973b7c6761b4ead8112c7169e538fcd32d023103b1398472515db242c35c29d7fc1b29a33bb61efe9ebcf8514e9bb04e0d40b5fd65a6826de4755d4a3840caef1c54d73463978423d7f8c9fb1b3e92f35da64c9700230da3f3e1dd35dd7081f2d2e2d0ba06bce8e4f52dead820bf5d56acf670282c6f7b41eeadb594f2d1fe811aaf493281731d1f0b9fc4feb123724d694fdc828bf2e350bd5a9b8a0d94364667d10b53037a0acf062a37242fa92ff891d4bad5feaafa99c6552e6dc8bf1f0f947b7551e25a6946ca67c85b91b806c8d265076f79fd7c3d81fdcd98a3fd68ea69ea909100387d0db3b748624df520d3d2d3be0a699443e5936cad2ade13005b58165866a703fc877a5c11f65980e55bd45705926ade23b37efb3d99fcdea983460b84733fb5a7d2d284f2322efe1a4804220ed73b62ae42d3820039ef6aad3a9d1f751d7c63f0e57bd11e3e3b0cc86459abb0d4fe7996652dc1d76cba8cbb735caf87449cc13d27afd80fb0ff394526fed86a617e173f95ea7c2e409ed7ea334eb8a4dbb5ec0a3ccab061257832c4a9fa23066d22ccc02f1723bd0d2c2c1398d0eb207ff7efe0bfe4b01930e71068e277172cd8db7672c003ea9fbd63b09ec260332e8c6dd587f0937144e33666acd22fea017f594cd8845dc8b0b8e8752a6bc0a8646f79950f30db947e8c58bd5604931a9986465cebfc428696e109a846e33651d9b9ece3c2b07ae80df53aaac1834fb11ef7513233a11ef63694c1228fd6be73be6da83450ebad23c97d2c52157b9039b82a1d20ef818427970eb9fad31ef7398ebe55359196022e5ee87b77151e8902fe818bd8625488067f1d57f44c5f9fc6031299d951b7919f3bcc95b76fe8758da3388e21439e75522ac30d19114132187b96178d05de42e2cd7cec4f25f77404a61a824849fea2280a99664321e0fed1576a04b6f0a827d12ed84bbf1f613f1d8230a2f593e491c1e5f6a169033bc557d12395c46b67edfeb2c07cc1174bc8d05b4afbd917769e491637c524f7b771792c82e2765be42422c771dc5ac283ab9d3af0625ce5bc8b771e8c209ef3cde59e6dacf0412be21689aab68a2990e8b7e127c854e77d9915a955d6a449aa65fec5130141ba88fe08d741d85cd7fb623bb5d3285b1461d2e96acc6d6a853c8f6620cab8629a2e9348dc99e4f3dacea5f2a533e842991b34f2bf493cfb8bd26d34e179a585885fdca0a9fcc89e3d5010b695687df0cd9cd0a2cf2928ab4f3aa5e3f9f0e2fe25f41613678459c12761157330ffb708c5dfe950531cbcd78989b306e922227e733dc5cfc05635a63ea78b8cafa645e3ab2c1e69ff3dd96507227c10c6622f01d01d33cca182e53ff68ff2142fb94f3ad56a55e40c4f519856f465f46dbc1126f615e2270f6e8e7a99cee1ea77e64f5fb2956317e13fe39deff3a37edc1d22d0530cca6ca4b7f59c89817ae50277492373013fdcb6371e6728ec012bd67d85addcd8110a5a8c8c4d411bda4ff0346c5e2a4ee6c6c9802a5d7733cc1aa0254ccd5a454d7767e7252ac099cf9a0fb701155e967119dfbd938d4acdf507cc5f20cc1549962d00a473d7cd0f122e53d8cae7c9297ed2e74ecdfb2e040e8474f300a241b93a047c3c558ab0cadadf9c141e03ddb7784daa664e449446585ef1ef44ec9a5be207bf4b8833eca812c6057abdfae0d7b5cc3eedae39e29e37518fc2302f4552bdada5cbd380c4efa7f9c3fef040457e9285e764900e4147c21a9fc5d0dc40a3ad38a1793b90be4e686aaa784e6970e4b80a21a8d4d1ac7acdb331d1eaf6405abd4436b97ba2bd5132c1011cb0286437ae9c52ab596e9fb546d2b6361d1d8eeaff2e8f86b3df8e64a4e18721696eb543765a108251a135089d436c7316e2aa0e73098e4b6c85200aef59459087a9a316d0b495e407b42e9e8f6e07acb7524130bcfac49647bd2e2375e62f94a41849ae5f3f72e758cd8222fdd731551a7570b7325624bf9b95f6904fc457ad5e2514249294c0e9a6dab740210baa5486b832710054d79f6a29134a38fd92da31ddf7df5e9150ec37040659ecf43faaf0365acd786fb9078bdb89f344dcba0dc30dbc16057cd6ce6722cb7ac391faa6ed26346b81fa1a3135b76f66baf31a46ce96ac2a0400456e50b52a7155519cccf6b19736b48850674f037927f77d6987c586125ec4bc82001e72c52961f923201e904597f4401f37eb5ffe91d9768c0560e277d4cf0b7dd11f1ac3e469129d98586f74977a75b8af0ceb7026f31529bbd2d9781d16543971e94c78c379bb767860dab67d83756c9b709135a97381d540c02a63711d7331d30d60a92f4f5c63b53280e05aa8a9cbff24a9e95c72fe1bada334b4577e0bd64f1d12c9b2aaefe9a46aa86a519bfa7be614777476da30b2bb79d55ea39ae0027b1ca4e71842055cc39647279dfc5f45d4c40413288830ccfa82c96fc9906fbe76f2b9ef9887b9dfbab014b6e62a71b92c4927ed965a6fb618aacaddbca93c605885ca0db7b5bce25f2368f28e31b34bdd924d6d4d375acc4ac7d7895cf2e3660ea13191b079874fa9a70ad8c00c6a886590d3626d2325e81360640ed82debb4af462c97b0bc694c6cd1b196250d7084a971dd692c4f138adc01c9443c919c2e9d70a9563dda24e704a2133435614d0db51496adab848ad826a0d5126509d620c5fa10468c7c29b7f25e5f0552af9cf9f5a28bd54e00d68ddd23e7d466a4c93c1da069b276afef7132805d4337610c4742d43d1db91bf070715e0dbf4b1621ee83aa3305f3d4d1ed6a0dbb160bae6f765a284ad86d0e719a00dbdfe576cd7f369ea24637110fb985e77ff370a21fb52f4a1cf94a2f5cef672ddfc439598aeb6b600700681ea1f4c43cd0ed4bde0180dbca71990436b54887143d2b48412f929f82d1a8a74a317705cc71229501bcbbeae1ea3b34d68d238502a75320ee4cd338ef886c5e260f2ddcd539a4cf90d2381cea66a59342b3d6a01b038deb9a2542ded56eac4ebe8ddbe0819d990ff8c4f2036d90f9c14dbb43bcbc8ac471f8f1f35d2c37d9c00f94b7aaf6c6e67d16a5291e0c25e8b22003082f28d4d623c45e1d7e190076604e50ae7ed63ca88f4eec6d7839092080a58bd99b440c087a598baa8e209f5cf097748268e15c048b42b082bd5f14efec7985ba22bd84612c237ee03273bac17a27b96236cc91cc3a9e20897e6b488ba2aa0f1b67391c345afeadf6043c6cd6abf51f4693c1c64a15d553f6d17fd77b87324f54b03e122f80e6be13fbf86f58b1564c121c2d5b64b9349065675386e4d12f8b0e619885e0fc35717b22edabc9c3bc905cee35176e494b60060f82176602a895b54687a0176178dd3290a2b4646d48ff9635d383f60c2d4d71106122cbe986195a26a86926e602ec3b00a4af22aa4ad4faed63b763947e637a58fdff9a46f3358cdb1b5ac5ceaaf269c85438bd997e894f6500ea7afb2144e2b6ffe669a2bf51eb8a70af80e520eb0afaf8e25f5e5ada72de4d57304ddba6996f92c73cf885124ca919c66e699518d148b77f6b6c58a34dac810c99c3cbc068d5e4ff901f8afe473f5ab46622df675ca71ec4fb024299805df7865f6bcc0af548e8697a9fb7e59fb7e1df85852c07328a7bb2dd7f5c142cbecdf9282b3f46346e243347c5bfc7d612e80d40db86a3d70409a9bdf5d0e900f5d19c06830bfa90b53fd6e5f910ac077ace0950b7c436cb6606927f74a4ad59f21764fbf56309a8fd023bc8ab129186ba730ecc373bbfecf3f219ca162afd1f1697dafe38a2bed72ceadfd409376e6a0d94c6d841d151ac69d16a5dc04611026204c02a6690d31f542f09cc005d45295a788ec605207413b8259c3528209b326d2809bf89aa22fe788bf2a3ad09ae873f6911d9393fcf03b5977c973c9d3ccd337ff033851ebe36dd7ea0318b7f50d2768157206e21e94e81d66b5fde60396d1d6c0333b50f4cef95a03f45909e1c34c459f000b8e7668925d8356a12044a5e8113e66ac845aec4919f6b9f57051636da433f154baa1f88a828f5ad6f7f120ea2a4a437df0c0022425c854c6804fc404a0205e7053101fecd221682db08673fc941081f360bcb084b4d7219b1c3f95d980436f5d2b376f5916c6afd1ee724adb405d7b7f0d79117308ae6eaf991395eb7ac88c733aa1de1c4c8b49380a9845c9f24f30023a1e7513e71476cf6660b678a122c21a343c373c2089367150fe37b0cde6e9ae342919484eae185bb317ab1eac65eefb265d5239317be9cee82048beae6dca647acba2801b531b38a722a07e88e35cede8778869b163c49a004bec5d350fc4251a304a03e68400e0f205bb3edbcece864a00a37d8780f9da06b10fa722b8a4dec6f80c61bed053def3440f36847825fffe126f77c110ac7e7fa42c2b7e6ecf2e11c12f57d97b905386dc65159671ac7174658b7310747979ef1854a47d06171a300264ad736aca64ac0a81f11a8c69d4b3d4e4583fe1af165c5e0b81b913c622528e7e519d4a420ace6cd4795b156b34ea4bea510ea38eccbd2a22f3043a30bd32e3ad3219baeadb42ca10f1a9875aac45a7d4d57c0f0cc1193c00d7eef0e2194acfcb075fdd13e79b6969dee0baaa5c6932f95969ea507b0a8509159b5c48792714cf20e72ebb7c45cec0220a1cf1e87a94914096c030209ab749c1ca8b8ac5fb1a6dcb594d23c96f53e193e62270162d5c6ccc5da9d682e9a52b8ebe77c7692879e82c3cb1bbca74ef240638404c37dab63466d988441cb2c017463688"}}}}}}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',defcontext=\"']) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',defcontext=\"'])
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

21.640036051s ago: executing program 0 (id=45):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x200401b, &(0x7f0000000180)={[{@block_mode}, {@nobarrier}, {@two_active_logs}, {@compress_cache}, {@inline_xattr}, {@gc_merge}, {@noinline_xattr}, {@nodiscard}, {@prjjquota={'prjjquota', 0x3d, '&@'}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@fsync_mode_strict}, {@resuid}, {@adaptive_mode}, {@jqfmt_vfsv1}]}, 0xfd, 0x5533, &(0x7f00000066c0)="$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")

21.319900327s ago: executing program 0 (id=48):
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) (async)
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) (async, rerun: 64)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 32)
r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6c99, 0x40041) (rerun: 32)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8bd4cec)
write$P9_RLERROR(r2, &(0x7f0000000140)=ANY=[], 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
getdents64(r3, &(0x7f0000000f40)=""/4096, 0x1000) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x489, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xd, 0x4, 0x0, 0xffffffffffffffec, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0xc, 0xffffffffffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0xbc, &(0x7f00000005c0)=""/188, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x3}, 0x10}, 0x94) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
ftruncate(r3, 0x7) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 32)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000080, &(0x7f00000001c0)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@sys_tz}, {@gid}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@discard}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f0000000280)="$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") (rerun: 32)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0xfffffffffffffffe, 0x1000000001000001, 0x2, 0x300, 0xde91, {0x5, 0x200000008, 0x5, 0xfe2b25c, 0x7fffffffffc, 0x20000006a, 0x3, 0x0, 0x4010, 0xa000, 0x2, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) (async, rerun: 64)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async, rerun: 64)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000003c0)={'security\x00', 0xe6, "a27c4b6e5d5ee486c4dad9b7d540d60a26568c42c3368c79e4f6366bade82bd785200e922f3e86eb4b9cd7166031552efe81d06602416f76835494f93dfe5088b129b280c1bc78245075479acaf7c7014f915485af7e6f26678b3674968b97b86391746ccaed2d270fde0fac7113ce80e9db1bd7acbcb3a2dd522869fbe2d2e8c4af85fdf6785438bd8f72509160c678b65b82f3693a3f68edf3bb4f903fa761e361f8c3551c604d470024e70d9d1c015d8788fcf50ec930f30490dc98d468755580a2e072430a99838c8d6ecf3a63a0a765bfd272d0f9080079e89761e6e269645952fd62f5"}, &(0x7f00000001c0)=0x10a)

21.273716906s ago: executing program 0 (id=49):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2309e}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022224000009623130c7f009e040d30f5b15d00070b00be0883", @ANYRESHEX=r1, @ANYRESOCT=r1], 0x0}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8})
r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0xdd66}, [@map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f00000000c0)='GPL\x00', 0x7fffffff, 0x5e, &(0x7f0000000300)=""/94, 0x40f00, 0x60, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[r4, r5], &(0x7f0000000480)=[{0x4, 0x4, 0x6, 0xa}, {0x1, 0x3, 0x5, 0x1}, {0x5, 0x3, 0x3, 0x1}, {0x3, 0x2, 0x0, 0x6}, {0x0, 0x3, 0xb, 0xc}], 0x10, 0x2}, 0x94)

20.303566971s ago: executing program 3 (id=71):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000003c0)="aa3cbfd4878c4419b27ddc8ef7431afdd110b81366b75b6fcf030000006b5331aeb2e73594f4fba748576ecde0a23ce3e36d100e59fe0690c5b3e20b0000000000001a02000000", 0x47}], 0x1, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x18}, 0xc800)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0)
setresuid(0x0, 0xee00, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x3000000, 0x32, 0xffffffffffffffff, 0x1a326000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x0)
mprotect(&(0x7f00001af000/0x3000)=nil, 0x3000, 0xa)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfd000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000002c0)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000000, 0x200, 0x5, 0x7, 0x5, 0x80000001, 0x1}, {0xd, 0x3, 0x1, 0xea, 0xff, 0xf5, 0x8}]})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x81)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
poll(0x0, 0x0, 0x0)

19.927003924s ago: executing program 3 (id=72):
socket$netlink(0x10, 0x3, 0x4)
r0 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x3)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x101, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0008626e8b0003e1d9ee610000000000000000000000009fffffff00af42f48bcdab63fc01f0a515a17795bc8b3a0a6b8e1ee6886339dd94e2c47aefdf35f44195d97c5f706c5cbf5329dca16ee4d9b5d0373682902386dd86a3d1a632e4e7bbc4fc5cae33fcb01251048894069ee41e5705c3202989a4186c02af2caa8d12c2272dc87168aa30a46651dc629d34a948201454cbd518da35d9799c27bb89af173296347d696195d19e8f75292f4e0bdd93d618e4f2f96a06f8141d644c97000000000000000000", @ANYRES32=r3, @ANYBLOB="0c009900080000007b000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040044}, 0x4004)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=<r4=>r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x40)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005580)={0x6, 0xf, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r7, 0x0, 0xd, &(0x7f0000000080)=0xcd, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x30, 0x25, 0x2, 0x70ff}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r8, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
r10 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
ftruncate(r10, 0x80079a0)
lseek(r10, 0xabe, 0x3)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
fchdir(r6)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYRES64=r6, @ANYRESDEC=r4, @ANYRESDEC=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r11, r4, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c)
preadv(r11, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/139, 0x8b}, {&(0x7f0000000240)=""/58, 0x3a}], 0x2, 0x7, 0x10001)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5)

19.91016361s ago: executing program 3 (id=73):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000000000), 0x2011)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

19.902046607s ago: executing program 3 (id=74):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080))
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000040)="9879ffa09bed9e22a51e36bbf10829f06cd1fbbcb3d3845f9ab5318c0860f2e177f5c64adc199457683f7d56c047b241269ea29cf3c9905936bf2c3fae01cf", 0xfffffdfb, 0x201, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000280)=""/11, 0xffffffffffffff2f, 0x10720, 0x0, 0x0)
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="529a3ccd", 0x4}, {&(0x7f0000000100)="8f64", 0x2}], 0x2)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80080001000832067ee1ec924b699681ed33c9f01f43ef92e97fd744144fcd36835bde2f5decc2a2db48aa3f201cc0585593f9b2b51cc37d9c94fcd1a6", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)
pipe(&(0x7f0000000240))

19.484006971s ago: executing program 0 (id=79):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r0=>0x0, 0x0, 0x2, 0x3a, 0x4, 0x2e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @private2, 0x700, 0x700, 0x6, 0x554e}})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140)={[{@acl}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dioread_nolock}, {@nobh}, {@errors_remount}, {@journal_checksum}]}, 0x1, 0x783, &(0x7f0000001000)="$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")
r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$tipc(r1, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x20000000000002ff, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)

19.313799241s ago: executing program 3 (id=81):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x2, 0x28, 0x268, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x7d, 0x8, 0x0, 0xc9}}}}}}, 0x0)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX], 0x1, 0x105c9, &(0x7f0000020b80)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x283016, 0x0, 0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0104d2000000fedbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000001b80), r1)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r1)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002640)={0x18, r3, 0x311, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f0000000180)={0xbc, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x74}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf8000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4004000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0)
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
fchown(r4, 0xffffffffffffffff, 0xee01)
read$FUSE(r4, &(0x7f0000002a80)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
newfstatat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x800)
r7 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000140)=<r8=>0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x3ed0, 0x6})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r8, 0x1, &(0x7f0000000040), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_pidfd_open(r9, 0x0)
pidfd_send_signal(r10, 0x4, 0x0, 0x2)
write$FUSE_STATX(r4, &(0x7f0000001340)={0x130, 0x0, 0x0, {0x5, 0x8001, 0x0, '\x00', {0x2000, 0xa47, 0x21c, 0x18b1eeee, r5, r6, 0x1000, '\x00', 0x4, 0x4, 0x3ad, 0x0, {0x7, 0x2}, {0x0, 0x2}, {0x7fff, 0x9}, {0x1, 0x8b}, 0x8, 0x6, 0x3, 0x8}}}, 0x130)
setresuid(0xee00, 0xee00, 0x0)

17.576891358s ago: executing program 3 (id=92):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0xd0256000)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0)
socket(0x10, 0x803, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x14}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x84000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r5, 0x42024, 0x8da5}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x4}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

12.11993931s ago: executing program 1 (id=104):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
r2 = getuid()
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x400000)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000002000010000000000fbdbdf250a400000000000031a8003000c00340098aac92354c1dc4c8afaa1ad8a62eeefbb4d9aaf91549608ea0302", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="82fd18004e244e2108000a0000ffffff"], 0x38}, 0x1, 0x0, 0x0, 0x200400c0}, 0x40000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x7c, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x4, 0x3}, @value=@ver_80211n={0x0, 0x7ffe}}, 0x1c000000000000, @default, 0x10a, @void, @val, @void, @void, @void, @val={0x5, 0x3, {0x0, 0xbd}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x9, 0xff}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x8, 0x8}}, @val={0x76, 0x6, {0xd0, 0x3, 0x34, 0x2}}}}]]}, 0x7c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x8000, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESHEX=r6, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRES32], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38)
r9 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
pwrite64(r10, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r10, 0x40305829, &(0x7f00000000c0)={0x17c04, r9, 0xcd0e, 0x100000002, 0x7ab2, 0xfff})

10.537000713s ago: executing program 1 (id=108):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x20000010, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
setrlimit(0xc, &(0x7f0000000000)={0x2})
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
userfaultfd(0x1)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00')
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8b4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x880, 0x2, [@TCA_U32_POLICE={0x858, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x0, 0x2c0, 0xffffffff, 0x0, 0x3a8, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xb4d11c0f3fb501bd, 0xffffffff, 0xff], @ipv4=@loopback, [0x0, 0x0, 0xff000000, 0xff], @ipv4=@loopback, [0xffffff00, 0xffffff00, 0xff], @ipv4=@broadcast, [0xffffff00, 0xff000000, 0xff000000, 0xff], 0x7, 0x0, 0x88, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x804, 0x1}, 0x42, 0xe00}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv6=@empty, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e22, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x5f2, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xb3, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)

9.108991741s ago: executing program 1 (id=110):
syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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")
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
recvmmsg(r2, &(0x7f0000005a40)=[{{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000600)=""/17, 0x11}], 0x3, &(0x7f0000000680)=""/215, 0xd7}, 0x4}, {{&(0x7f0000000780)=@tipc=@name, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000800)}, {&(0x7f0000000880)=""/229, 0xe5}, {&(0x7f00000009c0)=""/154, 0x9a}, {&(0x7f0000000b40)=""/219, 0xdb}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x5, &(0x7f0000000cc0)=""/122, 0x7a}, 0x3ff}, {{&(0x7f0000000d40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000004180)=[{&(0x7f0000000dc0)=""/242, 0xf2}, {&(0x7f0000000ec0)=""/83, 0x53}, {&(0x7f0000000f40)=""/89, 0x59}, {&(0x7f0000000fc0)=""/153, 0x99}, {&(0x7f0000001080)=""/93, 0x5d}, {&(0x7f0000001100)=""/93, 0x5d}, {&(0x7f0000001180)=""/124, 0x7c}], 0x7, &(0x7f0000004200)=""/205, 0xcd}, 0x6}, {{&(0x7f0000004300)=@alg, 0x80, &(0x7f0000005840)=[{&(0x7f0000004380)=""/200, 0xc8}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/222, 0xde}, {&(0x7f0000005580)=""/108, 0x6c}, {&(0x7f0000005600)=""/100, 0x64}, {&(0x7f0000005680)=""/167, 0xa7}, {&(0x7f0000005740)=""/133, 0x85}, {&(0x7f0000005800)=""/44, 0x2c}], 0x8}, 0x2a0400}, {{&(0x7f00000058c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000059c0)=[{&(0x7f0000005940)=""/55, 0x37}, {&(0x7f0000005980)=""/55, 0x37}], 0x2, &(0x7f0000005a00)=""/3, 0x3}, 0x400}], 0x5, 0x40000100, &(0x7f0000005b80)={0x77359400})
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838)
preadv2(r3, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8011, 0x9, 0x1c)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x40000000007d, 0x5, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xffffffffffffffb6, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
socket$packet(0x11, 0x3, 0x300)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="080e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="080e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x9, 0xa2, &(0x7f0000000180)=""/162) (async)
syz_usb_ep_read(r0, 0x9, 0xa2, &(0x7f0000000180)=""/162)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101940, 0x100)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x10) (async)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x4002}, @call={0x85, 0x0, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94)

9.090351307s ago: executing program 2 (id=111):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000005800000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

9.029356773s ago: executing program 2 (id=112):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_io_uring_setup(0x32bc, &(0x7f00000003c0)={0x0, 0x69df, 0x2, 0x3, 0x34a}, &(0x7f0000000500), &(0x7f0000000600))
io_uring_enter(r1, 0x0, 0xa9a7, 0x3, 0x0, 0x0)

8.166541592s ago: executing program 2 (id=114):
unshare(0x42000000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @rand_addr=0x64010101}, {0x4, 0x40, @remote}, {0x2, 0x0, @broadcast}, 0x22e, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x71cf0b8c, 0x0, 0x5})
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000140)={[{@barrier_val={'barrier', 0x3d, 0x1}}, {@errors_remount}]}, 0x2, 0x44c, &(0x7f0000000f80)="$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")
r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x40)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x4, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
read$FUSE(r7, &(0x7f00000083c0)={0x2020}, 0x1497)
read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020)
fallocate(r2, 0x0, 0x0, 0x8800000)
r8 = socket$netlink(0x10, 0x3, 0xe)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000240)={0x3, 0x3, 0x5, 0x1ff}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d00000000ffdbdf3502200004ff00000600dd764a980e467cf1579cfe7a7d4ce16331a0a9b0d75bd884c7f46898cb3cc1b5e4b84a58bc2de343ee5e8e45115e3aa085b04f1d4f47cd45962ee92d59c25a320a4a837276aa0df86c585be44f10215fe677e638856a4f3b5931080bce3ef6553097727c8cb791938f60e0d770d4bbf68a4a2cd31688ac3f982cd148075b80944ab47dcc0c1718d03cacb7b1be4df8b186ee093bd120704180fdaade4faabb322a7154d02377e8a5dd4bb5469da3ea"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="38000000200001002bbd7000fddbdf2502"], 0x38}}, 0x0)

7.767836361s ago: executing program 1 (id=116):
openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x201, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x82d03, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x1f1e)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000700)={0x9, 0x1, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f0000000940)=""/219, 0xdb}, {&(0x7f0000000800)=""/145, 0x91}, {&(0x7f00000005c0)}, {&(0x7f0000000a40)=""/254, 0xfe}, {&(0x7f0000001040)=""/233, 0xe9}], &(0x7f0000000600)=[0xe4, 0x4, 0x4, 0xfffffffffffffff3]}, 0x20)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}], 0x2, 0x24004c41)
sendto$inet6(r4, &(0x7f0000000340)="c5f5c65a2bd872022c8098375bba2ec0d40d517600ec29411f023be40edbb4667ebc418782c67f9145037b388876fbfe6d", 0x31, 0x20008000, &(0x7f0000000380)={0xa, 0x4e21, 0xb96, @ipv4={'\x00', '\xff\xff', @local}, 0x298}, 0x1c)
ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000000140))
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./control\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="757466383d302c756d61736b3d303030303030303030303030303030303031373537372c73686f72746e616d653d6d697865642c636865636b3d7374726963742c636f6465706167653d3836362c696f636861727365743d6b6f69382d722c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c696f636861727365743d6370313235302c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c726f6469722c00aba802c3e47903d002c04a84e760d78856d7e1a4699e49176d69514048bf46f8f430"], 0x26, 0x362, &(0x7f0000000c00)="$eJzs3T9sG1UYAPDPvTR2K7XJgFTBZNiQUNUWMcCUqipSRQYosvi3YFGXPzlTKRaW0qGuFxAjiAUJJjYGGDsjBoTYGFgpEiogFrpVasUh+8722U4gQXJCxe83RF++9757711e5EuUPL+6FhuXDsfl27dvRa1WiaW1c2txpxKrcSiSiIheRCVm9GcTAMD95E6WxR9ZrpQ+sX3vD4+OouV9mBsAsBjD1//Xj+Wf3M0iqgc9IwBg0Xb4+X/Ws9tmryxsWgDAAs29/j8y1Tzza/6l/G8CAID72vMvvfzM2fWIi/V6LaL9XrfRbcRTk/azl+PNSKMVp2Il7kXkDwr508Lg49MX1s+fqteiXv9lNRqDim4jot3rNvInhbPJsL4ap2MlVov6bFyfDOpP14ci4npvOH60K93G4ThajP/j0WjFmViJB+bqIy6snz9TLy7QaI/qexH9qI0WMZj/yViJ71+LK5HGpRjUTuZ/7XS9fi5bL9U3I6I67AcAAAAAAAAAAAAAAAAAAAAAAItwsj62Oj7/Jmv3uu9enO2wWj5fp9vIm4vzgfr5+UBZdXQ6z/tJ+Xyg8fk8g5KifikOHeTCAQAAAAAAAAAAAAAAAAAA4D+ks7UczTRtbXa2rm6Ug14p8/a3X3x9JCZ9KjEI3kommVjKLzd1nSIXpSsnMR4iG5dnyVSfIkgiJp0/vzGecZ5JtlnL3CqqwwWWM5ViTs00Pfbwz5/MDbp1dePPSSaJudsyHVSKkUtN7eN56m+qdg7O/EOfm1mWzTZdz5fTuvbxfFVUIpZiz9PYRfDNrTcefLxz4olh5qvi0IdHH1t54eZHn/220UyjuDVpurzZuZf967GS0v6pxGj7bbPZtg36k0x/s7PVTH74/cWHPvhuqs+RuU1SBFk5884oqE1/uZtp+uXs6Mt5MJjmLlZ6fKfdOx+8cne8e/d+M098uta8ce2nX3dbVfrGclAHAAAAAAAAAAAAAAAAAADsi+H/+m4d22PVk88taDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCCG7/+fpq3NctCfy+wmuNuLNK7PNFVbm50dBz+yr0sFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7K8AAAD//0A6aXo=")
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1ab000000000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "70176140"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x10}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "51eca1c434"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000f4c8dc5a564a9d0a0000000000de12feec7604cdeb22b7bf0e77abdb1428bb6e60c4d77fb50e75ce5fc15f1a84036104660f351b987358d4b64e3376980dcf140765c113194e05db15c78afce7c1f0b87166d7f04c9973961240d11c425c8367e1037e95748066959ae53cdb13e2e77bebc057f120533642e26cf4b0d8fab37eba27ccad335e5728e4d3e77c6b951aeea4fe852952e01740c1a21a7c0996ad99435f51a3053db60b7b32353048675e200000000000000000173400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r11, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)

7.026674108s ago: executing program 1 (id=117):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x7, 0x6, 0xe, 0x5, 0x10, 0x3, 0x8, 0x0, 0x0, 0xf7, 0x3b, 0x5, 0x8}, {0x9, 0x0, 0x9, 0x0, 0x8, 0x4, 0x1, 0x3, 0xff, 0x4, 0x7, 0x1, 0x9}, {0x61a, 0x3, 0x6, 0x0, 0x9, 0x7f, 0x9, 0x79, 0x80, 0xc5, 0x1, 0x3, 0x5}], 0x6})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40800000000000073113f00000000008510000002000000b7000000000000009500c200000000009500001200000000de7721b95b09c1d8e20eef5cd811cda7f6843e706adbdee2c086569fe181ec0a9eba497b36a4632409e0413b44e2"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r3 = fsmount(r0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r3, 0x1, 0x0, @void}, 0x10)
bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x20, 0x35, "7895bd297909e81d8fca192bc1dc19619af1e10668d457292989c0fcccd2cf0350e06ea4f14423a3d766a37c584a0756cbdcb882e4"}})
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x80)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r8, 0x12, 0x0, 0xffffc665, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$EVIOCGBITSND(r8, 0x80404532, &(0x7f0000000240)=""/114)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000000)=0xfffffff9, 0x4)
recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)

6.218150151s ago: executing program 1 (id=118):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f00000003c0)='./bus\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r1 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009}) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x1}}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @ptr={0x7}]}, {0x0, [0x61, 0x61, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f00000002c0)=""/200, 0x50, 0xc8, 0x0, 0xb2e}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x26, &(0x7f0000000580)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x7, 0x5, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0x9}, @alu={0x4, 0x0, 0x0, 0x5, 0xa, 0x80, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}, @map_idx={0x18, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc00}}], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x5, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000007c0)=[{0x0, 0x1, 0x9, 0x9}, {0x4, 0x4, 0x5, 0x1}, {0x4, 0x2, 0x7, 0x4}, {0x3, 0x2, 0xb, 0xc}, {0x1, 0x2, 0xe, 0x6}, {0x1, 0x4, 0xd, 0xc}, {0x3, 0x5, 0x3, 0x1}, {0x3, 0x3, 0xf, 0x5}]}, 0x94) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1e, 0x9, 0x1, 0xd, 0x800, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x8, 0x7c74996c, 0x90000, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x3}, 0x50) (async)
r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async)
r8 = fsmount(r7, 0x0, 0x80)
openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x20, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x1d}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, r2, 0x8, &(0x7f0000000480)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x4, &(0x7f0000000a00)=[r4, r5, r6, r8], &(0x7f0000000a40)=[{0x3, 0x2, 0x0, 0x9}, {0x4, 0x5, 0x4, 0x4}, {0x5, 0x2, 0x1, 0xc}, {0x2, 0x1, 0x10, 0x5}], 0x10, 0x2}, 0x94)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r9, &(0x7f0000000ec0)=""/4106, 0x100a)

6.076568608s ago: executing program 32 (id=118):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f00000003c0)='./bus\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r1 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009}) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x1}}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @ptr={0x7}]}, {0x0, [0x61, 0x61, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f00000002c0)=""/200, 0x50, 0xc8, 0x0, 0xb2e}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x26, &(0x7f0000000580)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x7, 0x5, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0x9}, @alu={0x4, 0x0, 0x0, 0x5, 0xa, 0x80, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}, @map_idx={0x18, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc00}}], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x5, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000007c0)=[{0x0, 0x1, 0x9, 0x9}, {0x4, 0x4, 0x5, 0x1}, {0x4, 0x2, 0x7, 0x4}, {0x3, 0x2, 0xb, 0xc}, {0x1, 0x2, 0xe, 0x6}, {0x1, 0x4, 0xd, 0xc}, {0x3, 0x5, 0x3, 0x1}, {0x3, 0x3, 0xf, 0x5}]}, 0x94) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1e, 0x9, 0x1, 0xd, 0x800, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x8, 0x7c74996c, 0x90000, 0x400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x3}, 0x50) (async)
r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async)
r8 = fsmount(r7, 0x0, 0x80)
openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x20, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x1d}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, r2, 0x8, &(0x7f0000000480)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x4, &(0x7f0000000a00)=[r4, r5, r6, r8], &(0x7f0000000a40)=[{0x3, 0x2, 0x0, 0x9}, {0x4, 0x5, 0x4, 0x4}, {0x5, 0x2, 0x1, 0xc}, {0x2, 0x1, 0x10, 0x5}], 0x10, 0x2}, 0x94)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r9, &(0x7f0000000ec0)=""/4106, 0x100a)

5.318790973s ago: executing program 2 (id=120):
clock_adjtime(0x0, &(0x7f0000000000)={0x20000066b9, 0x200000000, 0x3, 0x6, 0x0, 0xffffffffffffffff, 0x78, 0x1000000000004, 0x0, 0x4, 0x0, 0x248a, 0x401, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4, 0x400000002, 0x2, 0x1000000000000000, 0x8000, 0x8})
setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0)
connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0x1e)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7ff, 0xffffffdfffffffff}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@oldalloc}, {@block_validity}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@noload}, {@nomblk_io_submit}, {@nodioread_nolock}]}, 0x6, 0x434, &(0x7f0000000940)="$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")
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
openat2(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x642000, 0x8, 0x35}, 0x18)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x30)

4.640925366s ago: executing program 4 (id=121):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x44002, 0x46)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x80000, 0x40)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x290, r2, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x13f, 0x80, [@perr={0x84, 0x2f, {0x8, 0x3, [{{}, @broadcast, 0x5, @void, 0x1a}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0x22}, {{}, @device_a, 0x5, @void, 0x24}]}}, @mesh_chsw={0x76, 0x6, {0x4c, 0x46, 0x19, 0xf}}, @measure_req={0x26, 0xca, {0x6, 0xfd, 0x37, "6cfe5d87c4c764af22a2bafc18381c073a0fce164d20fe234d573b294dca3b6c3f924bd954c075bed0d9ff1aed35e1aca8dec30a6727db9e3c532302c9efed2389b8d303c1685b5e62bf906e87810d2ace8f08ad95ee1cd96ceecbfc3a6f85c34dda848a175fb763f3ad6dad0089615600c9d49d40903f88fc6adbe3c36459a58faca38a144475e8e9d1dac3dff8890e14a5f74a5fffcba5bbfa5123177eecb89461dc59d311f8cf33dc370fedaf96bf211cd8acbd27dc81e0784092f6b0ef044620ca13c1c338"}}, @ibss={0x6, 0x2, 0x8000}, @preq={0x82, 0x30, {{0x1, 0x0, 0x1}, 0x1, 0x4a, 0x80, @device_b, 0x80000000, @void, 0x464, 0x2, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0xd3}, {{0x1, 0x0, 0x1}, @device_b, 0x10001}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x40, 0x2a, [@challenge={0x10, 0x1, 0xe8}, @link_id={0x65, 0x12, {@random="21e9ebeeea8f", @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @tim={0x5, 0x20, {0x8, 0xb3, 0x9, "92ec1bdfc4dc8cab7ce6b105ab7fcc64cfafa09a6b69a0cc911054becb"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x72, 0x7f, [@link_id={0x65, 0x12}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x80, 0x68, 0x2}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x18}]}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0x34}, @dsss={0x3, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x2, 0x0, {0x0, 0x8, 0x0, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x4, 0x6}}, @random={0x1, 0x17, "ea63a08333ebc70ee14cdd59ba0f9eda0b9bdcd042f7df"}, @channel_switch={0x25, 0x3, {0x1, 0xaf, 0xff}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x9, 0x41}}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, {{}, 0xe4, 0x5, @broadcast, 0x5, @void, 0xb, 0xfff, @device_a, 0x3}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3f, 0x80, [@challenge={0x10, 0x1, 0x74}, @supported_rates={0x1, 0x2, [{0x48}, {0x12}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xc, 0x7c, @device_b, 0x8, @value=@device_b, 0x6, 0x6, @device_b, 0xc}}, @channel_switch={0x25, 0x3, {0x1, 0xb9, 0x2}}, @dsss={0x3, 0x1, 0x64}, @channel_switch={0x25, 0x3, {0x0, 0x64, 0xea}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000040) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0xfffffffffffffff7) (async)
r3 = syz_open_dev$vcsu(&(0x7f0000000480), 0x200, 0x4001)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r1)
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd0, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc76}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe201}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa7fb}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xba}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000040)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xa}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xcea}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x401, 0x7, 0x6, 0xffffffff, 0x1]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ba}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x78}, 0x1, 0x0, 0x0, 0x8c0}, 0x2000840) (async, rerun: 32)
socket$unix(0x1, 0x1, 0x0) (rerun: 32)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000008c0)={0x9, &(0x7f0000000840)=[{0xfff, 0xfd, 0x8, 0xfc}, {0x6, 0x2, 0xad, 0xffff}, {0xab1, 0x7, 0x7, 0x10}, {0x4, 0x7, 0x80, 0x8}, {0x3f98, 0x9, 0x7, 0x10}, {0xe8, 0x58, 0xaf, 0x675}, {0xff, 0xc, 0x4, 0x400}, {0x8000, 0x4, 0x2, 0x40}, {0x1, 0x3, 0xd, 0x5}]}) (async, rerun: 64)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000900), r1) (rerun: 64)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x6000, 0x116) (async, rerun: 64)
userfaultfd(0x2) (rerun: 64)
syz_pidfd_open(0x0, 0x0) (async)
sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x40804) (async)
fcntl$getownex(r6, 0x10, &(0x7f0000000a80)={0x0, <r7=>0x0})
capset(&(0x7f0000000ac0)={0x20071026, r7}, &(0x7f0000000b00)={0x6, 0x99, 0x200, 0x4, 0x8, 0x6}) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async, rerun: 64)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000001180)={{<r9=>r8, &(0x7f0000000cc0)='{\x00', 0x200, &(0x7f0000000d00)={@align=0x8, {0x41c6, 0x45e, 0x9}}, 0x5, &(0x7f0000000d40), &(0x7f0000000d80)=0x8}, 0x4, &(0x7f0000001100)=[{0x2, 0x0, &(0x7f0000000dc0)='/dev/vcsu#\x00', &(0x7f0000000e00)="e7aa1b3170d4804373927f03d95f5ca1ce6ad824e4258da008b736aae25df614a900ed11b1ddaedbbac0efabbe60192f5e3a5cd199db60d1b5308d8341cf4ec685f0eb8da0603d68467da383f115c2a0badf8b6945ddcacdb3d09aa9a757a03ca127f17d16e2a40af94898f4a405f2e19d84e710bc3093e0bc1afb52e8d47ea7cbd8089fd8b1b4e16c823933a3eda632761e77e2ac01267a44a18192ffcddaea823f0c11353f3ec07edbc002547ef2b3a76bb91ba18e", 0xb6, 0x12}, {0x1, 0x75e, &(0x7f0000000ec0)='TIPCv2\x00', &(0x7f0000000f00)="d406db52860b74a4339e0a490c049df43e1a9ee5ac43f010e28ce44d3618213f4511a4b0332aa3c7eaaa09677a43f7ef3e40c97addf7ed937c7266da6ab93ac0c20af809b50ef53d50fdb879da1a226ddbe49fe4ed6106bdf5c513d479c7e57739b58fa81b8ef443583961eca7c42a0d65d014b6189305fe985526f7b27118a1230d6cde17a0a92b6f96affcc657aad914209b84d9dcb70f275d982d457b95bf8e1f8e698c982ea56fce879122bb307a3ae0a0fdd1e7e2610a1dfe77819251d5ddc35444c0fc0e9d6c348b87666d5f1b5843431bac0330", 0xd7, 0x20}, {0x1, 0x79, &(0x7f0000001000)='\x00', &(0x7f0000001040)="b59e3fa3bf9d626737f696288009bf5f0b7dca068ca9b76bd7ed1c8516aa113681729ba6d5558305f433fcdda9cb024705dd23ae1bab497fb0dcb8", 0x3b, 0x8}, {0x2, 0x2040, &(0x7f0000001080)='\xff\xff\xff\xff\xff\xff', &(0x7f00000010c0)="dc53081fd59e5e19ed01e8b8c3c3bb9153cface32add1c61cbab488aee6dd2150edca7b8e5cf585f2074b64d953529", 0x2f, 0x1a}]}) (rerun: 64)
write(r9, &(0x7f0000001200)="cda28876a451df7197a3838bcb387e669e7b8ffea1c1a43b0f879a6c1d72422d328c479d3dfa48297c44ed0688fee5cc7f8dc9559bb1552d5f6b233158e483676c1ff1361a2c9bc16480ffb22fd44666f1d6a4f92211f7eb47add75a37f2f1a1e58eed227040bbcfa19dfcb8bece57c09daffcd4537e1e8132497efcfeb18a37141ca2b8418b23ed1121c072bddc8854f85448a7fcd0c7a676c6fcaa84b5848712", 0xa1)
ioctl$HIDIOCSUSAGE(r9, 0x4018480c, &(0x7f00000012c0)={0x3, 0x200, 0x800, 0x6, 0x7}) (async)
symlink(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='./file0\x00') (async)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000001380))
openat$cgroup(r1, &(0x7f00000013c0)='syz0\x00', 0x200002, 0x0)
ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000001400)={0x10, 0x7fd, 0x6}) (async)
read$FUSE(r3, &(0x7f0000001440)={0x2020}, 0x2020)

3.898537474s ago: executing program 33 (id=79):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r0=>0x0, 0x0, 0x2, 0x3a, 0x4, 0x2e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @private2, 0x700, 0x700, 0x6, 0x554e}})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140)={[{@acl}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dioread_nolock}, {@nobh}, {@errors_remount}, {@journal_checksum}]}, 0x1, 0x783, &(0x7f0000001000)="$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")
r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$tipc(r1, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x20000000000002ff, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)

3.569454308s ago: executing program 2 (id=123):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6042, 0x1b9)
write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[], 0x13)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="f30f2d6a0066b9950b000066b80000008066ba000000000f30e600f30fc7f8ac0fba7b069e0f20c06635000000400f22c066b9c00a000066b86ababb5266ba000000000f30f20f78fa0b000f32", 0x4d}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45)
io_uring_enter(0xffffffffffffffff, 0xf3, 0x80ffff, 0x49, 0x0, 0x40)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0)
r5 = creat(&(0x7f0000000240)='./file1\x00', 0xd)
write$P9_RUNLINKAT(r5, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2)
write$uinput_user_dev(r4, &(0x7f0000005b40)={'syz1\x00', {0x9, 0x2, 0x6, 0xff}, 0x14, [0x8, 0x7fa6d3cc, 0x8, 0x401, 0x3, 0x81, 0xa8e0, 0x2, 0x0, 0xfff, 0x5, 0x5, 0x5, 0x1, 0xffffffc0, 0x4, 0x0, 0x9, 0x5, 0x7, 0xa, 0x6, 0x5, 0x2, 0x1, 0x2, 0x3, 0x7c, 0x2, 0x6, 0x7d8b3b74, 0x8, 0x7, 0x4, 0x1084, 0x7, 0xff, 0x100, 0x8, 0x4, 0xfffffffd, 0x10000, 0x495, 0x5, 0x9, 0x0, 0x9, 0x4, 0xff, 0xbcc10e5, 0x6, 0x8, 0x57, 0x9, 0x3, 0x5, 0x163c195c, 0x5, 0x4, 0x10000, 0x3, 0x8, 0x6, 0x2d8], [0x0, 0x6, 0x5, 0x2, 0x10001, 0x5, 0x3, 0xffff, 0xffffffff, 0x6, 0x1, 0xfffffffe, 0x4, 0x7, 0x9, 0x3fe0, 0x7, 0x6, 0x311ec71b, 0xfffffff2, 0x3ff, 0xfffffffa, 0x1, 0x10000, 0xfb4, 0x5, 0x1, 0x9, 0x6, 0x5, 0x10001, 0x100, 0xe7, 0x2, 0x9, 0x7, 0x31, 0x49, 0x2275, 0x1000, 0x3, 0x4, 0x9, 0x5, 0x1ff, 0x21b7, 0x1, 0x9, 0x7, 0x2, 0xda, 0x9, 0x2, 0x9, 0x81, 0x80000001, 0x9, 0x6, 0x2, 0x6, 0x209, 0x2, 0x7, 0xff], [0x6, 0x2000000, 0x1, 0xfffff866, 0x4, 0x3d56, 0x80000000, 0x2, 0x7ff, 0x0, 0x6, 0xffffffff, 0xffff8000, 0x9, 0x5, 0xda93, 0x3, 0x9, 0x5, 0x8, 0x9, 0x0, 0x3, 0x2, 0x2, 0x6, 0xfffffd89, 0x0, 0x6, 0x3, 0x9, 0x3, 0x5, 0xc27, 0x1, 0xff, 0x200, 0x8, 0x7fffffff, 0x8d, 0x10000, 0xdff6, 0x9bdd, 0x7fa7, 0xb0, 0x3, 0x7, 0x4, 0x6, 0x2, 0x81, 0x2, 0x2, 0x7f, 0x3, 0x9, 0x0, 0x5, 0x8, 0x5, 0xffffffff, 0xffffffff, 0x9, 0x9], [0x4e41, 0x3, 0x3, 0x0, 0x2, 0x1, 0x808, 0x0, 0x5, 0x0, 0x655f5160, 0xfb4, 0x2, 0xab, 0x9, 0x7, 0x0, 0x7ff, 0x81d, 0x6, 0x2, 0x9, 0x6, 0x7, 0x4, 0x2, 0x3, 0xcbe, 0x1, 0xe, 0x1, 0x437, 0x5bb, 0xff, 0x4, 0x7ff, 0x8, 0x610, 0xd20, 0xc64ddd5, 0x5, 0x2, 0x3, 0x8000, 0x7a, 0x6, 0x80000000, 0x0, 0x0, 0x9, 0x9, 0x80000001, 0x34, 0x8001, 0x4, 0x6, 0xd, 0x7, 0x6, 0x80000001, 0x3, 0x40, 0x2, 0x5]}, 0x45c)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000100)=0x7)
ioctl$KVM_SMI(r4, 0xaeb7)
sched_setaffinity(r6, 0x8, &(0x7f0000006140)=0x80)
r7 = io_uring_setup(0x69e, &(0x7f0000000100)={0x0, 0x743b, 0x400, 0x3, 0x395})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000060c0)={'syztnl0\x00', &(0x7f0000006040)={'syztnl1\x00', <r8=>0x0, 0x2f, 0x9, 0x9, 0x5fc, 0x3, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x9, 0x4}})
setsockopt$inet_mreqn(r5, 0x0, 0xca1892fc341f1e3d, &(0x7f0000006100)={@multicast1, @local, r8}, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x3, 0x117, &(0x7f0000006580)=ANY=[@ANYBLOB="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"], &(0x7f00000063c0)={0xa, &(0x7f00000062c0)={0xa, 0x6, 0x310, 0x6, 0x2, 0x5, 0x20, 0x4}, 0x1d, &(0x7f0000006300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x81, 0x45}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x0, 0xb}]}, 0x2, [{0x4, &(0x7f0000006340)=@lang_id={0x4, 0x3, 0x44c}}, {0xb, &(0x7f0000006380)=@string={0xb, 0x3, "01c98f0336bf973294"}}]})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000006480)={@id={0x2, 0x0, @b}})
getpeername$inet(0xffffffffffffffff, &(0x7f0000006400)={0x2, 0x0, @private}, &(0x7f0000006440)=0x10)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000064c0)=ANY=[@ANYBLOB="280000001800ef0125bd7000000000000a0000000000fc07001300000c00090008000000", @ANYRES32=0x0, @ANYBLOB="291c8833599234d60e2d9b0100fb31aa601535b7e89991892199dfe66c4bf10b2558fb7cfaff40704e8eed6a6d1515c4a5d24a88185c7f1c22706f5ed0c685483b34f53a4361146ade3a63bb61fcb2aadb32e2617894dfeb86428599ced697c3f03600d3930f84923e6d"], 0x28}, 0x1, 0x11, 0x0, 0x4c840}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000006000)={0xe9, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000005880)=""/179, 0xb3}, {&(0x7f0000005940)=""/84, 0x61}], &(0x7f0000005fc0)=[0x418, 0x4, 0x9b21, 0x3, 0xdc5f], 0x3c}, 0x20)

3.000102905s ago: executing program 4 (id=124):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_io_uring_setup(0x32bc, &(0x7f00000003c0)={0x0, 0x69df, 0x2, 0x3, 0x34a}, &(0x7f0000000500), &(0x7f0000000600))
io_uring_enter(r1, 0x0, 0xa9a7, 0x3, 0x0, 0x0)

2.116568381s ago: executing program 34 (id=92):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0xd0256000)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0)
socket(0x10, 0x803, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x14}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x84000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r5, 0x42024, 0x8da5}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x4}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

2.101292747s ago: executing program 4 (id=126):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40442, 0x0)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f00000020c0)="$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") (async)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}})

2.077696452s ago: executing program 4 (id=127):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x804, &(0x7f0000000200)={[{@utf8}, {@dmask}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@fmask={'fmask', 0x3d, 0x1}}, {@keep_last_dots}, {@namecase}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1539, &(0x7f0000002c00)="$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")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setrlimit(0x40000000000008, &(0x7f0000000000))
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)
sendto$inet6(r5, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x1b, 0x200008d0, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffffbfc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffef}, 0x4f)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
unshare(0x22020600)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000000", @ANYRES32], 0x50)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20c})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000d9b000/0x4000)=nil, 0x4000}})
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1c7, 0x41, 0x0, 0x0)

1.755518117s ago: executing program 5 (id=119):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000240)={0x0, 0x2, 0xc})
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xa, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) (async)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005b00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000008340)={0x0, 0x0, &(0x7f0000008300)={&(0x7f0000000b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf250e00000008000280040003800c000180080001"], 0x28}}, 0x45000) (async, rerun: 32)
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) (rerun: 32)

1.587892138s ago: executing program 4 (id=128):
socket$inet6(0xa, 0x3, 0x7)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x800)
getpgrp(0xffffffffffffffff)
io_cancel(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@sysvgroups}, {@discard}], [{@smackfsdef={'smackfsdef', 0x3d, 'min_batch_time'}}, {@hash}, {@pcr={'pcr', 0x3d, 0x24}}]}, 0xff, 0x575, &(0x7f00000009c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r6 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\xea\xe8\x015\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz\xc213\x9b\x87\xd5\x99\r\xa2P\x03\x1cl\x0f\xcb)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af', 0x0)
syz_clone3(&(0x7f00000001c0)={0x100001200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
execveat(r6, 0x0, 0x0, 0x0, 0x1000)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmmsg$inet(r4, 0x0, 0x0, 0x2090)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.587581098s ago: executing program 5 (id=129):
r0 = socket(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0xde, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0xba}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e23, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0xbc2, 0xe3]}}, 0x5c) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000200)=@udp, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000062000000540000000000000095009e0000000000"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)

1.105002496s ago: executing program 5 (id=130):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200200, 0x0, 0x0, 0xffffffff})
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0xa8, &(0x7f0000000740)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b28c52096d13d6b9aac338f27ca2d2108c51ad7bbbc6ec9d577b00c703c4ef2ee9f16febbb7afdafc59e817dc8edb56d440100fa48cdccf79223640f685b92b26c62d7d65dd4fdd6f73c1d9c70f1bca7a7150f62de63f2f579f1fb2d10f3a770f2b9ce8cd8be9414e0444fd357b3fad5b16d91c91c0f1aa3e11d39426af77180bdb588060a2546b369655c02eb52709e0e03785f8010bfd1a72a817dad46c854ebb0a8aa5d59cae56089e2aac882b33018aa4006a44968a267cde827c86aa1abccb51cb152459f91a39a5cbbd8d218d37f4cf35d339694a379", @ANYRESDEC], 0x1, 0x2a4, &(0x7f0000000480)="$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") (async)
r1 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x5, 0x0, &(0x7f0000000240)) (async, rerun: 64)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f00000002c0)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (rerun: 64)
chdir(&(0x7f00000001c0)='./bus\x00')
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x208c404, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0xb6}}, {@allow_other}], [{@dont_appraise}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, ')-\\'}}, {@dont_measure}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}, 0x1, 0x0, &(0x7f0000000100)="a72f1b89d6578ee2bf811114e1a3e1cbdbf220ac8465a2aa99b1c155f2ac1c848a67bdb8d98ee10e3e8b94f9f1573f37ff33c7619109c865c47a15c0c62e02c6bef8fac3a7a91820cd9e92f8c9641cf39b45c3dba0f78c3f38669d99b5613f496d")
unlinkat(r1, &(0x7f00000001c0)='./file1\x00', 0x0) (async)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
timerfd_create(0x8, 0x80000) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000b80)) (async, rerun: 32)
r4 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000000)={[{@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) (async)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) (async, rerun: 64)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') (async, rerun: 64)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
r7 = fsmount(r6, 0x0, 0x6) (rerun: 64)
fchdir(r7) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c)
pwritev2(r9, &(0x7f0000000100), 0x0, 0x5410, 0x807, 0x0) (async)
read$FUSE(r8, &(0x7f0000003ec0)={0x2020}, 0x2020)
sendfile(r8, r8, &(0x7f00000000c0)=0x7, 0x6fecb1) (async, rerun: 64)
writev(r5, &(0x7f0000000780)=[{&(0x7f00000003c0)}], 0x1) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r10=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @broadcast}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00'})

912.180041ms ago: executing program 5 (id=131):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000412, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$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") (async, rerun: 64)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x420400, 0x1) (rerun: 64)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") (async, rerun: 32)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) (rerun: 32)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

395.458192ms ago: executing program 2 (id=132):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async)
accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0x6e) (async, rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000d40)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x340, 0xf, 0x2, 0x6, 0x20, 0x2}, 0x0, 0x0}) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000001ac0)={0x2020}, 0x2020) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x0) (async, rerun: 64)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x19b342, 0x66) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x62d, &(0x7f0000001480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)

0s ago: executing program 4 (id=133):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_io_uring_setup(0x32bc, &(0x7f00000003c0)={0x0, 0x69df, 0x2, 0x3, 0x34a}, &(0x7f0000000500), &(0x7f0000000600))
io_uring_enter(r1, 0x0, 0xa9a7, 0x3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

53][  T285]  ? fsnotify_perm+0x269/0x5b0
[   34.180272][  T285]  ? security_file_permission+0x94/0xb0
[   34.185823][  T285]  iterate_dir+0x271/0x610
[   34.190243][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   34.195279][  T285]  __se_sys_getdents64+0xf2/0x250
[   34.200300][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   34.205500][  T285]  ? __cfi_filldir64+0x10/0x10
[   34.210450][  T285]  ? __x64_sys_umount+0x12d/0x170
[   34.215478][  T285]  ? debug_smp_processor_id+0x17/0x20
[   34.220956][  T285]  __x64_sys_getdents64+0x7b/0x90
[   34.226035][  T285]  x64_sys_call+0x15c/0x9a0
[   34.230995][  T285]  do_syscall_64+0x4c/0xa0
[   34.235429][  T285]  ? clear_bhb_loop+0x30/0x80
[   34.240199][  T285]  ? clear_bhb_loop+0x30/0x80
[   34.244883][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   34.251138][  T285] RIP: 0033:0x7fda32fc5133
[   34.255555][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   34.275507][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   34.284103][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   34.292081][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   34.300051][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   34.308191][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   34.316243][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   34.324393][  T285]  </TASK>
[   34.395112][   T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   34.448898][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   34.462093][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   34.469651][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   34.479740][  T285] Call Trace:
[   34.483110][  T285]  <TASK>
[   34.486092][  T285]  __dump_stack+0x21/0x24
[   34.490473][  T285]  dump_stack_lvl+0x110/0x170
[   34.495179][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   34.500398][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   34.506318][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   34.513180][  T285]  dump_stack+0x15/0x24
[   34.517358][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   34.523017][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   34.528602][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   34.534284][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   34.540298][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   34.546223][  T285]  f2fs_find_data_page+0x198/0x3a0
[   34.551364][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   34.556247][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   34.561479][  T285]  ? clear_nonspinnable+0x60/0x60
[   34.566720][  T285]  f2fs_rmdir+0x3f/0x70
[   34.571116][  T285]  vfs_rmdir+0x393/0x500
[   34.575567][  T285]  do_rmdir+0x261/0x6b0
[   34.579845][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   34.584549][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   34.589483][  T285]  x64_sys_call+0x79f/0x9a0
[   34.594010][  T285]  do_syscall_64+0x4c/0xa0
[   34.598448][  T285]  ? clear_bhb_loop+0x30/0x80
[   34.603139][  T285]  ? clear_bhb_loop+0x30/0x80
[   34.607846][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   34.613859][  T285] RIP: 0033:0x7fda32f9b8b7
[   34.618387][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.638106][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   34.646637][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   34.654724][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   34.662727][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   34.670738][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   34.678766][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   34.686857][  T285]  </TASK>
[   34.694130][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   34.700404][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   34.708061][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   34.718487][  T285] Call Trace:
[   34.721805][  T285]  <TASK>
[   34.724786][  T285]  __dump_stack+0x21/0x24
[   34.729143][  T285]  dump_stack_lvl+0x110/0x170
[   34.734029][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   34.739116][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   34.745146][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   34.751953][  T285]  dump_stack+0x15/0x24
[   34.756408][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   34.761978][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   34.767199][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   34.772687][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   34.778875][  T285]  f2fs_find_data_page+0x198/0x3a0
[   34.784110][  T285]  f2fs_readdir+0x49e/0x990
[   34.785792][  T707] loop1: detected capacity change from 0 to 40427
[   34.788734][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   34.800350][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   34.805572][  T285]  ? avc_policy_seqno+0x1b/0x70
[   34.810462][  T285]  ? down_read_killable+0xbc/0x110
[   34.815679][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   34.821417][  T285]  ? fsnotify_perm+0x269/0x5b0
[   34.826214][  T285]  ? security_file_permission+0x94/0xb0
[   34.831781][  T285]  iterate_dir+0x271/0x610
[   34.836215][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   34.841443][  T285]  __se_sys_getdents64+0xf2/0x250
[   34.846595][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   34.852010][  T285]  ? __cfi_filldir64+0x10/0x10
[   34.856798][  T285]  ? __x64_sys_umount+0x12d/0x170
[   34.862120][  T285]  ? debug_smp_processor_id+0x17/0x20
[   34.867516][  T285]  __x64_sys_getdents64+0x7b/0x90
[   34.872801][  T285]  x64_sys_call+0x15c/0x9a0
[   34.877418][  T285]  do_syscall_64+0x4c/0xa0
[   34.881957][  T285]  ? clear_bhb_loop+0x30/0x80
[   34.886826][  T285]  ? clear_bhb_loop+0x30/0x80
[   34.891643][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   34.897840][  T285] RIP: 0033:0x7fda32fc5133
[   34.902278][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   34.922085][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   34.930534][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   34.938887][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   34.947127][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   34.955213][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   34.963214][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   34.971221][  T285]  </TASK>
[   34.979083][  T707] F2FS-fs (loop1): invalid crc value
[   34.980159][   T24] usb 2-1: device not accepting address 6, error -71
[   35.000001][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   35.007579][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   35.008284][  T707] F2FS-fs (loop1): Found nat_bits in checkpoint
[   35.015159][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   35.015175][  T285] Call Trace:
[   35.015181][  T285]  <TASK>
[   35.015187][  T285]  __dump_stack+0x21/0x24
[   35.015217][  T285]  dump_stack_lvl+0x110/0x170
[   35.015247][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   35.015270][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   35.015295][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   35.015323][  T285]  dump_stack+0x15/0x24
[   35.015344][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   35.015368][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   35.015389][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   35.086005][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   35.092287][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   35.098130][  T285]  f2fs_find_data_page+0x198/0x3a0
[   35.103445][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   35.108185][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   35.113602][  T285]  ? clear_nonspinnable+0x60/0x60
[   35.118841][  T285]  f2fs_rmdir+0x3f/0x70
[   35.123032][  T285]  vfs_rmdir+0x393/0x500
[   35.127301][  T285]  do_rmdir+0x261/0x6b0
[   35.131567][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   35.136557][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   35.141519][  T285]  x64_sys_call+0x79f/0x9a0
[   35.146047][  T285]  do_syscall_64+0x4c/0xa0
[   35.150577][  T285]  ? clear_bhb_loop+0x30/0x80
[   35.155283][  T285]  ? clear_bhb_loop+0x30/0x80
[   35.160173][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   35.164688][  T715] loop2: detected capacity change from 0 to 1024
[   35.166352][  T285] RIP: 0033:0x7fda32f9b8b7
[   35.177106][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.196741][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   35.203326][  T715] EXT4-fs: Ignoring removed i_version option
[   35.205178][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   35.219319][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   35.227307][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   35.235517][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   35.243495][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   35.251558][  T285]  </TASK>
[   35.256458][  T707] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   35.256530][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   35.270594][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   35.278248][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   35.288415][  T285] Call Trace:
[   35.291720][  T285]  <TASK>
[   35.294759][  T285]  __dump_stack+0x21/0x24
[   35.299215][  T285]  dump_stack_lvl+0x110/0x170
[   35.304002][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   35.305478][  T707] netlink: 'syz.1.100': attribute type 7 has an invalid length.
[   35.309225][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   35.322933][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   35.329659][  T285]  dump_stack+0x15/0x24
[   35.333843][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   35.339516][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   35.342109][  T707] netlink: 'syz.1.100': attribute type 8 has an invalid length.
[   35.344836][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   35.358225][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   35.364325][  T285]  f2fs_find_data_page+0x198/0x3a0
[   35.369475][  T285]  f2fs_readdir+0x49e/0x990
[   35.374102][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   35.379247][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   35.384479][  T285]  ? avc_policy_seqno+0x1b/0x70
[   35.386911][  T715] EXT4-fs (loop2): Test dummy encryption mode enabled
[   35.389357][  T285]  ? down_read_killable+0xbc/0x110
[   35.401496][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   35.407266][  T285]  ? fsnotify_perm+0x269/0x5b0
[   35.407953][  T715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   35.412241][  T285]  ? security_file_permission+0x94/0xb0
[   35.412268][  T285]  iterate_dir+0x271/0x610
[   35.423895][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   35.423909][   T28] audit: type=1400 audit(1772419666.507:234): avc:  denied  { create } for  pid=706 comm="syz.1.100" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   35.427367][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   35.432886][   T28] audit: type=1400 audit(1772419666.507:235): avc:  denied  { write } for  pid=706 comm="syz.1.100" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   35.437753][  T285]  __se_sys_getdents64+0xf2/0x250
[   35.437782][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   35.496024][  T285]  ? __cfi_filldir64+0x10/0x10
[   35.500796][  T285]  ? debug_smp_processor_id+0x17/0x20
[   35.506255][  T285]  __x64_sys_getdents64+0x7b/0x90
[   35.511278][  T285]  x64_sys_call+0x15c/0x9a0
[   35.515780][  T285]  do_syscall_64+0x4c/0xa0
[   35.520201][  T285]  ? clear_bhb_loop+0x30/0x80
[   35.524877][  T285]  ? clear_bhb_loop+0x30/0x80
[   35.529648][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   35.535640][  T285] RIP: 0033:0x7fda32fc5133
[   35.540515][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   35.560576][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   35.569271][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   35.577248][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   35.585412][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   35.593589][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   35.601939][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   35.610139][  T285]  </TASK>
[   35.629371][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   35.642161][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   35.649861][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   35.660321][  T285] Call Trace:
[   35.660334][  T285]  <TASK>
[   35.660340][  T285]  __dump_stack+0x21/0x24
[   35.660370][  T285]  dump_stack_lvl+0x110/0x170
[   35.660391][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   35.660412][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   35.660436][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   35.660463][  T285]  dump_stack+0x15/0x24
[   35.660486][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   35.660510][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   35.660531][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   35.660550][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   35.660566][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   35.660591][  T285]  f2fs_find_data_page+0x198/0x3a0
[   35.660610][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   35.660635][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   35.660659][  T285]  ? clear_nonspinnable+0x60/0x60
[   35.660687][  T285]  f2fs_rmdir+0x3f/0x70
[   35.660708][  T285]  vfs_rmdir+0x393/0x500
[   35.660731][  T285]  do_rmdir+0x261/0x6b0
[   35.660753][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   35.660775][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   35.660795][  T285]  x64_sys_call+0x79f/0x9a0
[   35.660813][  T285]  do_syscall_64+0x4c/0xa0
[   35.660833][  T285]  ? clear_bhb_loop+0x30/0x80
[   35.660852][  T285]  ? clear_bhb_loop+0x30/0x80
[   35.660870][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   35.660897][  T285] RIP: 0033:0x7fda32f9b8b7
[   35.660913][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.660927][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   35.660950][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   35.660963][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   35.660976][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   35.660988][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   35.661000][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   35.661017][  T285]  </TASK>
[   35.666762][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   35.666784][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   35.666803][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   35.666813][  T285] Call Trace:
[   35.666819][  T285]  <TASK>
[   35.666825][  T285]  __dump_stack+0x21/0x24
[   35.666853][  T285]  dump_stack_lvl+0x110/0x170
[   35.666875][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   35.666896][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   35.929005][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   35.935783][  T285]  dump_stack+0x15/0x24
[   35.939980][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   35.945532][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   35.950649][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   35.956105][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   35.962301][  T285]  f2fs_find_data_page+0x198/0x3a0
[   35.967566][  T285]  f2fs_readdir+0x49e/0x990
[   35.972097][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   35.977223][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   35.982335][  T285]  ? avc_policy_seqno+0x1b/0x70
[   35.987451][  T285]  ? down_read_killable+0xbc/0x110
[   35.992559][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   35.998100][  T285]  ? fsnotify_perm+0x269/0x5b0
[   36.003128][  T285]  ? security_file_permission+0x94/0xb0
[   36.008673][  T285]  iterate_dir+0x271/0x610
[   36.013086][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.018299][  T285]  __se_sys_getdents64+0xf2/0x250
[   36.023323][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   36.028605][  T285]  ? __cfi_filldir64+0x10/0x10
[   36.033468][  T285]  ? __x64_sys_umount+0x12d/0x170
[   36.038859][  T285]  ? debug_smp_processor_id+0x17/0x20
[   36.044322][  T285]  __x64_sys_getdents64+0x7b/0x90
[   36.049429][  T285]  x64_sys_call+0x15c/0x9a0
[   36.054016][  T285]  do_syscall_64+0x4c/0xa0
[   36.058441][  T285]  ? clear_bhb_loop+0x30/0x80
[   36.063335][  T285]  ? clear_bhb_loop+0x30/0x80
[   36.068106][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.074266][  T285] RIP: 0033:0x7fda32fc5133
[   36.078765][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   36.098716][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   36.107255][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   36.115239][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   36.123563][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   36.131533][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   36.139632][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   36.147790][  T285]  </TASK>
[   36.153101][  T715] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   36.176954][   T28] audit: type=1400 audit(1772419667.257:236): avc:  denied  { setattr } for  pid=714 comm="syz.2.99" name="work" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   36.199045][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   36.207158][  T728] fscrypt: AES-256-XTS using blk-crypto-fallback
[   36.213679][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   36.221256][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   36.231427][  T285] Call Trace:
[   36.234818][  T285]  <TASK>
[   36.237891][  T285]  __dump_stack+0x21/0x24
[   36.242253][  T285]  dump_stack_lvl+0x110/0x170
[   36.247138][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.252284][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   36.258213][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   36.264940][  T285]  dump_stack+0x15/0x24
[   36.269477][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   36.275097][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   36.280321][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   36.285899][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   36.292338][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   36.298123][  T285]  f2fs_find_data_page+0x198/0x3a0
[   36.303286][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   36.307999][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   36.313253][  T285]  ? clear_nonspinnable+0x60/0x60
[   36.318418][  T285]  f2fs_rmdir+0x3f/0x70
[   36.318919][   T28] audit: type=1400 audit(1772419667.287:237): avc:  denied  { write } for  pid=714 comm="syz.2.99" name="work" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   36.322709][  T285]  vfs_rmdir+0x393/0x500
[   36.322741][  T285]  do_rmdir+0x261/0x6b0
[   36.322763][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   36.322785][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   36.363609][  T285]  x64_sys_call+0x79f/0x9a0
[   36.368415][  T285]  do_syscall_64+0x4c/0xa0
[   36.372864][  T285]  ? clear_bhb_loop+0x30/0x80
[   36.377657][  T285]  ? clear_bhb_loop+0x30/0x80
[   36.382541][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.388565][  T285] RIP: 0033:0x7fda32f9b8b7
[   36.393276][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.404610][  T728] fscrypt (loop2): error -12 starting to use blk-crypto
[   36.413347][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   36.413378][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   36.413391][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   36.413402][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   36.413414][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   36.430692][  T728] overlayfs: upper fs does not support tmpfile.
[   36.437607][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   36.437635][  T285]  </TASK>
[   36.438199][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   36.449515][  T730] fscrypt (loop2): error -12 starting to use blk-crypto
[   36.467481][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   36.469661][   T28] audit: type=1400 audit(1772419667.547:238): avc:  denied  { add_name } for  pid=714 comm="syz.2.99" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   36.477373][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   36.477386][  T285] Call Trace:
[   36.477392][  T285]  <TASK>
[   36.477398][  T285]  __dump_stack+0x21/0x24
[   36.477427][  T285]  dump_stack_lvl+0x110/0x170
[   36.477449][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.477472][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   36.477496][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   36.477526][  T285]  dump_stack+0x15/0x24
[   36.477548][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   36.477572][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   36.477593][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   36.482721][  T728] fscrypt (loop2): error -12 starting to use blk-crypto
[   36.486772][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   36.598817][  T285]  f2fs_find_data_page+0x198/0x3a0
[   36.603967][  T285]  f2fs_readdir+0x49e/0x990
[   36.608522][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.613755][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   36.618997][  T285]  ? avc_policy_seqno+0x1b/0x70
[   36.623933][  T285]  ? down_read_killable+0xbc/0x110
[   36.629075][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   36.634737][  T285]  ? fsnotify_perm+0x269/0x5b0
[   36.639707][  T285]  ? security_file_permission+0x94/0xb0
[   36.645292][  T285]  iterate_dir+0x271/0x610
[   36.649749][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.654805][  T285]  __se_sys_getdents64+0xf2/0x250
[   36.660046][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   36.665453][  T285]  ? __cfi_filldir64+0x10/0x10
[   36.670254][  T285]  ? __x64_sys_umount+0x12d/0x170
[   36.675321][  T285]  ? debug_smp_processor_id+0x17/0x20
[   36.680738][  T285]  __x64_sys_getdents64+0x7b/0x90
[   36.685896][  T285]  x64_sys_call+0x15c/0x9a0
[   36.690523][  T285]  do_syscall_64+0x4c/0xa0
[   36.695130][  T285]  ? clear_bhb_loop+0x30/0x80
[   36.699865][  T285]  ? clear_bhb_loop+0x30/0x80
[   36.704848][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.711131][  T285] RIP: 0033:0x7fda32fc5133
[   36.715574][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   36.735975][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   36.744608][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   36.752716][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   36.760726][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   36.768830][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   36.777021][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   36.785290][  T285]  </TASK>
[   36.791663][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   36.791912][  T282] syz-executor: attempt to access beyond end of device
[   36.791912][  T282] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   36.797722][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   36.819666][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   36.829747][  T285] Call Trace:
[   36.833047][  T285]  <TASK>
[   36.835992][  T285]  __dump_stack+0x21/0x24
[   36.840451][  T285]  dump_stack_lvl+0x110/0x170
[   36.845183][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.850436][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   36.856991][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   36.863802][  T285]  dump_stack+0x15/0x24
[   36.868073][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   36.873741][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   36.878975][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   36.884719][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   36.890991][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   36.896834][  T285]  f2fs_find_data_page+0x198/0x3a0
[   36.901984][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   36.906686][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   36.911934][  T285]  ? clear_nonspinnable+0x60/0x60
[   36.917076][  T285]  f2fs_rmdir+0x3f/0x70
[   36.921348][  T285]  vfs_rmdir+0x393/0x500
[   36.925790][  T285]  do_rmdir+0x261/0x6b0
[   36.929977][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   36.934703][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   36.939590][  T285]  x64_sys_call+0x79f/0x9a0
[   36.944127][  T285]  do_syscall_64+0x4c/0xa0
[   36.948604][  T285]  ? clear_bhb_loop+0x30/0x80
[   36.953312][  T285]  ? clear_bhb_loop+0x30/0x80
[   36.958017][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.964029][  T285] RIP: 0033:0x7fda32f9b8b7
[   36.968558][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.988370][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   36.996810][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   37.004891][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   37.012880][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   37.020879][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   37.028877][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   37.036878][  T285]  </TASK>
[   37.040306][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   37.046513][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   37.047693][  T286] EXT4-fs (loop2): unmounting filesystem.
[   37.054583][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   37.054596][  T285] Call Trace:
[   37.054601][  T285]  <TASK>
[   37.054608][  T285]  __dump_stack+0x21/0x24
[   37.054637][  T285]  dump_stack_lvl+0x110/0x170
[   37.054658][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   37.054680][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   37.054704][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   37.054732][  T285]  dump_stack+0x15/0x24
[   37.054753][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   37.054778][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   37.054798][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   37.054818][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   37.054840][  T285]  f2fs_find_data_page+0x198/0x3a0
[   37.054859][  T285]  f2fs_readdir+0x49e/0x990
[   37.054887][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   37.054912][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   37.054934][  T285]  ? avc_policy_seqno+0x1b/0x70
[   37.054961][  T285]  ? down_read_killable+0xbc/0x110
[   37.054979][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   37.054997][  T285]  ? fsnotify_perm+0x269/0x5b0
[   37.055019][  T285]  ? security_file_permission+0x94/0xb0
[   37.055042][  T285]  iterate_dir+0x271/0x610
[   37.055060][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   37.055086][  T285]  __se_sys_getdents64+0xf2/0x250
[   37.055105][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   37.055124][  T285]  ? __cfi_filldir64+0x10/0x10
[   37.055144][  T285]  ? __x64_sys_umount+0x12d/0x170
[   37.055169][  T285]  ? debug_smp_processor_id+0x17/0x20
[   37.055191][  T285]  __x64_sys_getdents64+0x7b/0x90
[   37.055210][  T285]  x64_sys_call+0x15c/0x9a0
[   37.055240][  T285]  do_syscall_64+0x4c/0xa0
[   37.055262][  T285]  ? clear_bhb_loop+0x30/0x80
[   37.055280][  T285]  ? clear_bhb_loop+0x30/0x80
[   37.055297][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   37.055325][  T285] RIP: 0033:0x7fda32fc5133
[   37.055340][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   37.055356][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   37.055377][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   37.055392][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   37.055404][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   37.055417][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   37.055429][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   37.055445][  T285]  </TASK>
[   37.057571][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   37.057589][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   37.057607][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   37.057617][  T285] Call Trace:
[   37.057623][  T285]  <TASK>
[   37.057629][  T285]  __dump_stack+0x21/0x24
[   37.057654][  T285]  dump_stack_lvl+0x110/0x170
[   37.057676][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   37.057697][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   37.372381][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   37.379178][  T285]  dump_stack+0x15/0x24
[   37.383644][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   37.389563][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   37.394800][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   37.400282][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   37.406345][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   37.412121][  T285]  f2fs_find_data_page+0x198/0x3a0
[   37.417246][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   37.422189][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   37.427475][  T285]  ? clear_nonspinnable+0x60/0x60
[   37.432681][  T285]  f2fs_rmdir+0x3f/0x70
[   37.436922][  T285]  vfs_rmdir+0x393/0x500
[   37.441173][  T285]  do_rmdir+0x261/0x6b0
[   37.445356][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   37.450238][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   37.455126][  T285]  x64_sys_call+0x79f/0x9a0
[   37.459634][  T285]  do_syscall_64+0x4c/0xa0
[   37.464153][  T285]  ? clear_bhb_loop+0x30/0x80
[   37.469178][  T285]  ? clear_bhb_loop+0x30/0x80
[   37.473910][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   37.479905][  T285] RIP: 0033:0x7fda32f9b8b7
[   37.484323][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.504806][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   37.513964][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   37.522111][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   37.530168][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   37.538311][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   37.546369][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   37.554349][  T285]  </TASK>
[   37.562425][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   37.568749][   T28] audit: type=1400 audit(1772419668.647:239): avc:  denied  { write } for  pid=736 comm="syz.1.104" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   37.596536][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   37.604141][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   37.614220][  T285] Call Trace:
[   37.617700][  T285]  <TASK>
[   37.620655][  T285]  __dump_stack+0x21/0x24
[   37.625078][  T285]  dump_stack_lvl+0x110/0x170
[   37.629873][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   37.630990][   T28] audit: type=1400 audit(1772419668.677:240): avc:  denied  { open } for  pid=736 comm="syz.1.104" path="/dev/ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   37.634944][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   37.634971][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   37.668188][  T737] loop1: detected capacity change from 0 to 512
[   37.671237][  T285]  dump_stack+0x15/0x24
[   37.671272][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   37.687514][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   37.692921][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   37.698419][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   37.700902][  T737] EXT4-fs: Ignoring removed oldalloc option
[   37.704510][  T285]  f2fs_find_data_page+0x198/0x3a0
[   37.704537][  T285]  f2fs_readdir+0x49e/0x990
[   37.720344][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   37.720734][   T28] audit: type=1400 audit(1772419668.677:241): avc:  denied  { ioctl } for  pid=736 comm="syz.1.104" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   37.725403][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   37.725426][  T285]  ? avc_policy_seqno+0x1b/0x70
[   37.760625][  T285]  ? down_read_killable+0xbc/0x110
[   37.766023][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   37.771774][  T285]  ? fsnotify_perm+0x269/0x5b0
[   37.776576][  T285]  ? security_file_permission+0x94/0xb0
[   37.783292][  T285]  iterate_dir+0x271/0x610
[   37.787830][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   37.793065][  T285]  __se_sys_getdents64+0xf2/0x250
[   37.798394][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   37.803626][  T285]  ? __cfi_filldir64+0x10/0x10
[   37.808421][  T285]  ? __x64_sys_umount+0x12d/0x170
[   37.813753][  T285]  ? debug_smp_processor_id+0x17/0x20
[   37.819154][  T285]  __x64_sys_getdents64+0x7b/0x90
[   37.824301][  T285]  x64_sys_call+0x15c/0x9a0
[   37.828917][  T285]  do_syscall_64+0x4c/0xa0
[   37.833471][  T285]  ? clear_bhb_loop+0x30/0x80
[   37.838731][  T285]  ? clear_bhb_loop+0x30/0x80
[   37.843436][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   37.849548][  T285] RIP: 0033:0x7fda32fc5133
[   37.854068][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   37.873644][  T737] EXT4-fs (loop1): 1 truncate cleaned up
[   37.873870][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   37.879519][  T737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   37.898440][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   37.903201][  T737] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.104: invalid indirect mapped block 234881024 (level 0)
[   37.906642][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   37.906661][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   37.906673][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   37.944984][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   37.951151][  T737] EXT4-fs (loop1): Remounting filesystem read-only
[   37.953012][  T285]  </TASK>
[   37.979293][   T28] audit: type=1400 audit(1772419669.057:242): avc:  denied  { mounton } for  pid=745 comm="syz.4.106" path="/29/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   37.984641][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   38.009748][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   38.017409][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   38.027574][  T285] Call Trace:
[   38.030874][  T285]  <TASK>
[   38.033923][  T285]  __dump_stack+0x21/0x24
[   38.038814][  T285]  dump_stack_lvl+0x110/0x170
[   38.043560][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   38.048703][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   38.054906][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   38.061894][  T285]  dump_stack+0x15/0x24
[   38.066111][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   38.071964][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   38.077114][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   38.082684][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   38.088686][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   38.094438][  T285]  f2fs_find_data_page+0x198/0x3a0
[   38.099578][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   38.104285][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   38.109491][  T285]  ? clear_nonspinnable+0x60/0x60
[   38.114525][  T285]  f2fs_rmdir+0x3f/0x70
[   38.118856][  T285]  vfs_rmdir+0x393/0x500
[   38.123200][  T285]  do_rmdir+0x261/0x6b0
[   38.127357][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   38.132124][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   38.137159][  T285]  x64_sys_call+0x79f/0x9a0
[   38.141661][  T285]  do_syscall_64+0x4c/0xa0
[   38.146074][  T285]  ? clear_bhb_loop+0x30/0x80
[   38.151194][  T285]  ? clear_bhb_loop+0x30/0x80
[   38.155886][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   38.161795][  T285] RIP: 0033:0x7fda32f9b8b7
[   38.166212][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.186077][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   38.194491][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   38.203001][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   38.211239][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   38.219380][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   38.227434][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   38.235751][  T285]  </TASK>
[   38.241861][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   38.248056][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   38.255544][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   38.265983][  T285] Call Trace:
[   38.269284][  T285]  <TASK>
[   38.272317][  T285]  __dump_stack+0x21/0x24
[   38.276849][  T285]  dump_stack_lvl+0x110/0x170
[   38.281729][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   38.286966][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   38.292988][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   38.300011][  T285]  dump_stack+0x15/0x24
[   38.304462][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   38.310152][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   38.315410][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   38.320913][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   38.327369][  T285]  f2fs_find_data_page+0x198/0x3a0
[   38.332529][  T285]  f2fs_readdir+0x49e/0x990
[   38.337194][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   38.342529][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   38.348044][  T285]  ? avc_policy_seqno+0x1b/0x70
[   38.352938][  T282] EXT4-fs (loop1): unmounting filesystem.
[   38.353111][  T285]  ? down_read_killable+0xbc/0x110
[   38.364344][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   38.369539][  T753] loop4: detected capacity change from 0 to 1024
[   38.370193][  T285]  ? fsnotify_perm+0x269/0x5b0
[   38.370225][  T285]  ? security_file_permission+0x94/0xb0
[   38.387566][  T285]  iterate_dir+0x271/0x610
[   38.392095][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   38.397255][  T285]  __se_sys_getdents64+0xf2/0x250
[   38.402422][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   38.408511][  T285]  ? __cfi_filldir64+0x10/0x10
[   38.413291][  T285]  ? __x64_sys_umount+0x12d/0x170
[   38.418597][  T285]  ? debug_smp_processor_id+0x17/0x20
[   38.424077][  T285]  __x64_sys_getdents64+0x7b/0x90
[   38.429280][  T285]  x64_sys_call+0x15c/0x9a0
[   38.433868][  T285]  do_syscall_64+0x4c/0xa0
[   38.438373][  T285]  ? clear_bhb_loop+0x30/0x80
[   38.443306][  T285]  ? clear_bhb_loop+0x30/0x80
[   38.448014][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   38.453999][  T285] RIP: 0033:0x7fda32fc5133
[   38.458507][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   38.478559][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   38.487529][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   38.495611][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   38.503590][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   38.511646][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   38.519885][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   38.527962][  T285]  </TASK>
[   38.541506][   T28] audit: type=1400 audit(1772419669.617:243): avc:  denied  { mounton } for  pid=745 comm="syz.4.106" path="/29/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   38.566033][  T753] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[   38.593604][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   38.599977][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   38.607636][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   38.617897][  T285] Call Trace:
[   38.621214][  T285]  <TASK>
[   38.624261][  T285]  __dump_stack+0x21/0x24
[   38.628827][  T285]  dump_stack_lvl+0x110/0x170
[   38.633718][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   38.639033][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   38.645138][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   38.651858][  T285]  dump_stack+0x15/0x24
[   38.656121][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   38.661790][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   38.666977][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   38.672485][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   38.678578][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   38.684597][  T285]  f2fs_find_data_page+0x198/0x3a0
[   38.689742][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   38.694896][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   38.700124][  T285]  ? clear_nonspinnable+0x60/0x60
[   38.705195][  T285]  f2fs_rmdir+0x3f/0x70
[   38.709382][  T285]  vfs_rmdir+0x393/0x500
[   38.713706][  T285]  do_rmdir+0x261/0x6b0
[   38.717944][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   38.722740][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   38.727710][  T285]  x64_sys_call+0x79f/0x9a0
[   38.732590][  T285]  do_syscall_64+0x4c/0xa0
[   38.737044][  T285]  ? clear_bhb_loop+0x30/0x80
[   38.741748][  T285]  ? clear_bhb_loop+0x30/0x80
[   38.746623][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   38.752735][  T285] RIP: 0033:0x7fda32f9b8b7
[   38.757269][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.777507][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   38.786036][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   38.794226][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   38.802402][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   38.810493][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   38.818590][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   38.826690][  T285]  </TASK>
[   38.983181][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   38.990067][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   38.998083][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   39.008348][  T285] Call Trace:
[   39.011832][  T285]  <TASK>
[   39.014789][  T285]  __dump_stack+0x21/0x24
[   39.019157][  T285]  dump_stack_lvl+0x110/0x170
[   39.023880][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   39.028953][  T285]  ? sysvec_reschedule_ipi+0x78/0x80
[   39.034359][  T285]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   39.040028][  T285]  dump_stack+0x15/0x24
[   39.044340][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   39.049934][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   39.055277][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   39.060776][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   39.067002][  T285]  ? kasan_check_range+0x97/0x2a0
[   39.072671][  T285]  f2fs_find_data_page+0x198/0x3a0
[   39.077817][  T285]  f2fs_readdir+0x49e/0x990
[   39.082365][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   39.087868][  T285]  ? __cfi___switch_to+0x10/0x10
[   39.092942][  T285]  ? avc_policy_seqno+0x1b/0x70
[   39.098322][  T285]  ? down_read_killable+0xbc/0x110
[   39.103566][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   39.110113][  T285]  ? fsnotify_perm+0x269/0x5b0
[   39.115086][  T285]  ? security_file_permission+0x94/0xb0
[   39.120856][  T285]  iterate_dir+0x271/0x610
[   39.126037][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   39.131389][  T285]  __se_sys_getdents64+0xf2/0x250
[   39.136804][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   39.142124][  T285]  ? __cfi_filldir64+0x10/0x10
[   39.147706][  T285]  ? __kasan_check_write+0x14/0x20
[   39.152861][  T285]  ? fpregs_restore_userregs+0x128/0x260
[   39.158798][  T285]  __x64_sys_getdents64+0x7b/0x90
[   39.163960][  T285]  x64_sys_call+0x15c/0x9a0
[   39.168764][  T285]  do_syscall_64+0x4c/0xa0
[   39.173233][  T285]  ? clear_bhb_loop+0x30/0x80
[   39.177948][  T285]  ? clear_bhb_loop+0x30/0x80
[   39.182693][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   39.188819][  T285] RIP: 0033:0x7fda32fc5133
[   39.193562][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   39.213559][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   39.222710][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   39.231087][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   39.239718][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   39.247916][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   39.256004][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   39.264280][  T285]  </TASK>
[   39.485313][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   39.527441][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   39.534982][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   39.545148][  T285] Call Trace:
[   39.548446][  T285]  <TASK>
[   39.551386][  T285]  __dump_stack+0x21/0x24
[   39.555977][  T285]  dump_stack_lvl+0x110/0x170
[   39.560750][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   39.565886][  T285]  ? raw_irqentry_exit_cond_resched+0x29/0x30
[   39.571972][  T285]  ? irqentry_exit+0x37/0x40
[   39.576756][  T285]  dump_stack+0x15/0x24
[   39.581084][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   39.586892][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   39.592128][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   39.597954][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   39.603986][  T285]  ? may_link+0x18e/0x560
[   39.608342][  T285]  f2fs_find_data_page+0x198/0x3a0
[   39.613471][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   39.618610][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   39.623971][  T285]  ? clear_nonspinnable+0x60/0x60
[   39.629142][  T285]  f2fs_rmdir+0x3f/0x70
[   39.633453][  T285]  vfs_rmdir+0x393/0x500
[   39.637733][  T285]  do_rmdir+0x261/0x6b0
[   39.642011][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   39.646708][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   39.651584][  T285]  x64_sys_call+0x79f/0x9a0
[   39.656453][  T285]  do_syscall_64+0x4c/0xa0
[   39.661137][  T285]  ? clear_bhb_loop+0x30/0x80
[   39.666269][  T285]  ? clear_bhb_loop+0x30/0x80
[   39.670961][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   39.677054][  T285] RIP: 0033:0x7fda32f9b8b7
[   39.681490][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.701653][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   39.704165][  T765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.710262][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   39.710280][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   39.710292][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   39.743199][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   39.751294][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   39.759743][  T285]  </TASK>
[   39.765226][  T765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.791752][  T765] loop1: detected capacity change from 0 to 256
[   39.810055][  T765] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   39.822343][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   39.833371][  T765] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   39.834634][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   39.850004][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   39.854830][  T765] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[   39.860828][  T285] Call Trace:
[   39.860843][  T285]  <TASK>
[   39.860851][  T285]  __dump_stack+0x21/0x24
[   39.883852][  T285]  dump_stack_lvl+0x110/0x170
[   39.888821][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   39.893859][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   39.899936][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   39.906643][  T285]  dump_stack+0x15/0x24
[   39.910800][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   39.916348][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   39.921475][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   39.927030][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   39.933295][  T285]  f2fs_find_data_page+0x198/0x3a0
[   39.938608][  T285]  f2fs_readdir+0x49e/0x990
[   39.943393][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   39.948679][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   39.953801][  T285]  ? avc_policy_seqno+0x1b/0x70
[   39.958678][  T285]  ? down_read_killable+0xbc/0x110
[   39.964055][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   39.969699][  T285]  ? fsnotify_perm+0x269/0x5b0
[   39.974511][  T285]  ? security_file_permission+0x94/0xb0
[   39.980783][  T285]  iterate_dir+0x271/0x610
[   39.985750][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   39.991275][  T285]  __se_sys_getdents64+0xf2/0x250
[   39.996727][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   40.002210][  T285]  ? __cfi_filldir64+0x10/0x10
[   40.007102][  T285]  ? __x64_sys_umount+0x12d/0x170
[   40.012303][  T285]  ? debug_smp_processor_id+0x17/0x20
[   40.017847][  T285]  __x64_sys_getdents64+0x7b/0x90
[   40.022893][  T285]  x64_sys_call+0x15c/0x9a0
[   40.027400][  T285]  do_syscall_64+0x4c/0xa0
[   40.031816][  T285]  ? clear_bhb_loop+0x30/0x80
[   40.036579][  T285]  ? clear_bhb_loop+0x30/0x80
[   40.041251][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   40.047247][  T285] RIP: 0033:0x7fda32fc5133
[   40.051679][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   40.071633][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   40.080049][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   40.088107][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   40.096163][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   40.104402][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   40.112822][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   40.121069][  T285]  </TASK>
[   40.129846][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   40.143309][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   40.150921][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   40.161371][  T285] Call Trace:
[   40.164674][  T285]  <TASK>
[   40.167626][  T285]  __dump_stack+0x21/0x24
[   40.171986][  T285]  dump_stack_lvl+0x110/0x170
[   40.176686][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   40.181736][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   40.187779][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   40.192070][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   40.194489][  T285]  dump_stack+0x15/0x24
[   40.206202][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   40.211967][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   40.217459][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   40.223051][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   40.229158][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   40.234997][  T285]  f2fs_find_data_page+0x198/0x3a0
[   40.240219][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   40.245017][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   40.250330][  T285]  ? clear_nonspinnable+0x60/0x60
[   40.255386][  T285]  f2fs_rmdir+0x3f/0x70
[   40.259652][  T285]  vfs_rmdir+0x393/0x500
[   40.263914][  T285]  do_rmdir+0x261/0x6b0
[   40.268183][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   40.272882][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   40.277840][  T285]  x64_sys_call+0x79f/0x9a0
[   40.282450][  T285]  do_syscall_64+0x4c/0xa0
[   40.286895][  T285]  ? clear_bhb_loop+0x30/0x80
[   40.291689][  T285]  ? clear_bhb_loop+0x30/0x80
[   40.296397][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   40.302589][  T285] RIP: 0033:0x7fda32f9b8b7
[   40.307127][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.326943][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   40.335472][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   40.343641][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   40.351653][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   40.359654][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   40.367653][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   40.375747][  T285]  </TASK>
[   40.380755][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   40.387353][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   40.395014][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   40.405099][  T285] Call Trace:
[   40.408395][  T285]  <TASK>
[   40.411344][  T285]  __dump_stack+0x21/0x24
[   40.415789][  T285]  dump_stack_lvl+0x110/0x170
[   40.420679][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   40.425834][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   40.432034][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   40.438757][  T285]  dump_stack+0x15/0x24
[   40.443035][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   40.448877][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   40.454233][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   40.459813][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   40.466004][  T285]  f2fs_find_data_page+0x198/0x3a0
[   40.471146][  T285]  f2fs_readdir+0x49e/0x990
[   40.475687][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   40.480743][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   40.485892][  T285]  ? avc_policy_seqno+0x1b/0x70
[   40.491137][  T285]  ? down_read_killable+0xbc/0x110
[   40.496361][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   40.501931][  T285]  ? fsnotify_perm+0x269/0x5b0
[   40.506721][  T285]  ? security_file_permission+0x94/0xb0
[   40.512430][  T285]  iterate_dir+0x271/0x610
[   40.516881][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   40.522031][  T285]  __se_sys_getdents64+0xf2/0x250
[   40.527093][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   40.532330][  T285]  ? __cfi_filldir64+0x10/0x10
[   40.537392][  T285]  ? debug_smp_processor_id+0x17/0x20
[   40.543058][  T285]  __x64_sys_getdents64+0x7b/0x90
[   40.548209][  T285]  x64_sys_call+0x15c/0x9a0
[   40.552742][  T285]  do_syscall_64+0x4c/0xa0
[   40.557540][  T285]  ? clear_bhb_loop+0x30/0x80
[   40.562244][  T285]  ? clear_bhb_loop+0x30/0x80
[   40.567125][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   40.573154][  T285] RIP: 0033:0x7fda32fc5133
[   40.577593][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   40.597773][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   40.606314][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   40.614502][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   40.622774][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   40.631183][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   40.639287][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   40.647370][  T285]  </TASK>
[   40.655343][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   40.663868][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   40.671387][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   40.681747][  T285] Call Trace:
[   40.685044][  T285]  <TASK>
[   40.688261][  T285]  __dump_stack+0x21/0x24
[   40.693156][  T285]  dump_stack_lvl+0x110/0x170
[   40.698046][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   40.703097][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   40.709204][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   40.716264][  T285]  dump_stack+0x15/0x24
[   40.721101][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   40.725567][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   40.725600][   T28] audit: type=1400 audit(1772419671.807:252): avc:  denied  { ioctl } for  pid=775 comm="syz.4.113" path="socket:[16867]" dev="sockfs" ino=16867 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.727108][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   40.762990][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   40.768832][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   40.774930][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   40.780700][  T285]  f2fs_find_data_page+0x198/0x3a0
[   40.785940][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   40.786837][  T781] loop2: detected capacity change from 0 to 512
[   40.790662][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   40.802228][  T285]  ? clear_nonspinnable+0x60/0x60
[   40.807295][  T285]  f2fs_rmdir+0x3f/0x70
[   40.811494][  T285]  vfs_rmdir+0x393/0x500
[   40.815779][  T285]  do_rmdir+0x261/0x6b0
[   40.819988][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   40.824696][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   40.829662][  T285]  x64_sys_call+0x79f/0x9a0
[   40.834193][  T285]  do_syscall_64+0x4c/0xa0
[   40.838632][  T285]  ? clear_bhb_loop+0x30/0x80
[   40.843410][  T285]  ? clear_bhb_loop+0x30/0x80
[   40.848204][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   40.854481][  T285] RIP: 0033:0x7fda32f9b8b7
[   40.858922][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.878830][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   40.887491][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   40.895492][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   40.903579][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   40.911854][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   40.920199][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   40.928379][  T285]  </TASK>
[   40.982140][   T28] audit: type=1400 audit(1772419672.057:253): avc:  denied  { remove_name } for  pid=282 comm="syz-executor" name="file0" dev="loop1" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   41.018484][  T781] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   41.038868][   T28] audit: type=1400 audit(1772419672.057:254): avc:  denied  { unlink } for  pid=282 comm="syz-executor" name="file0" dev="loop1" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   41.065534][  T785] loop1: detected capacity change from 0 to 256
[   41.084163][  T781] EXT4-fs (loop2): 1 truncate cleaned up
[   41.089937][  T781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   41.093210][   T28] audit: type=1400 audit(1772419672.057:255): avc:  denied  { rmdir } for  pid=282 comm="syz-executor" name="file0" dev="loop1" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   41.132295][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   41.138332][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   41.145815][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   41.155987][  T285] Call Trace:
[   41.159464][  T285]  <TASK>
[   41.162409][  T285]  __dump_stack+0x21/0x24
[   41.166771][  T285]  dump_stack_lvl+0x110/0x170
[   41.171648][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   41.176694][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   41.182723][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   41.189693][  T285]  dump_stack+0x15/0x24
[   41.193957][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   41.199515][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   41.204832][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   41.210313][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   41.216301][  T285]  f2fs_find_data_page+0x198/0x3a0
[   41.221505][  T285]  f2fs_readdir+0x49e/0x990
[   41.226127][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   41.231323][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   41.236452][  T285]  ? avc_policy_seqno+0x1b/0x70
[   41.241483][  T285]  ? down_read_killable+0xbc/0x110
[   41.247031][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   41.252576][  T285]  ? fsnotify_perm+0x269/0x5b0
[   41.257424][  T285]  ? security_file_permission+0x94/0xb0
[   41.262967][  T285]  iterate_dir+0x271/0x610
[   41.267378][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   41.272489][  T285]  __se_sys_getdents64+0xf2/0x250
[   41.277600][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   41.282882][  T285]  ? __cfi_filldir64+0x10/0x10
[   41.287639][  T285]  ? __x64_sys_umount+0x12d/0x170
[   41.292682][  T285]  ? debug_smp_processor_id+0x17/0x20
[   41.298136][  T285]  __x64_sys_getdents64+0x7b/0x90
[   41.303255][  T285]  x64_sys_call+0x15c/0x9a0
[   41.307935][  T285]  do_syscall_64+0x4c/0xa0
[   41.312395][  T285]  ? clear_bhb_loop+0x30/0x80
[   41.317285][  T285]  ? clear_bhb_loop+0x30/0x80
[   41.322169][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   41.328088][  T285] RIP: 0033:0x7fda32fc5133
[   41.332689][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   41.353087][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   41.362299][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   41.370481][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   41.378885][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   41.387205][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   41.395466][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   41.403790][  T285]  </TASK>
[   41.424831][  T785] FAT-fs (loop1): Directory bread(block 64) failed
[   41.431730][  T785] FAT-fs (loop1): Directory bread(block 65) failed
[   41.452641][  T785] FAT-fs (loop1): Directory bread(block 66) failed
[   41.459305][  T785] FAT-fs (loop1): Directory bread(block 67) failed
[   41.472073][   T28] audit: type=1400 audit(1772419672.097:256): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   41.493647][  T785] FAT-fs (loop1): Directory bread(block 68) failed
[   41.500579][  T785] FAT-fs (loop1): Directory bread(block 69) failed
[   41.532106][  T785] FAT-fs (loop1): Directory bread(block 70) failed
[   41.538989][  T785] FAT-fs (loop1): Directory bread(block 71) failed
[   41.547747][   T28] audit: type=1400 audit(1772419672.107:257): avc:  denied  { write } for  pid=784 comm="syz.1.116" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   41.552171][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   41.572834][  T785] FAT-fs (loop1): Directory bread(block 72) failed
[   41.612063][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   41.620017][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   41.630367][  T285] Call Trace:
[   41.633838][  T285]  <TASK>
[   41.637081][  T285]  __dump_stack+0x21/0x24
[   41.637896][  T785] FAT-fs (loop1): Directory bread(block 73) failed
[   41.641541][  T285]  dump_stack_lvl+0x110/0x170
[   41.652969][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   41.658190][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   41.658516][   T28] audit: type=1400 audit(1772419672.117:258): avc:  denied  { read } for  pid=784 comm="syz.1.116" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.664268][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   41.664298][  T285]  dump_stack+0x15/0x24
[   41.697906][  T785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'.
[   41.698196][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   41.712885][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   41.718233][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   41.724074][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   41.727874][   T28] audit: type=1400 audit(1772419672.117:259): avc:  denied  { append } for  pid=784 comm="syz.1.116" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   41.730246][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   41.759440][  T285]  f2fs_find_data_page+0x198/0x3a0
[   41.764674][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   41.769398][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   41.772150][  T282] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   41.774887][  T285]  ? clear_nonspinnable+0x60/0x60
[   41.787900][  T285]  f2fs_rmdir+0x3f/0x70
[   41.792073][  T285]  vfs_rmdir+0x393/0x500
[   41.796426][  T285]  do_rmdir+0x261/0x6b0
[   41.800905][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   41.802125][  T282] FAT-fs (loop1): Filesystem has been set read-only
[   41.805696][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   41.805721][  T285]  x64_sys_call+0x79f/0x9a0
[   41.813091][   T28] audit: type=1400 audit(1772419672.117:260): avc:  denied  { write } for  pid=784 comm="syz.1.116" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   41.817322][  T285]  do_syscall_64+0x4c/0xa0
[   41.832059][   T28] audit: type=1400 audit(1772419672.777:261): avc:  denied  { mount } for  pid=784 comm="syz.1.116" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   41.842473][  T285]  ? clear_bhb_loop+0x30/0x80
[   41.842498][  T285]  ? clear_bhb_loop+0x30/0x80
[   41.842515][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   41.842542][  T285] RIP: 0033:0x7fda32f9b8b7
[   41.889667][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.909646][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   41.918276][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   41.926454][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   41.934455][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   41.942544][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   41.950539][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   41.958549][  T285]  </TASK>
[   42.006039][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   42.012217][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   42.019807][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   42.030057][  T285] Call Trace:
[   42.033553][  T285]  <TASK>
[   42.036778][  T285]  __dump_stack+0x21/0x24
[   42.041369][  T285]  dump_stack_lvl+0x110/0x170
[   42.046083][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.051314][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   42.057332][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   42.064227][  T285]  dump_stack+0x15/0x24
[   42.068505][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   42.074087][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   42.079266][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   42.084774][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   42.090875][  T285]  f2fs_find_data_page+0x198/0x3a0
[   42.096547][  T285]  f2fs_readdir+0x49e/0x990
[   42.101172][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   42.106515][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   42.111833][  T285]  ? avc_policy_seqno+0x1b/0x70
[   42.116813][  T285]  ? down_read_killable+0xbc/0x110
[   42.122268][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   42.128013][  T285]  ? fsnotify_perm+0x269/0x5b0
[   42.132811][  T285]  ? security_file_permission+0x94/0xb0
[   42.138390][  T285]  iterate_dir+0x271/0x610
[   42.142871][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   42.148028][  T285]  __se_sys_getdents64+0xf2/0x250
[   42.153198][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   42.158452][  T285]  ? __cfi_filldir64+0x10/0x10
[   42.163340][  T285]  ? __x64_sys_umount+0x12d/0x170
[   42.168391][  T285]  ? debug_smp_processor_id+0x17/0x20
[   42.173970][  T285]  __x64_sys_getdents64+0x7b/0x90
[   42.179039][  T285]  x64_sys_call+0x15c/0x9a0
[   42.184321][  T285]  do_syscall_64+0x4c/0xa0
[   42.189220][  T285]  ? clear_bhb_loop+0x30/0x80
[   42.194213][  T285]  ? clear_bhb_loop+0x30/0x80
[   42.199015][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.205037][  T285] RIP: 0033:0x7fda32fc5133
[   42.209475][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   42.229805][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   42.238351][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   42.246786][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   42.254785][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   42.262783][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   42.270869][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   42.278881][  T285]  </TASK>
[   42.302424][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   42.312242][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   42.319831][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   42.330010][  T285] Call Trace:
[   42.333320][  T285]  <TASK>
[   42.336279][  T285]  __dump_stack+0x21/0x24
[   42.340656][  T285]  dump_stack_lvl+0x110/0x170
[   42.345565][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.351326][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   42.357478][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   42.364379][  T285]  dump_stack+0x15/0x24
[   42.368584][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   42.374257][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   42.379576][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   42.385318][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   42.391315][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   42.397471][  T285]  f2fs_find_data_page+0x198/0x3a0
[   42.402594][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   42.407285][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   42.412501][  T285]  ? clear_nonspinnable+0x60/0x60
[   42.417555][  T285]  f2fs_rmdir+0x3f/0x70
[   42.421707][  T285]  vfs_rmdir+0x393/0x500
[   42.425955][  T285]  do_rmdir+0x261/0x6b0
[   42.430115][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   42.434794][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   42.439734][  T285]  x64_sys_call+0x79f/0x9a0
[   42.444271][  T285]  do_syscall_64+0x4c/0xa0
[   42.448692][  T285]  ? clear_bhb_loop+0x30/0x80
[   42.453562][  T285]  ? clear_bhb_loop+0x30/0x80
[   42.458478][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.464665][  T285] RIP: 0033:0x7fda32f9b8b7
[   42.469094][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.488878][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   42.497816][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   42.505871][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   42.513963][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   42.521946][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   42.530196][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   42.538449][  T285]  </TASK>
[   42.585498][  T781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'.
[   42.742291][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   42.748340][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   42.755999][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   42.766172][  T285] Call Trace:
[   42.769476][  T285]  <TASK>
[   42.772519][  T285]  __dump_stack+0x21/0x24
[   42.776984][  T285]  dump_stack_lvl+0x110/0x170
[   42.781701][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.786761][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   42.792771][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   42.799481][  T285]  dump_stack+0x15/0x24
[   42.803842][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   42.809427][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   42.814570][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   42.820115][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   42.826130][  T285]  f2fs_find_data_page+0x198/0x3a0
[   42.831271][  T285]  f2fs_readdir+0x49e/0x990
[   42.835846][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   42.840994][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   42.846144][  T285]  ? avc_policy_seqno+0x1b/0x70
[   42.851128][  T285]  ? down_read_killable+0xbc/0x110
[   42.856456][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   42.862097][  T285]  ? fsnotify_perm+0x269/0x5b0
[   42.867155][  T285]  ? security_file_permission+0x94/0xb0
[   42.872819][  T285]  iterate_dir+0x271/0x610
[   42.877269][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   42.882385][  T285]  __se_sys_getdents64+0xf2/0x250
[   42.887449][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   42.892767][  T285]  ? __cfi_filldir64+0x10/0x10
[   42.897561][  T285]  ? __x64_sys_umount+0x12d/0x170
[   42.902623][  T285]  ? debug_smp_processor_id+0x17/0x20
[   42.908150][  T285]  __x64_sys_getdents64+0x7b/0x90
[   42.913280][  T285]  x64_sys_call+0x15c/0x9a0
[   42.917784][  T285]  do_syscall_64+0x4c/0xa0
[   42.922549][  T285]  ? clear_bhb_loop+0x30/0x80
[   42.927315][  T285]  ? clear_bhb_loop+0x30/0x80
[   42.932161][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.938230][  T285] RIP: 0033:0x7fda32fc5133
[   42.942645][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   42.962421][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   42.970849][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   42.978999][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   42.987322][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   42.995380][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   43.003352][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   43.011584][  T285]  </TASK>
[   43.276802][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   43.294180][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   43.301879][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   43.303867][  T789] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.312151][  T285] Call Trace:
[   43.312160][  T285]  <TASK>
[   43.312166][  T285]  __dump_stack+0x21/0x24
[   43.312195][  T285]  dump_stack_lvl+0x110/0x170
[   43.312216][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   43.340321][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   43.346517][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   43.350060][  T789] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.353407][  T285]  dump_stack+0x15/0x24
[   43.353442][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   43.353464][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   43.353483][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   43.353501][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   43.353518][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   43.353541][  T285]  f2fs_find_data_page+0x198/0x3a0
[   43.353560][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   43.353583][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   43.353606][  T285]  ? clear_nonspinnable+0x60/0x60
[   43.353631][  T285]  f2fs_rmdir+0x3f/0x70
[   43.381631][  T789] device bridge_slave_0 entered promiscuous mode
[   43.387591][  T285]  vfs_rmdir+0x393/0x500
[   43.387622][  T285]  do_rmdir+0x261/0x6b0
[   43.424276][  T783] loop4: detected capacity change from 0 to 131072
[   43.425275][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   43.445192][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   43.450159][  T285]  x64_sys_call+0x79f/0x9a0
[   43.454706][  T285]  do_syscall_64+0x4c/0xa0
[   43.459156][  T285]  ? clear_bhb_loop+0x30/0x80
[   43.464207][  T285]  ? clear_bhb_loop+0x30/0x80
[   43.469018][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   43.475134][  T285] RIP: 0033:0x7fda32f9b8b7
[   43.479668][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.499482][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   43.508710][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   43.517156][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   43.523925][  T783] F2FS-fs (loop4): invalid crc value
[   43.525582][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   43.539034][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   43.547292][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   43.555675][  T285]  </TASK>
[   43.559619][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   43.566438][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   43.567879][  T286] EXT4-fs (loop2): unmounting filesystem.
[   43.573949][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   43.573962][  T285] Call Trace:
[   43.573968][  T285]  <TASK>
[   43.573974][  T285]  __dump_stack+0x21/0x24
[   43.574002][  T285]  dump_stack_lvl+0x110/0x170
[   43.605498][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   43.610529][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   43.616520][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   43.623289][  T285]  dump_stack+0x15/0x24
[   43.627633][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   43.633436][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   43.638545][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   43.644185][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   43.650258][  T285]  f2fs_find_data_page+0x198/0x3a0
[   43.655370][  T285]  f2fs_readdir+0x49e/0x990
[   43.659989][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   43.665109][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   43.670429][  T285]  ? avc_policy_seqno+0x1b/0x70
[   43.675314][  T285]  ? down_read_killable+0xbc/0x110
[   43.680453][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   43.686293][  T285]  ? fsnotify_perm+0x269/0x5b0
[   43.691068][  T285]  ? security_file_permission+0x94/0xb0
[   43.696889][  T285]  iterate_dir+0x271/0x610
[   43.701684][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   43.707170][  T285]  __se_sys_getdents64+0xf2/0x250
[   43.712206][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   43.717426][  T285]  ? __cfi_filldir64+0x10/0x10
[   43.722359][  T285]  ? __x64_sys_umount+0x12d/0x170
[   43.727481][  T285]  ? debug_smp_processor_id+0x17/0x20
[   43.733199][  T285]  __x64_sys_getdents64+0x7b/0x90
[   43.738485][  T285]  x64_sys_call+0x15c/0x9a0
[   43.742991][  T285]  do_syscall_64+0x4c/0xa0
[   43.747582][  T285]  ? clear_bhb_loop+0x30/0x80
[   43.752256][  T285]  ? clear_bhb_loop+0x30/0x80
[   43.756939][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   43.762876][  T285] RIP: 0033:0x7fda32fc5133
[   43.767307][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   43.787095][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   43.795780][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   43.804134][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   43.812192][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   43.820161][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   43.828218][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   43.836317][  T285]  </TASK>
[   43.840104][  T783] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4)
[   43.840677][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   43.855728][  T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   43.863383][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   43.873620][  T285] Call Trace:
[   43.876899][  T285]  <TASK>
[   43.879826][  T285]  __dump_stack+0x21/0x24
[   43.884166][  T285]  dump_stack_lvl+0x110/0x170
[   43.889129][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   43.894239][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   43.900221][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   43.907246][  T285]  dump_stack+0x15/0x24
[   43.911697][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   43.917790][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   43.923186][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   43.928757][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   43.934852][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   43.940641][  T285]  f2fs_find_data_page+0x198/0x3a0
[   43.945851][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   43.950558][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   43.955767][  T285]  ? clear_nonspinnable+0x60/0x60
[   43.960831][  T285]  f2fs_rmdir+0x3f/0x70
[   43.964993][  T285]  vfs_rmdir+0x393/0x500
[   43.969437][  T285]  do_rmdir+0x261/0x6b0
[   43.973606][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   43.978284][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   43.983311][  T285]  x64_sys_call+0x79f/0x9a0
[   43.987812][  T285]  do_syscall_64+0x4c/0xa0
[   43.992405][  T285]  ? clear_bhb_loop+0x30/0x80
[   43.997079][  T285]  ? clear_bhb_loop+0x30/0x80
[   44.001756][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   44.007739][  T285] RIP: 0033:0x7fda32f9b8b7
[   44.012238][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.032222][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   44.041013][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   44.049104][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   44.057338][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   44.065593][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   44.074372][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   44.082879][  T285]  </TASK>
[   44.086025][  T789] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.103365][  T789] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.111380][  T789] device bridge_slave_1 entered promiscuous mode
[   44.158689][  T796] loop2: detected capacity change from 0 to 512
[   44.177645][  T796] EXT4-fs: Ignoring removed oldalloc option
[   44.183718][  T796] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.199078][  T796] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   44.235136][  T796] EXT4-fs (loop2): 1 truncate cleaned up
[   44.240845][  T796] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   44.254497][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   44.261531][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   44.269289][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   44.279560][  T285] Call Trace:
[   44.283040][  T285]  <TASK>
[   44.286076][  T285]  __dump_stack+0x21/0x24
[   44.290445][  T285]  dump_stack_lvl+0x110/0x170
[   44.295157][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   44.300384][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   44.306567][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   44.314231][  T285]  dump_stack+0x15/0x24
[   44.318508][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   44.324526][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   44.330022][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   44.335524][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   44.341529][  T285]  f2fs_find_data_page+0x198/0x3a0
[   44.347107][  T285]  f2fs_readdir+0x49e/0x990
[   44.351742][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   44.356880][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   44.362073][  T285]  ? avc_policy_seqno+0x1b/0x70
[   44.367042][  T285]  ? down_read_killable+0xbc/0x110
[   44.372358][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   44.378024][  T285]  ? fsnotify_perm+0x269/0x5b0
[   44.382815][  T285]  ? security_file_permission+0x94/0xb0
[   44.388480][  T285]  iterate_dir+0x271/0x610
[   44.393002][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   44.398392][  T285]  __se_sys_getdents64+0xf2/0x250
[   44.403701][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   44.409281][  T285]  ? __cfi_filldir64+0x10/0x10
[   44.414069][  T285]  ? __x64_sys_umount+0x12d/0x170
[   44.419266][  T285]  ? debug_smp_processor_id+0x17/0x20
[   44.424667][  T285]  __x64_sys_getdents64+0x7b/0x90
[   44.429736][  T285]  x64_sys_call+0x15c/0x9a0
[   44.434265][  T285]  do_syscall_64+0x4c/0xa0
[   44.438895][  T285]  ? clear_bhb_loop+0x30/0x80
[   44.443767][  T285]  ? clear_bhb_loop+0x30/0x80
[   44.448634][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   44.454557][  T285] RIP: 0033:0x7fda32fc5133
[   44.459195][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   44.479184][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   44.487623][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   44.495710][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   44.503808][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   44.511989][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   44.520069][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   44.528061][  T285]  </TASK>
[   44.574013][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   44.580929][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   44.588589][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   44.598865][  T285] Call Trace:
[   44.602340][  T285]  <TASK>
[   44.605370][  T285]  __dump_stack+0x21/0x24
[   44.609907][  T285]  dump_stack_lvl+0x110/0x170
[   44.614604][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   44.619651][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   44.625573][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   44.632375][  T285]  dump_stack+0x15/0x24
[   44.636553][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   44.642140][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   44.647284][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   44.652873][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   44.658972][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   44.664812][  T285]  f2fs_find_data_page+0x198/0x3a0
[   44.670043][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   44.674837][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   44.680418][  T285]  ? clear_nonspinnable+0x60/0x60
[   44.685742][  T285]  f2fs_rmdir+0x3f/0x70
[   44.690101][  T285]  vfs_rmdir+0x393/0x500
[   44.694465][  T285]  do_rmdir+0x261/0x6b0
[   44.698644][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   44.703361][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   44.708235][  T285]  x64_sys_call+0x79f/0x9a0
[   44.712854][  T285]  do_syscall_64+0x4c/0xa0
[   44.717391][  T285]  ? clear_bhb_loop+0x30/0x80
[   44.722192][  T285]  ? clear_bhb_loop+0x30/0x80
[   44.726902][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   44.732965][  T285] RIP: 0033:0x7fda32f9b8b7
[   44.737413][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.757396][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   44.765928][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   44.773928][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   44.782127][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   44.790295][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   44.798289][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   44.806379][  T285]  </TASK>
[   44.818902][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   44.825818][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.846928][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.855085][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   44.862847][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   44.873112][  T285] Call Trace:
[   44.876414][  T285]  <TASK>
[   44.879452][  T285]  __dump_stack+0x21/0x24
[   44.883994][  T285]  dump_stack_lvl+0x110/0x170
[   44.888708][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   44.894114][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   44.900397][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   44.907381][  T285]  dump_stack+0x15/0x24
[   44.911667][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   44.917326][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   44.922585][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   44.928125][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   44.934135][  T285]  f2fs_find_data_page+0x198/0x3a0
[   44.939288][  T285]  f2fs_readdir+0x49e/0x990
[   44.943826][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   44.948978][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   44.954208][  T285]  ? avc_policy_seqno+0x1b/0x70
[   44.958585][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.959178][  T285]  ? down_read_killable+0xbc/0x110
[   44.972543][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   44.978222][  T285]  ? fsnotify_perm+0x269/0x5b0
[   44.979416][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.983128][  T285]  ? security_file_permission+0x94/0xb0
[   44.996917][  T285]  iterate_dir+0x271/0x610
[   45.000672][  T355] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.001521][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   45.008707][  T355] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.013729][  T285]  __se_sys_getdents64+0xf2/0x250
[   45.013750][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   45.013768][  T285]  ? __cfi_filldir64+0x10/0x10
[   45.036448][  T285]  ? __x64_sys_umount+0x12d/0x170
[   45.041697][  T285]  ? debug_smp_processor_id+0x17/0x20
[   45.043313][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   45.047182][  T285]  __x64_sys_getdents64+0x7b/0x90
[   45.060732][  T285]  x64_sys_call+0x15c/0x9a0
[   45.065278][  T285]  do_syscall_64+0x4c/0xa0
[   45.069817][  T285]  ? clear_bhb_loop+0x30/0x80
[   45.074607][  T285]  ? clear_bhb_loop+0x30/0x80
[   45.076034][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   45.079627][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   45.093933][  T285] RIP: 0033:0x7fda32fc5133
[   45.095050][  T355] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.098365][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   45.098384][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   45.098413][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   45.105444][  T355] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.125458][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   45.125474][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   45.125486][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   45.125497][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   45.134595][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   45.142216][  T285]  </TASK>
[   45.192746][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   45.192782][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   45.192798][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   45.192813][  T285] Call Trace:
[   45.192818][  T285]  <TASK>
[   45.192825][  T285]  __dump_stack+0x21/0x24
[   45.192852][  T285]  dump_stack_lvl+0x110/0x170
[   45.192874][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   45.192895][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   45.192918][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   45.192954][  T285]  dump_stack+0x15/0x24
[   45.192975][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   45.192998][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   45.193019][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   45.193038][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   45.193055][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   45.193078][  T285]  f2fs_find_data_page+0x198/0x3a0
[   45.193094][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   45.193116][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   45.193137][  T285]  ? clear_nonspinnable+0x60/0x60
[   45.193161][  T285]  f2fs_rmdir+0x3f/0x70
[   45.193180][  T285]  vfs_rmdir+0x393/0x500
[   45.193208][  T285]  do_rmdir+0x261/0x6b0
[   45.193229][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   45.193249][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   45.193269][  T285]  x64_sys_call+0x79f/0x9a0
[   45.193289][  T285]  do_syscall_64+0x4c/0xa0
[   45.193310][  T285]  ? clear_bhb_loop+0x30/0x80
[   45.193326][  T285]  ? clear_bhb_loop+0x30/0x80
[   45.193342][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   45.193367][  T285] RIP: 0033:0x7fda32f9b8b7
[   45.193381][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.193397][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   45.193417][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   45.193430][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   45.193442][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   45.193454][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   45.193465][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   45.193481][  T285]  </TASK>
[   45.193636][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   45.193652][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   45.193670][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   45.193679][  T285] Call Trace:
[   45.193684][  T285]  <TASK>
[   45.193690][  T285]  __dump_stack+0x21/0x24
[   45.193713][  T285]  dump_stack_lvl+0x110/0x170
[   45.193735][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   45.193758][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   45.193780][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   45.193806][  T285]  dump_stack+0x15/0x24
[   45.193824][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   45.193845][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   45.193864][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   45.193883][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   45.201320][  T286] EXT4-fs (loop2): unmounting filesystem.
[   45.207317][  T285]  f2fs_find_data_page+0x198/0x3a0
[   45.207342][  T285]  f2fs_readdir+0x49e/0x990
[   45.207369][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   45.207393][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   45.207414][  T285]  ? avc_policy_seqno+0x1b/0x70
[   45.540788][  T285]  ? down_read_killable+0xbc/0x110
[   45.545917][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   45.551468][  T285]  ? fsnotify_perm+0x269/0x5b0
[   45.556514][  T285]  ? security_file_permission+0x94/0xb0
[   45.562347][  T285]  iterate_dir+0x271/0x610
[   45.566768][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   45.571801][  T285]  __se_sys_getdents64+0xf2/0x250
[   45.576831][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   45.582088][  T285]  ? __cfi_filldir64+0x10/0x10
[   45.586897][  T285]  ? __x64_sys_umount+0x12d/0x170
[   45.591949][  T285]  ? debug_smp_processor_id+0x17/0x20
[   45.597340][  T285]  __x64_sys_getdents64+0x7b/0x90
[   45.602399][  T285]  x64_sys_call+0x15c/0x9a0
[   45.607364][  T285]  do_syscall_64+0x4c/0xa0
[   45.611793][  T285]  ? clear_bhb_loop+0x30/0x80
[   45.616649][  T285]  ? clear_bhb_loop+0x30/0x80
[   45.621420][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   45.627404][  T285] RIP: 0033:0x7fda32fc5133
[   45.631825][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   45.651537][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   45.660055][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   45.668103][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   45.676112][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   45.684956][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   45.693219][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   45.701216][  T285]  </TASK>
[   45.773563][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   45.789471][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   45.811237][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   45.817339][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   45.824826][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   45.834933][  T285] Call Trace:
[   45.838320][  T285]  <TASK>
[   45.841420][  T285]  __dump_stack+0x21/0x24
[   45.842332][  T818] loop2: detected capacity change from 0 to 256
[   45.845864][  T285]  dump_stack_lvl+0x110/0x170
[   45.845894][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   45.845915][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   45.845937][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   45.874745][  T285]  dump_stack+0x15/0x24
[   45.879063][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   45.884732][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   45.890035][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   45.895510][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   45.901492][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   45.907228][  T285]  f2fs_find_data_page+0x198/0x3a0
[   45.912435][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   45.917898][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   45.923109][  T285]  ? clear_nonspinnable+0x60/0x60
[   45.928333][  T285]  f2fs_rmdir+0x3f/0x70
[   45.932584][  T285]  vfs_rmdir+0x393/0x500
[   45.936841][  T285]  do_rmdir+0x261/0x6b0
[   45.940997][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   45.945674][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   45.950541][  T285]  x64_sys_call+0x79f/0x9a0
[   45.955140][  T285]  do_syscall_64+0x4c/0xa0
[   45.959735][  T285]  ? clear_bhb_loop+0x30/0x80
[   45.964434][  T285]  ? clear_bhb_loop+0x30/0x80
[   45.969196][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   45.975110][  T285] RIP: 0033:0x7fda32f9b8b7
[   45.979613][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.999221][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   46.007723][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   46.015956][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   46.024077][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   46.032050][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   46.040652][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   46.048629][  T285]  </TASK>
[   46.066377][  T789] device veth0_vlan entered promiscuous mode
[   46.072949][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   46.081695][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   46.090457][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   46.099904][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   46.121926][  T789] device veth1_macvtap entered promiscuous mode
[   46.128851][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   46.134935][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   46.142408][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   46.152754][  T285] Call Trace:
[   46.156063][  T285]  <TASK>
[   46.159108][  T285]  __dump_stack+0x21/0x24
[   46.163478][  T285]  dump_stack_lvl+0x110/0x170
[   46.168188][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   46.173251][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   46.179250][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   46.186071][  T285]  dump_stack+0x15/0x24
[   46.190350][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   46.195943][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   46.201111][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   46.206608][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   46.212717][  T285]  f2fs_find_data_page+0x198/0x3a0
[   46.217973][  T285]  f2fs_readdir+0x49e/0x990
[   46.222609][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   46.227761][  T285]  ? __se_sys_newfstat+0x30b/0x3d0
[   46.232908][  T285]  ? avc_policy_seqno+0x1b/0x70
[   46.237794][  T285]  ? down_read_killable+0xbc/0x110
[   46.243018][  T285]  ? __cfi_down_read_killable+0x10/0x10
[   46.248690][  T285]  ? fsnotify_perm+0x269/0x5b0
[   46.253479][  T285]  ? security_file_permission+0x94/0xb0
[   46.259152][  T285]  iterate_dir+0x271/0x610
[   46.263670][  T285]  ? __cfi_f2fs_readdir+0x10/0x10
[   46.268802][  T285]  __se_sys_getdents64+0xf2/0x250
[   46.273980][  T285]  ? __x64_sys_getdents64+0x90/0x90
[   46.278754][  T819] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[   46.279301][  T285]  ? __cfi_filldir64+0x10/0x10
[   46.292841][  T285]  ? __x64_sys_umount+0x12d/0x170
[   46.296329][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   46.298158][  T285]  ? debug_smp_processor_id+0x17/0x20
[   46.306888][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   46.310912][  T285]  __x64_sys_getdents64+0x7b/0x90
[   46.318808][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   46.323193][  T285]  x64_sys_call+0x15c/0x9a0
[   46.331826][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.335918][  T285]  do_syscall_64+0x4c/0xa0
[   46.344757][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   46.348432][  T285]  ? clear_bhb_loop+0x30/0x80
[   46.348459][  T285]  ? clear_bhb_loop+0x30/0x80
[   46.348476][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   46.372670][  T285] RIP: 0033:0x7fda32fc5133
[   46.377279][  T285] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   46.397124][  T285] RSP: 002b:00007ffffb5f18d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   46.406259][  T285] RAX: ffffffffffffffda RBX: 000055558e231950 RCX: 00007fda32fc5133
[   46.415134][  T285] RDX: 0000000000008000 RSI: 000055558e231980 RDI: 0000000000000006
[   46.423204][  T285] RBP: 000055558e231980 R08: 00007fda331ebe20 R09: 0000000000000001
[   46.431542][  T285] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e231954
[   46.439793][  T285] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffffb5f4c70
[   46.447870][  T285]  </TASK>
[   46.453971][  T285] F2FS-fs (loop3): access invalid blkaddr:36
[   46.460320][  T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0
[   46.467901][  T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   46.478282][  T285] Call Trace:
[   46.481564][  T285]  <TASK>
[   46.484507][  T285]  __dump_stack+0x21/0x24
[   46.488936][  T285]  dump_stack_lvl+0x110/0x170
[   46.493693][  T285]  ? __cfi_dump_stack_lvl+0x8/0x8
[   46.498877][  T285]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   46.504914][  T285]  ? f2fs_lookup_read_extent_cache_block+0x257/0x460
[   46.511849][  T285]  dump_stack+0x15/0x24
[   46.516105][  T285]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[   46.521789][  T285]  f2fs_is_valid_blkaddr+0x23/0x30
[   46.527084][  T285]  f2fs_get_read_data_page+0x4ef/0x850
[   46.532627][  T285]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   46.538691][  T285]  ? selinux_inode_permission+0x415/0x5f0
[   46.544489][  T285]  f2fs_find_data_page+0x198/0x3a0
[   46.549628][  T285]  f2fs_empty_dir+0x14a/0x2f0
[   46.554385][  T285]  ? __cfi_f2fs_empty_dir+0x10/0x10
[   46.559654][  T285]  ? clear_nonspinnable+0x60/0x60
[   46.564944][  T285]  f2fs_rmdir+0x3f/0x70
[   46.569210][  T285]  vfs_rmdir+0x393/0x500
[   46.571785][  T314] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   46.573536][  T285]  do_rmdir+0x261/0x6b0
[   46.585138][  T285]  ? __cfi_do_rmdir+0x10/0x10
[   46.589820][  T285]  __x64_sys_unlinkat+0xc7/0xf0
[   46.594787][  T285]  x64_sys_call+0x79f/0x9a0
[   46.599305][  T285]  do_syscall_64+0x4c/0xa0
[   46.604135][  T285]  ? clear_bhb_loop+0x30/0x80
[   46.609071][  T285]  ? clear_bhb_loop+0x30/0x80
[   46.613786][  T285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   46.619773][  T285] RIP: 0033:0x7fda32f9b8b7
[   46.624233][  T285] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.644318][  T285] RSP: 002b:00007ffffb5f1908 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   46.653167][  T285] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fda32f9b8b7
[   46.661147][  T285] RDX: 0000000000000200 RSI: 00007ffffb5f2ab0 RDI: 00000000ffffff9c
[   46.669403][  T285] RBP: 00007fda33031f90 R08: 0000000000008680 R09: 0000000000000001
[   46.677415][  T285] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffffb5f2ab0
[   46.685599][  T285] R13: 00007fda33031f90 R14: 000055558e20e4e8 R15: 00007ffffb5f4c70
[   46.693692][  T285]  </TASK>
[   46.699916][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.712979][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.733450][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.753173][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.754978][  T831] loop4: detected capacity change from 0 to 256
[   46.769595][  T314] usb 3-1: config 255 has an invalid interface number: 33 but max is 0
[   46.785583][  T314] usb 3-1: config 255 has an invalid interface number: 82 but max is 0
[   46.798624][  T816] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.816509][  T816] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.823634][  T314] usb 3-1: config 255 has 2 interfaces, different from the descriptor's value: 1
[   46.840972][  T816] device bridge_slave_0 entered promiscuous mode
[   46.845852][  T314] usb 3-1: config 255 has no interface number 0
[   46.849247][  T816] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.862976][  T816] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.870653][  T816] device bridge_slave_1 entered promiscuous mode
[   46.872443][  T314] usb 3-1: config 255 has no interface number 1
[   46.885700][  T314] usb 3-1: config 255 interface 33 altsetting 254 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   46.898325][  T314] usb 3-1: config 255 interface 33 altsetting 254 has an invalid endpoint with address 0x0, skipping
[   46.909432][  T314] usb 3-1: config 255 interface 33 altsetting 254 endpoint 0xE has invalid maxpacket 1024, setting to 64
[   46.920914][  T314] usb 3-1: config 255 interface 33 altsetting 254 has a duplicate endpoint with address 0x1, skipping
[   46.932198][  T314] usb 3-1: config 255 interface 33 altsetting 254 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[   46.934466][   T28] kauditd_printk_skb: 4 callbacks suppressed
[   46.934481][   T28] audit: type=1400 audit(1772419677.834:266): avc:  denied  { mounton } for  pid=789 comm="syz-executor" path="/root/syzkaller.fAbFXI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   46.958481][  T314] usb 3-1: too many endpoints for config 255 interface 82 altsetting 80: 241, using maximum allowed: 30
[   46.995881][  T314] usb 3-1: config 255 interface 82 altsetting 80 has an invalid endpoint with address 0x0, skipping
[   47.006937][  T314] usb 3-1: config 255 interface 82 altsetting 80 has 1 endpoint descriptor, different from the interface descriptor's value: 241
[   47.020783][  T314] usb 3-1: config 255 interface 33 has no altsetting 0
[   47.027858][  T314] usb 3-1: config 255 interface 82 has no altsetting 0
[   47.065540][  T314] usb 3-1: Dual-Role OTG device on HNP port
[   47.077989][  T314] usb 3-1: New USB device found, idVendor=0af0, idProduct=8800, bcdDevice=6f.c9
[   47.096942][  T836] netlink: 24 bytes leftover after parsing attributes in process `syz.5.119'.
[   47.112323][  T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.122214][  T314] usb 3-1: Product: syz
[   47.126707][  T314] usb 3-1: Manufacturer: 줁Ώ뼶㊗
[   47.132471][  T834] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.139669][  T834] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.146748][  T314] usb 3-1: SerialNumber: syz
[   47.152378][  T834] device bridge_slave_0 entered promiscuous mode
[   47.176574][  T848] loop4: detected capacity change from 0 to 1024
[   47.186711][   T43] device bridge_slave_1 left promiscuous mode
[   47.202487][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.210425][   T43] device bridge_slave_0 left promiscuous mode
[   47.224162][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.231567][  T848] ext4: Unknown parameter 'smackfsdef'
[   47.241201][   T43] device veth1_macvtap left promiscuous mode
[   47.247377][   T43] device veth0_vlan left promiscuous mode
[   47.388280][  T834] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.395467][  T834] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.443576][  T834] device bridge_slave_1 entered promiscuous mode
[   47.693059][  T314] usb 3-1: USB disconnect, device number 6
[   47.699731][  T860] loop5: detected capacity change from 0 to 256
[   47.709904][   T28] audit: type=1400 audit(1772419678.554:267): avc:  denied  { remount } for  pid=859 comm="syz.5.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   47.735703][   T28] audit: type=1400 audit(1772419678.582:268): avc:  denied  { wake_alarm } for  pid=859 comm="syz.5.130" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   47.760348][  T860] loop5: detected capacity change from 0 to 512
[   47.783739][   T28] audit: type=1400 audit(1772419678.582:269): avc:  denied  { read write } for  pid=859 comm="syz.5.130" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   47.806003][  T816] device veth0_vlan entered promiscuous mode
[   47.814187][   T28] audit: type=1400 audit(1772419678.582:270): avc:  denied  { open } for  pid=859 comm="syz.5.130" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   47.820830][  T860] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   47.847523][  T860] ext4 filesystem being mounted at /2/bus/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.859641][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.870429][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.879235][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.888526][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   47.888778][  T789] EXT4-fs (loop5): unmounting filesystem.
[   47.896541][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   47.910844][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   47.916846][  T789] ------------[ cut here ]------------
[   47.919552][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   47.923819][  T789] WARNING: CPU: 0 PID: 789 at fs/inode.c:335 drop_nlink+0xc5/0x110
[   47.931820][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   47.939352][  T789] Modules linked in:
[   47.949691][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   47.950691][  T789] CPU: 0 PID: 789 Comm: syz-executor Not tainted syzkaller #0
[   47.959341][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   47.966607][  T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   47.966621][  T789] RIP: 0010:drop_nlink+0xc5/0x110
[   47.966648][  T789] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 f3 af f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 7a ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   47.976078][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.985100][  T789] RSP: 0018:ffffc900011e7ab8 EFLAGS: 00010293
[   47.990415][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.010362][  T789] 
[   48.017949][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   48.023437][  T789] RAX: ffffffff81c5f245 RBX: ffff88811df84448 RCX: ffff888115c0bcc0
[   48.031374][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   48.033417][  T789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   48.042956][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.049781][  T789] RBP: ffffc900011e7ae0 R08: 0000000000000003 R09: 0000000000000004
[   48.057958][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.065919][  T789] R10: dffffc0000000000 R11: fffff5200023cf48 R12: dffffc0000000000
[   48.073397][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   48.081038][  T789] R13: 1ffff11023bf0892 R14: ffff88811df84490 R15: 0000000000000000
[   48.112075][  T789] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   48.121120][  T789] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   48.127831][  T789] CR2: 000055555f534948 CR3: 000000012f892000 CR4: 00000000003506b0
[   48.135869][  T789] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   48.143875][  T789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   48.152092][  T789] Call Trace:
[   48.155481][  T789]  <TASK>
[   48.158417][  T789]  shmem_rmdir+0x5b/0x90
[   48.162834][  T789]  vfs_rmdir+0x393/0x500
[   48.167168][  T789]  incfs_kill_sb+0x105/0x220
[   48.171865][  T789]  deactivate_locked_super+0xb5/0x120
[   48.177313][  T789]  deactivate_super+0xaf/0xe0
[   48.182106][  T789]  cleanup_mnt+0x474/0x500
[   48.186594][  T789]  ? __kasan_slab_free+0x11/0x20
[   48.191551][  T789]  __cleanup_mnt+0x19/0x20
[   48.195992][  T789]  task_work_run+0x1e1/0x250
[   48.200617][  T789]  ? __cfi_task_work_run+0x10/0x10
[   48.205932][  T789]  ? free_nsproxy+0x21f/0x270
[   48.210648][  T789]  do_exit+0xa35/0x2660
[   48.214833][  T789]  ? __cfi_do_exit+0x10/0x10
[   48.219508][  T789]  ? __kasan_check_write+0x14/0x20
[   48.224926][  T789]  ? _raw_spin_lock_irq+0x95/0xf0
[   48.230244][  T789]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   48.235992][  T789]  ? ksys_write+0x1e4/0x250
[   48.240664][  T789]  ? zap_other_threads+0x2c1/0x2f0
[   48.245895][  T789]  do_group_exit+0x210/0x2d0
[   48.250709][  T789]  __x64_sys_exit_group+0x3f/0x40
[   48.255846][  T789]  x64_sys_call+0x7b4/0x9a0
[   48.260522][  T789]  do_syscall_64+0x4c/0xa0
[   48.265038][  T789]  ? clear_bhb_loop+0x30/0x80
[   48.269724][  T789]  ? clear_bhb_loop+0x30/0x80
[   48.275007][  T789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   48.281048][  T789] RIP: 0033:0x7f115d99c799
[   48.285703][  T789] Code: Unable to access opcode bytes at 0x7f115d99c76f.
[   48.292772][  T789] RSP: 002b:00007ffd0b45fb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   48.301367][  T789] RAX: ffffffffffffffda RBX: 00007f115da31ff0 RCX: 00007f115d99c799
[   48.309645][  T789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   48.317784][  T789] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f115da31f90
[   48.325960][  T789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0b460e20
[   48.334465][  T789] R13: 00007f115da31f90 R14: 000055555f5114e8 R15: 00007ffd0b461ef0
[   48.342609][  T789]  </TASK>
[   48.345669][  T789] ---[ end trace 0000000000000000 ]---
[   48.352512][  T789] ------------[ cut here ]------------
[   48.358137][  T789] WARNING: CPU: 1 PID: 789 at fs/inode.c:335 drop_nlink+0xc5/0x110
[   48.366222][  T789] Modules linked in:
[   48.370289][  T789] CPU: 1 PID: 789 Comm: syz-executor Tainted: G        W          syzkaller #0
[   48.379630][  T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   48.389973][  T789] RIP: 0010:drop_nlink+0xc5/0x110
[   48.395502][  T789] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 f3 af f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 7a ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   48.415539][  T789] RSP: 0018:ffffc900011e7ab8 EFLAGS: 00010293
[   48.422184][  T789] RAX: ffffffff81c5f245 RBX: ffff88811df86de0 RCX: ffff888115c0bcc0
[   48.430371][  T789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   48.436972][  T834] device veth0_vlan entered promiscuous mode
[   48.438556][  T789] RBP: ffffc900011e7ae0 R08: 0000000000000003 R09: 0000000000000004
[   48.451546][  T834] device veth1_macvtap entered promiscuous mode
[   48.452731][  T789] R10: dffffc0000000000 R11: fffff5200023cf48 R12: dffffc0000000000
[   48.467176][  T789] R13: 1ffff11023bf0dc5 R14: ffff88811df86e28 R15: 0000000000000000
[   48.475393][  T789] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   48.484528][  T789] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   48.491249][  T789] CR2: 0000000000000000 CR3: 000000012f585000 CR4: 00000000003506a0
[   48.499871][  T789] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   48.508226][  T789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   48.516414][  T789] Call Trace:
[   48.520040][  T789]  <TASK>
[   48.523001][  T789]  shmem_rmdir+0x5b/0x90
[   48.527441][  T789]  vfs_rmdir+0x393/0x500
[   48.531741][  T789]  incfs_kill_sb+0x198/0x220
[   48.536357][  T789]  deactivate_locked_super+0xb5/0x120
[   48.541855][  T789]  deactivate_super+0xaf/0xe0
[   48.546570][  T789]  cleanup_mnt+0x474/0x500
[   48.551570][  T789]  ? __kasan_slab_free+0x11/0x20
[   48.556723][  T789]  __cleanup_mnt+0x19/0x20
[   48.561216][  T789]  task_work_run+0x1e1/0x250
[   48.565841][  T789]  ? __cfi_task_work_run+0x10/0x10
[   48.571100][  T789]  ? free_nsproxy+0x21f/0x270
[   48.575795][  T789]  do_exit+0xa35/0x2660
[   48.580054][  T789]  ? __cfi_do_exit+0x10/0x10
[   48.584677][  T789]  ? __kasan_check_write+0x14/0x20
[   48.589928][  T789]  ? _raw_spin_lock_irq+0x95/0xf0
[   48.595002][  T789]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   48.600830][  T789]  ? ksys_write+0x1e4/0x250
[   48.605384][  T789]  ? zap_other_threads+0x2c1/0x2f0
[   48.610704][  T789]  do_group_exit+0x210/0x2d0
[   48.615433][  T789]  __x64_sys_exit_group+0x3f/0x40
[   48.620584][  T789]  x64_sys_call+0x7b4/0x9a0
[   48.625124][  T789]  do_syscall_64+0x4c/0xa0
[   48.629555][  T789]  ? clear_bhb_loop+0x30/0x80
[   48.634348][  T789]  ? clear_bhb_loop+0x30/0x80
[   48.639071][  T789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   48.645525][  T789] RIP: 0033:0x7f115d99c799
[   48.650116][  T789] Code: Unable to access opcode bytes at 0x7f115d99c76f.
[   48.657330][  T789] RSP: 002b:00007ffd0b45fb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   48.665927][  T789] RAX: ffffffffffffffda RBX: 00007f115da31ff0 RCX: 00007f115d99c799
[   48.674055][  T789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   48.682432][  T789] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f115da31f90
[   48.690594][  T789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0b460e20
[   48.698933][  T789] R13: 00007f115da31f90 R14: 000055555f5114e8 R15: 00007ffd0b461ef0
[   48.707380][  T789]  </TASK>
[   48.710442][  T789] ---[ end trace 0000000000000000 ]---
[   48.783136][  T816] device veth1_macvtap entered promiscuous mode
[   48.860651][  T789] ==================================================================
[   48.868964][  T789] BUG: KASAN: use-after-free in fast_dput+0x1e9/0x290
[   48.876006][  T789] Read of size 4 at addr ffff888138e46550 by task syz-executor/789
[   48.883992][  T789] 
[   48.886780][  T789] CPU: 1 PID: 789 Comm: syz-executor Tainted: G        W          syzkaller #0
[   48.896085][  T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   48.906252][  T789] Call Trace:
[   48.909542][  T789]  <TASK>
[   48.912656][  T789]  __dump_stack+0x21/0x24
[   48.917007][  T789]  dump_stack_lvl+0x110/0x170
[   48.921699][  T789]  ? __cfi_dump_stack_lvl+0x8/0x8
[   48.926828][  T789]  ? fast_dput+0x1e9/0x290
[   48.931268][  T789]  print_address_description+0x71/0x200
[   48.936939][  T789]  print_report+0x4a/0x60
[   48.941542][  T789]  kasan_report+0x122/0x150
[   48.946239][  T789]  ? fast_dput+0x1e9/0x290
[   48.950672][  T789]  __asan_report_load4_noabort+0x14/0x20
[   48.956349][  T789]  fast_dput+0x1e9/0x290
[   48.960777][  T789]  dput+0x21/0x80
[   48.964420][  T789]  incfs_free_mount_info+0x60/0x200
[   48.969814][  T789]  incfs_kill_sb+0x1b8/0x220
[   48.974508][  T789]  deactivate_locked_super+0xb5/0x120
[   48.980069][  T789]  deactivate_super+0xaf/0xe0
[   48.985052][  T789]  cleanup_mnt+0x474/0x500
[   48.989572][  T789]  __cleanup_mnt+0x19/0x20
[   48.994080][  T789]  task_work_run+0x1e1/0x250
[   48.998937][  T789]  ? __cfi_task_work_run+0x10/0x10
[   49.004084][  T789]  ? free_nsproxy+0x21f/0x270
[   49.009076][  T789]  do_exit+0xa35/0x2660
[   49.013266][  T789]  ? __cfi_do_exit+0x10/0x10
[   49.017934][  T789]  ? __kasan_check_write+0x14/0x20
[   49.023144][  T789]  ? _raw_spin_lock_irq+0x95/0xf0
[   49.028193][  T789]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   49.033761][  T789]  ? ksys_write+0x1e4/0x250
[   49.038300][  T789]  ? zap_other_threads+0x2c1/0x2f0
[   49.043529][  T789]  do_group_exit+0x210/0x2d0
[   49.048168][  T789]  __x64_sys_exit_group+0x3f/0x40
[   49.053411][  T789]  x64_sys_call+0x7b4/0x9a0
[   49.057959][  T789]  do_syscall_64+0x4c/0xa0
[   49.062600][  T789]  ? clear_bhb_loop+0x30/0x80
[   49.067374][  T789]  ? clear_bhb_loop+0x30/0x80
[   49.072069][  T789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   49.078126][  T789] RIP: 0033:0x7f115d99c799
[   49.082685][  T789] Code: Unable to access opcode bytes at 0x7f115d99c76f.
[   49.090249][  T789] RSP: 002b:00007ffd0b45fb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   49.099027][  T789] RAX: ffffffffffffffda RBX: 00007f115da31ff0 RCX: 00007f115d99c799
[   49.107626][  T789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   49.115954][  T789] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f115da31f90
[   49.124118][  T789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0b460e20
[   49.132615][  T789] R13: 00007f115da31f90 R14: 000055555f5114e8 R15: 00007ffd0b461ef0
[   49.140605][  T789]  </TASK>
[   49.143802][  T789] 
[   49.146138][  T789] Allocated by task 862:
[   49.150565][  T789]  kasan_set_track+0x4b/0x70
[   49.155282][  T789]  kasan_save_alloc_info+0x25/0x30
[   49.160674][  T789]  __kasan_slab_alloc+0x72/0x80
[   49.165886][  T789]  slab_post_alloc_hook+0x4f/0x2d0
[   49.171196][  T789]  kmem_cache_alloc_lru+0x104/0x280
[   49.176926][  T789]  __d_alloc+0x34/0x6c0
[   49.181179][  T789]  d_alloc_parallel+0xe2/0x12e0
[   49.186049][  T789]  __lookup_slow+0x14f/0x410
[   49.190645][  T789]  lookup_one_len+0x19d/0x2e0
[   49.195327][  T789]  incfs_lookup_dentry+0x60/0xb0
[   49.200288][  T789]  open_or_create_special_dir+0x4f/0x1d0
[   49.206018][  T789]  incfs_mount_fs+0x42f/0x890
[   49.210705][  T789]  legacy_get_tree+0xfe/0x1a0
[   49.215493][  T789]  vfs_get_tree+0x9a/0x270
[   49.220010][  T789]  do_new_mount+0x25a/0xa20
[   49.224648][  T789]  path_mount+0x659/0xfc0
[   49.229255][  T789]  __se_sys_mount+0x320/0x390
[   49.234129][  T789]  __x64_sys_mount+0xbf/0xd0
[   49.238825][  T789]  x64_sys_call+0x65d/0x9a0
[   49.243344][  T789]  do_syscall_64+0x4c/0xa0
[   49.247799][  T789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   49.253796][  T789] 
[   49.256120][  T789] Freed by task 878:
[   49.260104][  T789]  kasan_set_track+0x4b/0x70
[   49.264699][  T789]  kasan_save_free_info+0x31/0x50
[   49.269735][  T789]  ____kasan_slab_free+0x132/0x180
[   49.274869][  T789]  __kasan_slab_free+0x11/0x20
[   49.279676][  T789]  slab_free_freelist_hook+0xc2/0x190
[   49.285158][  T789]  kmem_cache_free+0x12d/0x300
[   49.290112][  T789]  __d_free+0x23/0x30
[   49.294107][  T789]  rcu_do_batch+0x52a/0xbc0
[   49.298614][  T789]  rcu_core+0x5c3/0xe80
[   49.302778][  T789]  rcu_core_si+0x9/0x10
[   49.307042][  T789]  handle_softirqs+0x1d7/0x600
[   49.311850][  T789]  __irq_exit_rcu+0x52/0xf0
[   49.316391][  T789]  irq_exit_rcu+0x9/0x10
[   49.320758][  T789]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   49.326506][  T789]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   49.332595][  T789] 
[   49.335024][  T789] Last potentially related work creation:
[   49.340908][  T789]  kasan_save_stack+0x3a/0x60
[   49.345779][  T789]  __kasan_record_aux_stack+0xb6/0xc0
[   49.351470][  T789]  kasan_record_aux_stack_noalloc+0xb/0x10
[   49.357479][  T789]  call_rcu+0xcf/0xf90
[   49.361905][  T789]  dentry_free+0xbd/0x150
[   49.366290][  T789]  __dentry_kill+0x529/0x670
[   49.370901][  T789]  dentry_kill+0xc0/0x2a0
[   49.375245][  T789]  dput+0x42/0x80
[   49.378891][  T789]  incfs_free_mount_info+0x60/0x200
[   49.384115][  T789]  incfs_kill_sb+0x1b8/0x220
[   49.388920][  T789]  deactivate_locked_super+0xb5/0x120
[   49.394423][  T789]  deactivate_super+0xaf/0xe0
[   49.399199][  T789]  cleanup_mnt+0x474/0x500
[   49.403707][  T789]  __cleanup_mnt+0x19/0x20
[   49.408307][  T789]  task_work_run+0x1e1/0x250
[   49.412913][  T789]  do_exit+0xa35/0x2660
[   49.417175][  T789]  do_group_exit+0x210/0x2d0
[   49.421782][  T789]  __x64_sys_exit_group+0x3f/0x40
[   49.427172][  T789]  x64_sys_call+0x7b4/0x9a0
[   49.431691][  T789]  do_syscall_64+0x4c/0xa0
[   49.436142][  T789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   49.442149][  T789] 
[   49.444478][  T789] Second to last potentially related work creation:
[   49.451172][  T789]  kasan_save_stack+0x3a/0x60
[   49.456031][  T789]  __kasan_record_aux_stack+0xb6/0xc0
[   49.461422][  T789]  kasan_record_aux_stack_noalloc+0xb/0x10
[   49.467418][  T789]  call_rcu+0xcf/0xf90
[   49.471492][  T789]  dentry_free+0xbd/0x150
[   49.475831][  T789]  __dentry_kill+0x529/0x670
[   49.480446][  T789]  dentry_kill+0xc0/0x2a0
[   49.484786][  T789]  dput+0x42/0x80
[   49.488437][  T789]  step_into+0xa35/0xf40
[   49.492778][  T789]  walk_component+0x24c/0x420
[   49.497558][  T789]  path_lookupat+0x180/0x490
[   49.502171][  T789]  filename_lookup+0x224/0x560
[   49.507044][  T789]  vfs_statx+0x109/0x670
[   49.511311][  T789]  __se_sys_newfstatat+0x142/0x440
[   49.516535][  T789]  __x64_sys_newfstatat+0x9b/0xb0
[   49.521589][  T789]  x64_sys_call+0x77c/0x9a0
[   49.526127][  T789]  do_syscall_64+0x4c/0xa0
[   49.530693][  T789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   49.536608][  T789] 
[   49.538939][  T789] The buggy address belongs to the object at ffff888138e46550
[   49.538939][  T789]  which belongs to the cache dentry of size 208
[   49.552963][  T789] The buggy address is located 0 bytes inside of
[   49.552963][  T789]  208-byte region [ffff888138e46550, ffff888138e46620)
[   49.566601][  T789] 
[   49.569033][  T789] The buggy address belongs to the physical page:
[   49.575984][  T789] page:ffffea0004e39180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x138e46
[   49.586421][  T789] flags: 0x4000000000000200(slab|zone=1)
[   49.592071][  T789] raw: 4000000000000200 0000000000000000 dead000000000001 ffff8881001ecd80
[   49.600752][  T789] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000
[   49.609513][  T789] page dumped because: kasan: bad access detected
[   49.616096][  T789] page_owner tracks the page as allocated
[   49.621894][  T789] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 284, tgid 284 (syz-executor), ts 36426406823, free_ts 36386808231
[   49.641789][  T789]  post_alloc_hook+0x1f5/0x210
[   49.646602][  T789]  prep_new_page+0x1c/0x110
[   49.651314][  T789]  get_page_from_freelist+0x2d12/0x2d80
[   49.657060][  T789]  __alloc_pages+0x1d9/0x480
[   49.661769][  T789]  alloc_slab_page+0x6e/0xf0
[   49.666470][  T789]  new_slab+0x98/0x3d0
[   49.670648][  T789]  ___slab_alloc+0x6bd/0xb20
[   49.675258][  T789]  __slab_alloc+0x5e/0xa0
[   49.679809][  T789]  kmem_cache_alloc_lru+0x144/0x280
[   49.685461][  T789]  __d_alloc+0x34/0x6c0
[   49.689806][  T789]  d_alloc_cursor+0x41/0xd0
[   49.694407][  T789]  dcache_dir_open+0x3b/0x80
[   49.699087][  T789]  do_dentry_open+0x88e/0x1260
[   49.703863][  T789]  vfs_open+0x73/0x80
[   49.707882][  T789]  path_openat+0x2700/0x2f80
[   49.712491][  T789]  do_filp_open+0x1f1/0x430
[   49.717091][  T789] page last free stack trace:
[   49.721769][  T789]  free_unref_page_prepare+0x742/0x750
[   49.727421][  T789]  free_unref_page+0x95/0x540
[   49.729011][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.732224][  T789]  __free_pages+0x67/0x100
[   49.740594][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.744477][  T789]  __free_slab+0xca/0x1a0
[   49.752728][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.756793][  T789]  __unfreeze_partials+0x160/0x190
[   49.765643][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.770349][  T789]  put_cpu_partial+0xa9/0x100
[   49.770382][  T789]  __slab_free+0x1c4/0x280
[   49.787615][  T789]  ___cache_free+0xbf/0xd0
[   49.792221][  T789]  qlist_free_all+0xc6/0x140
[   49.796809][  T789]  kasan_quarantine_reduce+0x14a/0x170
[   49.802709][  T789]  __kasan_slab_alloc+0x24/0x80
[   49.807655][  T789]  slab_post_alloc_hook+0x4f/0x2d0
[   49.812898][  T789]  kmem_cache_alloc+0x16e/0x330
[   49.817838][  T789]  getname_flags+0xb9/0x500
[   49.822338][  T789]  __x64_sys_unlink+0x3c/0x50
[   49.827035][  T789]  x64_sys_call+0x958/0x9a0
[   49.831712][  T789] 
[   49.834059][  T789] Memory state around the buggy address:
[   49.839689][  T789]  ffff888138e46400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   49.847839][  T789]  ffff888138e46480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   49.856509][  T789] >ffff888138e46500: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb
[   49.864667][  T789]                                                  ^
[   49.871510][  T789]  ffff888138e46580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   49.879585][  T789]  ffff888138e46600: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb
[   49.887820][  T789] ==================================================================
[   49.902298][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.909726][   T28] audit: type=1400 audit(1772419680.613:271): avc:  denied  { read } for  pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   49.932560][  T789] Disabling lock debugging due to kernel taint
[   49.935352][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.946641][   T28] audit: type=1400 audit(1772419680.613:272): avc:  denied  { search } for  pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.951763][  T789] ------------[ cut here ]------------
[   49.969180][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.974622][  T789] WARNING: CPU: 0 PID: 789 at fs/dcache.c:794 fast_dput+0x210/0x290
[   49.983348][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   49.991251][  T789] Modules linked in:
[   49.991266][  T789] CPU: 0 PID: 789 Comm: syz-executor Tainted: G    B   W          syzkaller #0
[   49.999274][   T28] audit: type=1400 audit(1772419680.613:273): avc:  denied  { write } for  pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.003069][  T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   50.003084][  T789] RIP: 0010:fast_dput+0x210/0x290
[   50.012991][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.034374][  T789] Code: a0 f1 ff e9 46 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 99 fe ff ff 48 89 df e8 7a a0 f1 ff e9 8c fe ff ff e8 20 6e ac ff <0f> 0b e9 0b ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e4 fe ff
[   50.034403][  T789] RSP: 0018:ffffc900011e7ad0 EFLAGS: 00010293
[   50.034423][  T789] RAX: ffffffff81c4fee0 RBX: ffff888138e46550 RCX: ffff888115c0bcc0
[   50.045129][   T28] audit: type=1400 audit(1772419680.613:274): avc:  denied  { add_name } for  pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.049800][  T789] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001
[   50.049815][  T789] RBP: ffffc900011e7b00 R08: 0000000000000003 R09: 0000000000000004
[   50.057428][   T28] audit: type=1400 audit(1772419680.613:275): avc:  denied  { create } for  pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   50.077363][  T789] R10: dffffc0000000000 R11: fffff5200023cf4c R12: 00000000ffffff80
[   50.084017][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.091629][  T789] R13: dffffc0000000000 R14: ffff888138e465a8 R15: 1ffff110271c8cb5
[   50.091647][  T789] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   50.113937][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.120786][  T789] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.129364][  T762] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.149703][  T789] CR2: 0000001b2e923ffc CR3: 00000001104ad000 CR4: 00000000003526b0
[   50.149725][  T789] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.157793][  T762] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.158474][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.166170][  T789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.166187][  T789] Call Trace:
[   50.166193][  T789]  <TASK>
[   50.166200][  T789]  dput+0x21/0x80
[   50.174853][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.183309][  T789]  incfs_free_mount_info+0x60/0x200
[   50.192025][  T762] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.198203][  T789]  incfs_kill_sb+0x1b8/0x220
[   50.205237][  T762] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.213319][  T789]  deactivate_locked_super+0xb5/0x120
[   50.222294][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   50.228681][  T789]  deactivate_super+0xaf/0xe0
[   50.237453][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.245112][  T789]  cleanup_mnt+0x474/0x500
[   50.249233][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.251545][  T789]  __cleanup_mnt+0x19/0x20
[   50.255647][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.263593][  T789]  task_work_run+0x1e1/0x250
[   50.263622][  T789]  ? __cfi_task_work_run+0x10/0x10
[   50.269509][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   50.275923][  T789]  ? free_nsproxy+0x21f/0x270
[   50.281299][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.287824][  T789]  do_exit+0xa35/0x2660
[   50.293809][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   50.301245][  T789]  ? __cfi_do_exit+0x10/0x10
[   50.307462][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   50.315208][  T789]  ? __kasan_check_write+0x14/0x20
[   50.315234][  T789]  ? _raw_spin_lock_irq+0x95/0xf0
[   50.315259][  T789]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   50.320513][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.328507][  T789]  ? ksys_write+0x1e4/0x250
[   50.333324][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.340955][  T789]  ? zap_other_threads+0x2c1/0x2f0
[   50.346468][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.351139][  T789]  do_group_exit+0x210/0x2d0
[   50.363635][  T762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.364134][  T789]  __x64_sys_exit_group+0x3f/0x40
[   50.465446][  T789]  x64_sys_call+0x7b4/0x9a0
[   50.470225][  T789]  do_syscall_64+0x4c/0xa0
[   50.474765][  T789]  ? clear_bhb_loop+0x30/0x80
[   50.479719][  T789]  ? clear_bhb_loop+0x30/0x80
[   50.484561][  T789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   50.490752][  T789] RIP: 0033:0x7f115d99c799
[   50.495299][  T789] Code: Unable to access opcode bytes at 0x7f115d99c76f.
[   50.502416][  T789] RSP: 002b:00007ffd0b45fb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   50.511103][  T789] RAX: ffffffffffffffda RBX: 00007f115da31ff0 RCX: 00007f115d99c799
[   50.519387][  T789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   50.527492][  T789] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f115da31f90
[   50.535507][  T789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0b460e20
[   50.543533][  T789] R13: 00007f115da31f90 R14: 000055555f5114e8 R15: 00007ffd0b461ef0
[   50.551631][  T789]  </TASK>
[   50.554650][  T789] ---[ end trace 0000000000000000 ]---
[   50.571279][  T789] list_del corruption. prev->next should be ffff888138e46a20, but was ffff8881115bde60. (prev=ffff888138e3f6f0)
[   50.583792][  T789] ------------[ cut here ]------------
[   50.589797][  T789] kernel BUG at lib/list_debug.c:61!
[   50.595481][  T789] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   50.601920][  T789] CPU: 0 PID: 789 Comm: syz-executor Tainted: G    B   W          syzkaller #0
[   50.611021][  T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   50.621257][  T789] RIP: 0010:__list_del_entry_valid+0x10f/0x130
[   50.627423][  T789] Code: e8 7e 6b 88 02 0f 0b 48 c7 c7 e0 7b ca 85 48 89 de e8 6d 6b 88 02 0f 0b 48 c7 c7 40 7c ca 85 48 89 de 4c 89 f9 e8 59 6b 88 02 <0f> 0b 48 c7 c7 c0 7c ca 85 48 89 de 4c 89 f1 e8 45 6b 88 02 0f 0b
[   50.647287][  T789] RSP: 0018:ffffc900011e7a48 EFLAGS: 00010246
[   50.653352][  T789] RAX: 000000000000006d RBX: ffff888138e46a20 RCX: 4f6ebbd765711c00
[   50.661602][  T789] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[   50.669749][  T789] RBP: ffffc900011e7a68 R08: ffffc900011e7747 R09: 1ffff9200023cee8
[   50.677932][  T789] R10: dffffc0000000000 R11: fffff5200023cee9 R12: dffffc0000000000
[   50.686451][  T789] R13: dffffc0000000000 R14: ffff8881115bde60 R15: ffff888138e3f6f0
[   50.694615][  T789] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   50.703723][  T789] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.710575][  T789] CR2: 0000001b2e923ffc CR3: 00000001104ad000 CR4: 00000000003526b0
[   50.718738][  T789] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.726902][  T789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.735229][  T789] Call Trace:
[   50.738792][  T789]  <TASK>
[   50.741822][  T789]  __dentry_kill+0x25d/0x670
[   50.746844][  T789]  dentry_kill+0xc0/0x2a0
[   50.751469][  T789]  dput+0x42/0x80
[   50.755107][  T789]  incfs_free_mount_info+0x80/0x200
[   50.760402][  T789]  incfs_kill_sb+0x1b8/0x220
[   50.765073][  T789]  deactivate_locked_super+0xb5/0x120
[   50.770449][  T789]  deactivate_super+0xaf/0xe0
[   50.775121][  T789]  cleanup_mnt+0x474/0x500
[   50.779540][  T789]  __cleanup_mnt+0x19/0x20
[   50.784133][  T789]  task_work_run+0x1e1/0x250
[   50.789171][  T789]  ? __cfi_task_work_run+0x10/0x10
[   50.795034][  T789]  ? free_nsproxy+0x21f/0x270
[   50.799738][  T789]  do_exit+0xa35/0x2660
[   50.803993][  T789]  ? __cfi_do_exit+0x10/0x10
[   50.808764][  T789]  ? __kasan_check_write+0x14/0x20
[   50.813868][  T789]  ? _raw_spin_lock_irq+0x95/0xf0
[   50.819647][  T789]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   50.825396][  T789]  ? ksys_write+0x1e4/0x250
[   50.830130][  T789]  ? zap_other_threads+0x2c1/0x2f0
[   50.835327][  T789]  do_group_exit+0x210/0x2d0
[   50.840063][  T789]  __x64_sys_exit_group+0x3f/0x40
[   50.846226][  T789]  x64_sys_call+0x7b4/0x9a0
[   50.850860][  T789]  do_syscall_64+0x4c/0xa0
[   50.855561][  T789]  ? clear_bhb_loop+0x30/0x80
[   50.860428][  T789]  ? clear_bhb_loop+0x30/0x80
[   50.865234][  T789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   50.871257][  T789] RIP: 0033:0x7f115d99c799
[   50.875959][  T789] Code: Unable to access opcode bytes at 0x7f115d99c76f.
[   50.883037][  T789] RSP: 002b:00007ffd0b45fb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   50.891598][  T789] RAX: ffffffffffffffda RBX: 00007f115da31ff0 RCX: 00007f115d99c799
[   50.899860][  T789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   50.907872][  T789] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f115da31f90
[   50.915877][  T789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0b460e20
[   50.923865][  T789] R13: 00007f115da31f90 R14: 000055555f5114e8 R15: 00007ffd0b461ef0
[   50.931939][  T789]  </TASK>
[   50.935240][  T789] Modules linked in:
[   50.939725][  T789] ---[ end trace 0000000000000000 ]---
[   50.945480][  T789] RIP: 0010:__list_del_entry_valid+0x10f/0x130
[   50.951736][  T789] Code: e8 7e 6b 88 02 0f 0b 48 c7 c7 e0 7b ca 85 48 89 de e8 6d 6b 88 02 0f 0b 48 c7 c7 40 7c ca 85 48 89 de 4c 89 f9 e8 59 6b 88 02 <0f> 0b 48 c7 c7 c0 7c ca 85 48 89 de 4c 89 f1 e8 45 6b 88 02 0f 0b
[   50.973692][  T789] RSP: 0018:ffffc900011e7a48 EFLAGS: 00010246
[   50.980625][  T789] RAX: 000000000000006d RBX: ffff888138e46a20 RCX: 4f6ebbd765711c00
[   50.989134][  T789] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[   50.997414][  T789] RBP: ffffc900011e7a68 R08: ffffc900011e7747 R09: 1ffff9200023cee8
[   51.006290][  T789] R10: dffffc0000000000 R11: fffff5200023cee9 R12: dffffc0000000000
[   51.014827][  T789] R13: dffffc0000000000 R14: ffff8881115bde60 R15: ffff888138e3f6f0
[   51.023191][  T789] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   51.032435][  T789] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   51.039309][  T789] CR2: 0000001b2e923ffc CR3: 00000001104ad000 CR4: 00000000003526b0
[   51.047708][  T789] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   51.055825][  T789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   51.064127][  T789] Kernel panic - not syncing: Fatal exception
[   51.070879][  T789] Kernel Offset: disabled
[   51.075311][  T789] Rebooting in 86400 seconds..