last executing test programs: 942.089095ms ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008402, &(0x7f00000012c0)={[{@bsdgroups}, {@data_err_abort}, {@noblock_validity}, {@i_version}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b2}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@noacl}, {@nobh}]}, 0x1, 0x55e, &(0x7f0000001fc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x9128c0, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x11, 0x0, 0x8000000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000540)=@deltclass={0x708, 0x29, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0x10, 0x5}, {0xf, 0xfff2}}, [@c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x1, 0x3, 0x7, 0x4, 0x5}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x9, 0x0, 0x11, 0xe, 0x10, 0x5, 0x1, 0xffffffff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x5, 0x4, 0xbe, 0xe0, 0x10}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x39, 0x1, 0xb, 0x7, 0x20000, 0x1, 0x2, 0x101}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x0, 0x2, 0x5, 0x2, 0x9}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}, @c_atm={{0x8}, {0x64, 0x2, [@TCA_ATM_HDR={0x41, 0x3, "0857462d4e2ce22d7c5a41a1872f94e928b2ec617912d11ec1c84b1221b3f0d0bfe9855b9d95a733dd462c7f4dc80129c9beb08749b4d8da3e1908d7d4"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_HDR={0x5, 0x3, 'x'}, @TCA_ATM_HDR={0xc, 0x3, "524647bed520604f"}]}}, @c_cbq={{0x8}, {0x458, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x37, 0x2, 0x19, 0xc, 0x8001, 0x7, 0x8, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x929, 0x10, 0x5, 0x8068c96d, 0x4, 0x7f, 0xf0000000, 0x7, 0x9, 0xfffffffe, 0x57, 0x6, 0x0, 0xf, 0x7fffffff, 0x200, 0x9, 0x3, 0xa8, 0x3, 0x4, 0x797, 0x9, 0x3, 0x2777, 0x2, 0x75, 0x8e2, 0x1, 0x2, 0x1, 0x99c, 0x10001, 0x4, 0x9, 0xae4, 0x7, 0x0, 0x7, 0x0, 0x7, 0xae85, 0x5, 0x1ff, 0x5, 0x8, 0xc7f9, 0x6, 0x6, 0x401, 0x74, 0x3, 0x6, 0x7f, 0x1, 0xb2ac, 0x7fff, 0xfffffff9, 0x2, 0x2, 0xb42, 0x2, 0x10001, 0x6, 0x5, 0x7fff, 0x1, 0x9, 0x9, 0xe75, 0x6, 0xfffffffa, 0x16a, 0x3, 0x6, 0x3, 0xfffffffd, 0x8, 0x1, 0x6, 0x9, 0x1, 0x101, 0x7, 0xe, 0x101, 0x7, 0xdec1, 0x1, 0x3, 0x0, 0x800, 0x4, 0x3, 0xa, 0xcbd, 0x4, 0x3, 0x9, 0x3, 0x81a0, 0x4, 0x2, 0x0, 0x8, 0x9, 0x5, 0x81, 0x2, 0x4, 0x101, 0x18, 0x0, 0x4, 0xffffffff, 0x606a, 0x5, 0xf9c, 0x5, 0x0, 0x80, 0x7, 0x8, 0x7ff, 0x7, 0xd, 0x1000, 0x101, 0x7fffffff, 0x80, 0x5, 0x6, 0x6, 0x9, 0x24625b4a, 0x3, 0x0, 0xfffffff9, 0x2, 0xf, 0x2, 0x3, 0xca45, 0xffffffff, 0x2, 0x8, 0x8, 0xcf, 0x9, 0x6, 0x9, 0x80000000, 0x2, 0x7, 0x6, 0x200, 0xff, 0x46, 0xffff, 0x521, 0x0, 0xffffffff, 0x8, 0xffff, 0x9, 0x1, 0x6, 0x5, 0x5, 0xffffffff, 0x7, 0x10000, 0x1, 0xffff896d, 0x7, 0x9, 0x0, 0xfff, 0x0, 0x6, 0x1, 0x8, 0xffffff7e, 0xf, 0x3, 0x3, 0xfff, 0x4, 0x6, 0x7, 0xc0d, 0x4, 0x4, 0xfffff29f, 0x80, 0x5, 0x0, 0xfffffeaf, 0xfffffffc, 0x8001, 0x9, 0x4, 0x3, 0x800, 0x4488a601, 0x6, 0x7, 0xc, 0x5, 0x5, 0x4, 0x0, 0x1, 0x4, 0x80000000, 0x0, 0x6, 0x8001, 0x3, 0x1, 0x8d65, 0x5, 0x7fff, 0x401, 0x20000000, 0x9, 0x5, 0x5e91949a, 0x7, 0x40, 0x7fff, 0x1, 0x4, 0x1, 0x9, 0xa31f, 0x8404, 0x2, 0x5, 0x4, 0xfffffff7, 0x5, 0xfffffffa, 0xfff, 0x8, 0xffff8001, 0x6, 0x101, 0xfffffffe, 0x2939, 0x3, 0x9, 0xc7f, 0x4, 0x2]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x3, 0x5, 0x3633, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x24, 0x0, 0x1f, 0x0, 0x2, 0x8, 0x80, 0x8000}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0xfff7}, 0x400, 0xfffffffe}}]}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0xd}}, @TCA_ATM_HDR={0x44, 0x3, "77f053ad3fb50bbf2d5d83d13ca668be7acb72be68ca9734f5c06807ce60453984e479deb5c489a00d88fc20675b20580c8ec41837fa364ec51e0849fe840ac4"}]}}, @c_atm={{0x8}, {0x60, 0x2, [@TCA_ATM_HDR={0xa, 0x3, "1ea6eb3c6912"}, @TCA_ATM_HDR={0x37, 0x3, "f23ba6bdde1f09c51141d8c0f5649713ac0164347461c5f1cc8584a00264b3c35552716d9aa39766806b7953a6e938589282e4"}, @TCA_ATM_HDR={0x7, 0x3, "a4708f"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xf}}, @TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_cbq={{0x8}, {0xb4, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0xff, 0x2, 0x4, 0x9401}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x2, 0x8001, 0x7ff, 0x5}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1b, 0x3, 0x11, 0x7, 0x80, 0x1000, 0x80000001, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0xffff}, 0xe0}}, @TCA_CBQ_RATE={0x10, 0x5, {0x50, 0x0, 0x5, 0x5359, 0x5, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x101, 0x2, 0xff, 0xfffffff6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x10, 0x6, 0x1, 0xff, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x40, 0x0, 0x10, 0x9, 0x4, 0x6, 0x6, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x6, 0x8, 0x2, 0x81, 0x10000}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x10, 0x8d, 0x19, 0x8001}}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x24040000}, 0x40084) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 860.761921ms ago: executing program 1 (id=2): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x403, 0x3, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8044) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101142, 0x120) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) 703.684612ms ago: executing program 2 (id=6): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r0, &(0x7f0000000040)="bb7d3417cb229e9f3d692b4344f192fc", 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x410342, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) r3 = syz_open_pts(r1, 0x600d01) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x1, 0x9, 0x2, 0xff, 0xe, "583cd32f046d299b109aa04fcec9bbbd51fe51"}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000140)='\x00', 0x84200, &(0x7f0000000180)={@align=0x8, {0x8, 0x10, 0x72c, 0x4}}, 0x5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xb00}) capset(&(0x7f0000000280)={0x20071026, r2}, &(0x7f00000002c0)={0x2, 0x7, 0x7, 0x0, 0x8001, 0xfcc}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000300)=r2) ioctl$TIOCNXCL(r5, 0x540d) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000340)='macvlan1\x00', 0x10) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000380)={0x7, 'xfrm0\x00', {0x9}}) r6 = openat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x400, 0x1, 0x30}, 0x18) write$khugepaged_scan(r6, &(0x7f0000000440), 0x8) r7 = syz_open_procfs(r2, &(0x7f0000000480)='net/arp\x00') renameat2(r5, &(0x7f00000004c0)='./file0\x00', r5, &(0x7f0000000500)='./file0\x00', 0x1) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000540)) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000580)={0x2, {0x2, 0x4, 0x3, 0xb, 0x8}}) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000005c0)={0x9, 0xfffffffffffffffe, 0x5, 0x0, 0x0, [{{r0}, 0xf0}, {{r3}, 0x2}, {{r5}, 0x3}, {{r0}, 0x3}, {{r1}, 0x9}]}) fsetxattr$security_ima(r1, &(0x7f0000000680), &(0x7f00000006c0)=@v2={0x3, 0x1, 0xe, 0x4, 0x6a, "dd5428566a1e76d2f565f29b12b2651d825b557d3c9f8409d71277e85fa26a70edca63bccd23199ffead57023cfd9c36f95c5254aa6dd58da0fa8f72edcad5f58b1d1c4b8230cce9f525cf65b42559ea59fdb7a9f4ac35ccd82b8eb15b8bd34660bb2d3656307dbe23d7"}, 0x73, 0x2) modify_ldt$read(0x0, &(0x7f0000000740)=""/23, 0x17) recvmmsg(r6, &(0x7f0000003580)=[{{&(0x7f0000000780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/24, 0x18}, {&(0x7f0000000840)=""/6, 0x6}], 0x2}, 0xd869}, {{&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/174, 0xae}, {&(0x7f0000000a00)=""/80, 0x50}], 0x2, &(0x7f0000000ac0)=""/220, 0xdc}, 0x40}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000bc0)=""/121, 0x79}, {&(0x7f0000000c40)=""/172, 0xac}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/242, 0xf2}, {&(0x7f0000001e00)=""/242, 0xf2}], 0x5, &(0x7f0000001f80)=""/224, 0xe0}, 0x6}, {{&(0x7f0000002080)=@pppol2tpv3, 0x80, &(0x7f0000002500)=[{&(0x7f0000002100)=""/174, 0xae}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/181, 0xb5}, {&(0x7f0000002300)=""/249, 0xf9}, {&(0x7f0000002400)=""/220, 0xdc}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x7}], 0x4, 0x10022, &(0x7f0000003680)={0x0, 0x989680}) modify_ldt$read(0x0, &(0x7f00000036c0)=""/70, 0x46) syz_genetlink_get_family_id$nl80211(&(0x7f0000003740), r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003780), 0x100, 0x0) ioctl$PIO_UNISCRNMAP(r7, 0x4b6a, &(0x7f00000037c0)="4080e829207b3a82ab7a6c4b") ioctl$KVM_ASSIGN_SET_MSIX_NR(r7, 0x4008ae73, &(0x7f0000003800)={0xfffffffe, 0x9}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x1000)=nil, 0x0, 0x2000000, 0x40010, r6, 0x0) 622.213307ms ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500007800000000000190780a010102ac1414aa0d6ab92801000000470000000000000000110b7fec420000000000000000440c0001ac1414bb4e210000443cd501e000000100000000ffffffff00000000ac1414000000000200000000000000000000000000000000ac1414bb00000000ac1414bb00000000"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x700, 0x7, 0x8, 0x7, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x68, 0x0, 0x40, 0x4, 0x0, @loopback, @multicast1, {[@end, @noop]}}}}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000001c0)=""/133, 0xb5}], 0x17) sendto$inet_nvme_icreq_pdu(r3, &(0x7f0000000100)={{0x0, 0xd, 0x80, 0xe}, 0x0, 0x0, 0x1, 0x3}, 0x80, 0x0, 0x0, 0x0) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000440)='bpf_lsm_inode_getattr\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x94707000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x102}], 0x1}, 0x0) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0xfffffed3) setresgid(0x0, 0xee01, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000fb0e0000185600000d0000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ff040000f0ffffffb702000008000000182300"/108, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x6a, &(0x7f0000000380)=""/106, 0x40f00, 0x8, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xd, 0x3, 0x1}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r3, r3], &(0x7f0000000580), 0x10, 0x271}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x4, @val=@tracing={r4, 0x800}}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c01000010001304000000000000000000000000005ea906df0000000000000000000000000000000000004e2400000200402000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1414bb000004d432000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000008000ffffffffffffffff02000000000000000800000000020000fdffffffffffffff00000000000000000100000000000000cc000000000000000000000000000000f6000000ffffffff000000002cbd7000000000000a00010900000000000000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x0, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 467.140448ms ago: executing program 1 (id=7): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f0000000800)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040", @ANYRES32], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) 465.251358ms ago: executing program 0 (id=1): setuid(0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX], 0x1, 0x105bb, &(0x7f00000105c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) mkdir(&(0x7f0000000140)='./control\x00', 0x0) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400020000000000100004000000000020"], 0x24, 0x1) (async) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400020000000000100004000000000020"], 0x24, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000080)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 461.418408ms ago: executing program 3 (id=4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x52) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0x1) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x800800}) write$P9_RREADLINK(r0, &(0x7f0000001040)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0xffff7ffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x71b2e, 0xc4a48b7f26bf141b}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xf}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32=r1, @ANYBLOB="000000000000005a0f00000000000000010000000000008000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000a30b71e28db8887666e4a55fcd3df389a2afe788c59a0ebe5662c5b591ade15f529f52a9c0e27bb1b90fc2034f1b4c7480f3ceb5240f0d54828101eb", @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', r2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32=r1, @ANYBLOB="000000000000005a0f00000000000000010000000000008000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000a30b71e28db8887666e4a55fcd3df389a2afe788c59a0ebe5662c5b591ade15f529f52a9c0e27bb1b90fc2034f1b4c7480f3ceb5240f0d54828101eb", @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', r2}, 0x94) 367.092955ms ago: executing program 2 (id=8): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) rt_sigreturn() sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2c}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x4, 0x2, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0xfff, 0x800}, {0x3}, 0x70bd2a, 0x3500, 0xa, 0x0, 0x0, 0x26}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 340.790646ms ago: executing program 32 (id=8): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) rt_sigreturn() sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2c}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x4, 0x2, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0xfff, 0x800}, {0x3}, 0x70bd2a, 0x3500, 0xa, 0x0, 0x0, 0x26}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 272.363811ms ago: executing program 3 (id=10): r0 = getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x2f, 0xfd4c) (async) sendmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}}, {{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20}}], 0x2, 0x0) 271.255231ms ago: executing program 1 (id=11): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000200)="64260f01d1ba4000b80000ef0f01d10f0faba39eb60f235fd8c5f3f20f350fff2a66b9800000c00f326635008000000f30260f790651aa", 0x37}], 0x1, 0x60, &(0x7f00000003c0)=[@cr0={0x0, 0xa}], 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32, @ANYRES8, @ANYBLOB="85cbdf8a159bbb014a14d9df9589115b8d005a7cc96f1696a370"], 0xfe37, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32, @ANYRES8, @ANYBLOB="85cbdf8a159bbb014a14d9df9589115b8d005a7cc96f1696a370"], 0xfe37, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000500)={0x0, 0xfb, 0x6a, 0x5, 0x5, "91552fc3b918ed06c12cafccb398ce61", "e1c4e4150064a8029fbc57fdeab33ec3b2e3ec5b7ffed4bac922ceca553272439a0646ee14a64bd33e8f82f41319c6a60b442a6c6e53e94540957cbe3c91236dea375bae88eaf4dbc9ef88a7c94a8446834580d68e"}, 0x6a, 0x3) 188.361857ms ago: executing program 3 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r1, 0x8911, &(0x7f0000002080)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1ba, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001800010010000000200000000a370000", @ANYRES32=0x0, @ANYBLOB="000000001400050000000000000000000000ffff"], 0x44}}, 0x0) 0s ago: executing program 3 (id=13): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xfe, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$midi(0x1, 0x100, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x534d, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0xd7, 0x90, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x26, [@ms_header={0x7, 0x24, 0x1, 0xe9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2c, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x2, 0x8, 0x5, [{0x2, 0x6a}, {0x2d, 0xc8}, {0xf8, 0x9}, {0x7, 0x4}, {0x0, 0x2}], 0x5}], [{{0x9, 0x5, 0xc, 0x14, 0x3ff, 0x4, 0x74, 0xfd, {0x11, 0x25, 0x1, 0xd, "0db36ad9f14b017ef7ee28a2e8"}}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x8, 0x0, 0x2, {0xa, 0x25, 0x1, 0x6, "af42182e0adb"}}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x5, 0x0, 0x5, {0xf, 0x25, 0x1, 0xb, "08c9e6d2400dd951d2ef75"}}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x18, 0x4, 0x9, {0x13, 0x25, 0x1, 0xf, "aca83304bc19fe73d168d2faf39237"}}}, {{0x9, 0x5, 0xa, 0x3, 0x0, 0x4, 0x5, 0x3, {0x5, 0x25, 0x1, 0x1, "ca"}}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0xbb, 0x4, 0x9, {0x12, 0x25, 0x1, 0xe, "83224a2ece23ef426ef4ec8c495b"}}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x0, 0x7f, 0xf8, {0xa, 0x25, 0x1, 0x6, "0df71bfc0cfe"}}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x6, 0x3, 0x7, {0x11, 0x25, 0x1, 0xd, "44fedb35959034f6afee44d655"}}}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x110, 0x4, 0x8, 0x3, 0x10, 0x2}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x5, [{0x2a, &(0x7f0000000540)=@string={0x2a, 0x3, "b76663b3f8af745c6f19557b06a7e62a458715f2ac491ce9f6f30a7c9002dea7082e9b5283ba40fc"}}, {0x23, &(0x7f0000000580)=@string={0x23, 0x3, "3781bb15df5242301f070e84164d68d1b27d144cd93ef885367b150b8c80020218"}}, {0xe1, &(0x7f00000005c0)=@string={0xe1, 0x3, "7ebc44000554a15d5f04bb2e0e8dd37999a5f7418434de66b217a8a019982a97cbf81633b1ffcfb59eeee89beb94d8b86ebae737ba22dbf02a4d266dc84184270e44aba95294ff5c26d8a3c91f748f8c86291f1b4e9da762c7e3b8611cf5da012b92024ab54b63e5545086d1fd0d9587740401c3804f1b3f0056b137956748276c71e756c196c149041c0cb4dc7829a7b8008e9ab6d1409f207a0d500cb3e87c247604608981c97e7592d6a95628563e517824ea00c725e0ac262ae76de7ffb565f416cad0f3d9b9d87bb0b599951e7860f32b400a1198dbba822c8b55acd7"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0xb, 0x10, 0x4, "", [{{0x9, 0x4, 0x0, 0xca, 0x2, 0x2, 0x6, 0x0, 0x70, {{0xb, 0x24, 0x6, 0x0, 0x0, "deeab5d513f6"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfff, 0xd9, 0x8a}, [@mdlm_detail={0x14, 0x24, 0x13, 0x1, "3b03a01e03a0cc354c746c3b23ebc160"}, @acm={0x4, 0x24, 0x2, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xb, 0x1c, 0x5c}, @obex={0x5, 0x24, 0x15, 0x7ff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfb, 0x83, 0x3}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xa, 0xfa, 0x56, 0x8, 0x7}, 0x12, &(0x7f0000000140)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xff, 0x8, 0xbd0d}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x1d, &(0x7f0000000300)=@string={0x1d, 0x3, "a47adb8b88ddc91dbea343585e53c026a8f06de5d2c02eb4f08608"}}, {0x2f, &(0x7f0000000340)=@string={0x2f, 0x3, "4eede49ceccf1cb0858fb9a5194b56162f128168bd5044c6406055d589409674c8f898c8558167fc76e4e7a549"}}]}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)={0x0, 0x9, 0x2a, {0x2a, 0x21, "0ae9c71dd8e8fbe47d9ba9de4964c85ee6e064a4445752906933768d4c3e15b58c4a9f0a065805d6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 19.868731][ T24] audit: type=1400 audit(1775467481.170:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.869703][ T267] cgroup: Unknown subsys name 'net' [ 19.892323][ T24] audit: type=1400 audit(1775467481.170:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.920712][ T24] audit: type=1400 audit(1775467481.200:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.921009][ T267] cgroup: Unknown subsys name 'devices' [ 20.120709][ T267] cgroup: Unknown subsys name 'hugetlb' [ 20.126523][ T267] cgroup: Unknown subsys name 'rlimit' [ 20.292595][ T24] audit: type=1400 audit(1775467481.600:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.316336][ T24] audit: type=1400 audit(1775467481.600:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.341438][ T24] audit: type=1400 audit(1775467481.600:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.349059][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.373837][ T24] audit: type=1400 audit(1775467481.680:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.400236][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.400297][ T24] audit: type=1400 audit(1775467481.680:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.435177][ T24] audit: type=1400 audit(1775467481.700:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.461520][ T24] audit: type=1400 audit(1775467481.700:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.981511][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.988665][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.996367][ T275] device bridge_slave_0 entered promiscuous mode [ 21.004405][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.011568][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.019117][ T275] device bridge_slave_1 entered promiscuous mode [ 21.115034][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.122426][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.129979][ T276] device bridge_slave_0 entered promiscuous mode [ 21.136584][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.143755][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.151235][ T277] device bridge_slave_0 entered promiscuous mode [ 21.158218][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.165578][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.172996][ T277] device bridge_slave_1 entered promiscuous mode [ 21.184174][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.191432][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.198944][ T276] device bridge_slave_1 entered promiscuous mode [ 21.268527][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.275934][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.283549][ T279] device bridge_slave_0 entered promiscuous mode [ 21.304950][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.312398][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.320220][ T279] device bridge_slave_1 entered promiscuous mode [ 21.333303][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.340384][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.347635][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.354671][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.370850][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.377896][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.385620][ T281] device bridge_slave_0 entered promiscuous mode [ 21.397883][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.405001][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.412768][ T281] device bridge_slave_1 entered promiscuous mode [ 21.508680][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.516112][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.524705][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.532456][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.547712][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.569723][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.577994][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.585550][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.600958][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.609402][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.616513][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.624367][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.633262][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.640386][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.647814][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.656006][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.663295][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.671722][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.700540][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.714143][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.722810][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.732019][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.744520][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.770335][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.778469][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.787075][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.794112][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.801947][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.810938][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.817968][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.825742][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.834774][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.852514][ T276] device veth0_vlan entered promiscuous mode [ 21.860341][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.868478][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.876184][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.884213][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.893048][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.901367][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.908670][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.916520][ T275] device veth0_vlan entered promiscuous mode [ 21.929310][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.936786][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.944771][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.956684][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.965728][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.972903][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.980684][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.988955][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.996045][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.004693][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.012841][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.021660][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.030793][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.037918][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.053261][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.061293][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.070824][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.079070][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.087242][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.103714][ T275] device veth1_macvtap entered promiscuous mode [ 22.112445][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.120785][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.129873][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.138200][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.147000][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.154644][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.163077][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.171753][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.180081][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.188200][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.195500][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.204311][ T276] device veth1_macvtap entered promiscuous mode [ 22.221405][ T279] device veth0_vlan entered promiscuous mode [ 22.229433][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.237229][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.246549][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.255021][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.263239][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.271445][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.278932][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.290919][ T281] device veth0_vlan entered promiscuous mode [ 22.299268][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.307919][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.316958][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.325468][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.334430][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.343161][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.351223][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.359713][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.368555][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.377349][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.386094][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.393907][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.412545][ T279] device veth1_macvtap entered promiscuous mode [ 22.421371][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.430189][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.438079][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.446376][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.454634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.463272][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.471942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.485763][ T276] request_module fs-gadgetfs succeeded, but still no fs? [ 22.488054][ T281] device veth1_macvtap entered promiscuous mode [ 22.504684][ T276] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.518385][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.534173][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.543109][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.558021][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.566621][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.575260][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.579847][ T300] EXT4-fs (loop2): Ignoring removed bh option [ 22.584454][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.589690][ T300] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 22.589690][ T300] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 22.589690][ T300] [ 22.605983][ T277] device veth0_vlan entered promiscuous mode [ 22.616175][ T300] EXT4-fs (loop2): Ignoring removed nobh option [ 22.638475][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.648212][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.652679][ T300] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,noblock_validity,i_version,bh,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,nobh,,errors=continue [ 22.656832][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.686810][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.695332][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.697416][ T300] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.3: Allocating blocks 497-513 which overlap fs metadata [ 22.719477][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.721658][ T300] EXT4-fs (loop2): pa ffff88811c8319d8: logic 32, phys. 145, len 23 [ 22.736227][ T300] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 22.738359][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.759253][ T276] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 190(190) [ 22.778276][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.787381][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.795061][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.803064][ T276] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 190(190) [ 22.839972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.848627][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.858359][ T277] device veth1_macvtap entered promiscuous mode [ 22.877010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.895268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.909893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.928441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.947102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.972599][ T309] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5'. [ 23.082879][ T311] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 23.110815][ T311] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue [ 23.134845][ T311] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 23.297635][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.305912][ T331] ====================================================== [ 23.305912][ T331] WARNING: the mand mount option is being deprecated and [ 23.305912][ T331] will be removed in v5.15! [ 23.305912][ T331] ====================================================== [ 23.306222][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.340606][ T324] device bridge_slave_0 entered promiscuous mode [ 23.352295][ T337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 23.368231][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.376586][ T331] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 23.384169][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.399441][ T324] device bridge_slave_1 entered promiscuous mode [ 23.413572][ T331] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue [ 23.442605][ T330] ================================================================== [ 23.450895][ T330] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x1d79/0x3860 [ 23.458780][ T330] Read of size 18446744073709550624 at addr ffff8881184847e0 by task syz.1.11/330 [ 23.462961][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.468431][ T330] [ 23.468444][ T330] CPU: 0 PID: 330 Comm: syz.1.11 Not tainted syzkaller #0 [ 23.468450][ T330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 23.468454][ T330] Call Trace: [ 23.468473][ T330] __dump_stack+0x21/0x24 [ 23.468492][ T330] dump_stack_lvl+0x1a7/0x208 [ 23.475920][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.478412][ T330] ? show_regs_print_info+0x18/0x18 [ 23.485586][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.495703][ T330] ? thaw_kernel_threads+0x220/0x220 [ 23.495714][ T330] print_address_description+0x7f/0x2c0 [ 23.495732][ T330] ? ext4_xattr_set_entry+0x1d79/0x3860 [ 23.499032][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.503524][ T330] kasan_report+0xe2/0x130 [ 23.553406][ T324] device veth0_vlan entered promiscuous mode [ 23.557722][ T330] ? ext4_xattr_set_entry+0x1d79/0x3860 [ 23.557739][ T330] ? ext4_xattr_set_entry+0x1d79/0x3860 [ 23.570298][ T324] device veth1_macvtap entered promiscuous mode [ 23.575176][ T330] kasan_check_range+0x249/0x2a0 [ 23.575188][ T330] ? ext4_xattr_set_entry+0x1d79/0x3860 [ 23.575196][ T330] memmove+0x2d/0x70 [ 23.575212][ T330] ext4_xattr_set_entry+0x1d79/0x3860 [ 23.602174][ T330] ? ext4_xattr_ibody_set+0x360/0x360 [ 23.607821][ T330] ? kmem_cache_free+0x100/0x2d0 [ 23.612884][ T330] ? __mb_cache_entry_free+0x225/0x340 [ 23.618698][ T330] ? mb_cache_entry_delete_or_get+0x203/0x220 [ 23.624814][ T330] ext4_xattr_block_set+0x4e0/0x2a80 [ 23.630187][ T330] ? __kasan_check_read+0x11/0x20 [ 23.635215][ T330] ? __ext4_xattr_check_block+0x265/0x8e0 [ 23.640930][ T330] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 23.646386][ T330] ext4_xattr_set_handle+0xbc4/0x12b0 [ 23.651767][ T330] ? ext4_xattr_set_entry+0x3860/0x3860 [ 23.657414][ T330] ? __kasan_check_read+0x11/0x20 [ 23.662530][ T330] ? __ext4_journal_start_sb+0x2e2/0x490 [ 23.668338][ T330] ext4_xattr_set+0x1f4/0x310 [ 23.673016][ T330] ? ext4_xattr_set_credits+0x290/0x290 [ 23.678754][ T330] ext4_xattr_trusted_set+0x3b/0x50 [ 23.679051][ T299] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 23.684138][ T330] ? ext4_xattr_trusted_get+0x40/0x40 [ 23.684151][ T330] __vfs_setxattr+0x42a/0x480 [ 23.684162][ T330] __vfs_setxattr_noperm+0x11e/0x4e0 [ 23.684183][ T330] __vfs_setxattr_locked+0x203/0x220 [ 23.713640][ T330] vfs_setxattr+0x8d/0x1c0 [ 23.718166][ T330] setxattr+0x1df/0x3f0 [ 23.722447][ T330] ? path_setxattr+0x230/0x230 [ 23.727229][ T330] ? __mnt_want_write+0x1e6/0x260 [ 23.732449][ T330] ? mnt_want_write+0x19d/0x270 [ 23.737494][ T330] path_setxattr+0x11f/0x230 [ 23.742096][ T330] ? __kasan_check_write+0x14/0x20 [ 23.747564][ T330] ? simple_xattr_list_add+0x120/0x120 [ 23.753206][ T330] ? __fdget+0x1b3/0x230 [ 23.757464][ T330] __x64_sys_lsetxattr+0xc2/0xe0 [ 23.762478][ T330] do_syscall_64+0x31/0x40 [ 23.767175][ T330] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.773181][ T330] RIP: 0033:0x7fef31ee1819 [ 23.777635][ T330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.798551][ T330] RSP: 002b:00007fef3093c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 23.807379][ T330] RAX: ffffffffffffffda RBX: 00007fef3215afa0 RCX: 00007fef31ee1819 [ 23.815804][ T330] RDX: 0000200000000380 RSI: 0000200000000100 RDI: 0000200000000040 [ 23.823810][ T330] RBP: 00007fef31f77c91 R08: 0000000000000000 R09: 0000000000000000 [ 23.831818][ T330] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 23.840003][ T330] R13: 00007fef3215b038 R14: 00007fef3215afa0 R15: 00007ffc23428c78 [ 23.848254][ T330] [ 23.850929][ T330] The buggy address belongs to the page: [ 23.856654][ T330] page:ffffea0004612100 refcount:2 mapcount:0 mapping:ffff888109355c10 index:0x1c pfn:0x118484 [ 23.867233][ T330] aops:def_blk_aops ino:0 [ 23.871815][ T330] flags: 0x400000000000203a(referenced|dirty|lru|active|private) [ 23.879536][ T330] raw: 400000000000203a ffffea0004a856c8 ffffea0004612188 ffff888109355c10 [ 23.888373][ T330] raw: 000000000000001c ffff88811cad85e8 00000002ffffffff ffff88810d4a6000 [ 23.897376][ T330] page dumped because: kasan: bad access detected [ 23.903781][ T330] page->mem_cgroup:ffff88810d4a6000 [ 23.909142][ T330] page_owner tracks the page as allocated [ 23.915029][ T330] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 330, ts 23440548762, free_ts 23195314415 [ 23.932248][ T330] prep_new_page+0x179/0x180 [ 23.936845][ T330] get_page_from_freelist+0x223b/0x23d0 [ 23.942390][ T330] __alloc_pages_nodemask+0x290/0x620 [ 23.947958][ T330] pagecache_get_page+0x63e/0x930 [ 23.953480][ T330] __getblk_gfp+0x212/0x780 [ 23.958009][ T330] ext4_xattr_block_set+0x1ccc/0x2a80 [ 23.963552][ T330] ext4_xattr_set_handle+0xbc4/0x12b0 [ 23.969001][ T330] ext4_xattr_set+0x1f4/0x310 [ 23.973889][ T330] ext4_xattr_user_set+0xc9/0xf0 [ 23.979012][ T330] __vfs_setxattr+0x42a/0x480 [ 23.984116][ T330] __vfs_setxattr_noperm+0x11e/0x4e0 [ 23.989386][ T330] __vfs_setxattr_locked+0x203/0x220 [ 23.994731][ T330] vfs_setxattr+0x8d/0x1c0 [ 23.999156][ T330] setxattr+0x1df/0x3f0 [ 24.003487][ T330] path_setxattr+0x11f/0x230 [ 24.008237][ T330] __x64_sys_setxattr+0xc5/0xe0 [ 24.013250][ T330] page last free stack trace: [ 24.018006][ T330] free_unref_page_prepare+0x2b7/0x2d0 [ 24.023693][ T330] free_unref_page_list+0x129/0x9c0 [ 24.029417][ T330] release_pages+0xe52/0xea0 [ 24.034195][ T330] __pagevec_release+0x71/0xe0 [ 24.039210][ T330] shmem_undo_range+0x74a/0x1810 [ 24.044313][ T330] shmem_evict_inode+0x210/0xa00 [ 24.049498][ T330] evict+0x4ae/0x930 [ 24.053384][ T330] iput+0x638/0x7c0 [ 24.057368][ T330] do_unlinkat+0x347/0x680 [ 24.061775][ T330] __x64_sys_unlink+0x49/0x50 [ 24.066439][ T330] do_syscall_64+0x31/0x40 [ 24.070846][ T330] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.076811][ T330] [ 24.079215][ T330] Memory state around the buggy address: [ 24.084919][ T330] ffff888118484680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.093149][ T330] ffff888118484700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.101201][ T330] >ffff888118484780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.109269][ T330] ^ [ 24.116914][ T330] ffff888118484800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.125155][ T330] ffff888118484880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.133577][ T330] ================================================================== [ 24.141628][ T330] Disabling lock debugging due to kernel taint [ 24.159899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.168423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.177725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.194162][ T331] EXT4-fs error (device loop1): ext4_xattr_block_find:1848: inode #15: comm syz.1.11: corrupted xattr block 113 [ 24.207759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.216525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.225441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.234246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.243021][ T330] EXT4-fs error (device loop1): ext4_xattr_block_find:1848: inode #15: comm syz.1.11: corrupted xattr block 113 [ 24.243146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.264107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.272533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.280779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.288560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.309209][ T299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 24.321443][ T299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.334479][ T299] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.347637][ T299] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 24.356421][ T316] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 150994945) [ 24.357342][ T299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.375055][ T299] usb 4-1: config 0 descriptor?? [ 24.380225][ T316] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 24.396695][ T7] device bridge_slave_1 left promiscuous mode [ 24.401283][ T316] F2FS-fs (loop0): invalid crc value [ 24.403058][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.410395][ T316] F2FS-fs (loop0): Found nat_bits in checkpoint [ 24.422394][ T7] device bridge_slave_0 left promiscuous mode [ 24.428592][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.438628][ T7] device veth1_macvtap left promiscuous mode [ 24.444874][ T7] device veth0_vlan left promiscuous mode [ 24.445769][ T316] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 24.458508][ T316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 24.484772][ T349] F2FS-fs (loop0): access invalid blkaddr:36 [ 24.491464][ T349] CPU: 1 PID: 349 Comm: syz.0.1 Tainted: G B syzkaller #0 [ 24.500426][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 24.510839][ T349] Call Trace: [ 24.514199][ T349] __dump_stack+0x21/0x24 [ 24.518516][ T349] dump_stack_lvl+0x1a7/0x208 [ 24.523281][ T349] ? f2fs_get_next_page_offset+0x760/0x760 [ 24.529161][ T349] ? show_regs_print_info+0x18/0x18 [ 24.534348][ T349] dump_stack+0x15/0x1c [ 24.538576][ T349] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 24.544149][ T349] f2fs_get_read_data_page+0x3e7/0x7a0 [ 24.549689][ T349] ? f2fs_get_block+0x140/0x140 [ 24.554535][ T349] ? add_to_page_cache_lru+0x18e/0x210 [ 24.560268][ T349] f2fs_get_lock_data_page+0x59/0x230 [ 24.565630][ T349] ? __kasan_check_write+0x14/0x20 [ 24.571031][ T349] f2fs_get_new_data_page+0x382/0x810 [ 24.576440][ T349] ? f2fs_get_lock_data_page+0x230/0x230 [ 24.582282][ T349] ? memset+0x35/0x40 [ 24.586389][ T349] f2fs_add_regular_entry+0x45a/0x920 [ 24.591804][ T349] ? memset+0x35/0x40 [ 24.596045][ T349] f2fs_add_dentry+0x234/0x350 [ 24.600801][ T349] ? f2fs_add_regular_entry+0x920/0x920 [ 24.606592][ T349] f2fs_do_add_link+0x24e/0x360 [ 24.611855][ T349] ? f2fs_add_dentry+0x350/0x350 [ 24.616864][ T349] ? __recover_dot_dentries+0x640/0x640 [ 24.622648][ T349] f2fs_add_link+0xd3/0x130 [ 24.627342][ T349] f2fs_rename2+0x1412/0x23f0 [ 24.632091][ T349] ? f2fs_mknod+0x720/0x720 [ 24.636865][ T349] ? __kasan_check_write+0x14/0x20 [ 24.642510][ T349] ? __kasan_check_write+0x14/0x20 [ 24.648182][ T349] ? down_write+0xb2/0x120 [ 24.653003][ T349] ? down_read_killable+0xe0/0xe0 [ 24.658117][ T349] ? lockref_get+0xbc/0x120 [ 24.662706][ T349] vfs_rename+0xa66/0xf50 [ 24.667133][ T349] ? __ia32_sys_link+0x70/0x70 [ 24.671984][ T349] ? lookup_one_len+0x196/0x2d0 [ 24.676986][ T349] ? lookup_one_len_common+0x460/0x460 [ 24.682553][ T349] ovl_copy_up_flags+0x1846/0x1b00 [ 24.687660][ T349] ? ovl_maybe_copy_up+0x190/0x190 [ 24.693145][ T349] ? ovl_maybe_copy_up+0x190/0x190 [ 24.698237][ T349] ? __kasan_slab_free+0x11/0x20 [ 24.703151][ T349] ? slab_free_freelist_hook+0xc5/0x190 [ 24.708788][ T349] ? kfree+0xc0/0x270 [ 24.713089][ T349] ? ovl_check_empty_dir+0x360/0x490 [ 24.718635][ T349] ? ovl_do_remove+0x1a2/0xc80 [ 24.723469][ T349] ? ovl_rmdir+0x1a/0x20 [ 24.727897][ T349] ? vfs_rmdir+0x1b3/0x3e0 [ 24.732513][ T349] ? do_rmdir+0x230/0x630 [ 24.737000][ T349] ? __x64_sys_rmdir+0x49/0x50 [ 24.741742][ T349] ? do_syscall_64+0x31/0x40 [ 24.746646][ T349] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.752984][ T349] ? preempt_count_add+0x90/0x1b0 [ 24.758097][ T349] ovl_copy_up+0x17/0x20 [ 24.762325][ T349] ovl_nlink_start+0x2cc/0x5b0 [ 24.767076][ T349] ovl_do_remove+0x252/0xc80 [ 24.771752][ T349] ? ovl_set_redirect+0x620/0x620 [ 24.776891][ T349] ? down_write+0xb2/0x120 [ 24.781590][ T349] ? selinux_inode_rmdir+0x22/0x30 [ 24.786903][ T349] ovl_rmdir+0x1a/0x20 [ 24.791059][ T349] vfs_rmdir+0x1b3/0x3e0 [ 24.795298][ T349] do_rmdir+0x230/0x630 [ 24.799566][ T349] ? d_delete_notify+0xd0/0xd0 [ 24.804413][ T349] ? getname_flags+0x206/0x500 [ 24.809224][ T349] __x64_sys_rmdir+0x49/0x50 [ 24.813927][ T349] do_syscall_64+0x31/0x40 [ 24.818605][ T349] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.824760][ T349] RIP: 0033:0x7fbcceea8819 [ 24.829303][ T349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.849165][ T349] RSP: 002b:00007fbccd8e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 24.857884][ T349] RAX: ffffffffffffffda RBX: 00007fbccf122090 RCX: 00007fbcceea8819 [ 24.865961][ T349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 24.874116][ T349] RBP: 00007fbccef3ec91 R08: 0000000000000000 R09: 0000000000000000 [ 24.882083][ T349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.890336][ T349] R13: 00007fbccf122128 R14: 00007fbccf122090 R15: 00007ffd35c96fe8 [ 24.908943][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 24.915726][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 24.924602][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 24.934851][ T277] Call Trace: [ 24.938163][ T277] __dump_stack+0x21/0x24 [ 24.942772][ T277] dump_stack_lvl+0x1a7/0x208 [ 24.947536][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 24.953420][ T277] ? show_regs_print_info+0x18/0x18 [ 24.958897][ T277] ? __kasan_check_read+0x11/0x20 [ 24.964383][ T277] dump_stack+0x15/0x1c [ 24.968746][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 24.974114][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 24.979864][ T277] ? f2fs_get_block+0x140/0x140 [ 24.985098][ T277] ? __kasan_check_read+0x11/0x20 [ 24.990559][ T277] ? memset+0x35/0x40 [ 24.994532][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 24.999959][ T277] f2fs_readdir+0x457/0x970 [ 25.004671][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 25.009870][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 25.014980][ T277] ? __kasan_check_write+0x14/0x20 [ 25.020168][ T277] iterate_dir+0x260/0x570 [ 25.024843][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 25.030048][ T277] __se_sys_getdents64+0xf2/0x250 [ 25.035083][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 25.040277][ T277] ? filldir+0x690/0x690 [ 25.044514][ T277] ? debug_smp_processor_id+0x17/0x20 [ 25.049878][ T277] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 25.056019][ T277] __x64_sys_getdents64+0x7b/0x90 [ 25.061035][ T277] do_syscall_64+0x31/0x40 [ 25.065470][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.071453][ T277] RIP: 0033:0x7fbcceed11b3 [ 25.075963][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 25.096011][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 25.104972][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 25.113200][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 25.121451][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 25.129421][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 25.137603][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 25.146783][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 25.154057][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 25.163136][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 25.173269][ T277] Call Trace: [ 25.176844][ T277] __dump_stack+0x21/0x24 [ 25.181204][ T277] dump_stack_lvl+0x1a7/0x208 [ 25.186057][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 25.191961][ T277] ? show_regs_print_info+0x18/0x18 [ 25.197313][ T277] ? __kasan_check_read+0x11/0x20 [ 25.202335][ T277] dump_stack+0x15/0x1c [ 25.206481][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 25.212249][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 25.217834][ T277] ? f2fs_get_block+0x140/0x140 [ 25.222681][ T277] ? may_link+0x3de/0x560 [ 25.227001][ T277] ? may_create+0x7d0/0x7d0 [ 25.231503][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 25.236972][ T277] f2fs_empty_dir+0xca/0x230 [ 25.241700][ T277] f2fs_rmdir+0x3f/0x70 [ 25.245909][ T277] vfs_rmdir+0x1b3/0x3e0 [ 25.250708][ T277] do_rmdir+0x230/0x630 [ 25.254854][ T277] ? d_delete_notify+0xd0/0xd0 [ 25.259843][ T277] ? getname_flags+0x206/0x500 [ 25.264706][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 25.269636][ T277] do_syscall_64+0x31/0x40 [ 25.275261][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.281240][ T277] RIP: 0033:0x7fbcceea7937 [ 25.285644][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.305483][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 25.314158][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 25.322214][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 25.330335][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 25.338664][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 25.346815][ T277] R13: 00007fbccef3e048 R14: 0000000000005f8e R15: 00007ffd35c973e0 [ 25.356558][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 25.357299][ T351] udc-core: couldn't find an available UDC or it's busy [ 25.362873][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 25.370345][ T351] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.379037][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 25.392218][ T340] udc-core: couldn't find an available UDC or it's busy [ 25.397430][ T277] Call Trace: [ 25.407643][ T277] __dump_stack+0x21/0x24 [ 25.411990][ T277] dump_stack_lvl+0x1a7/0x208 [ 25.416689][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 25.422514][ T277] ? show_regs_print_info+0x18/0x18 [ 25.427805][ T277] ? __kasan_check_read+0x11/0x20 [ 25.432922][ T277] dump_stack+0x15/0x1c [ 25.437076][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 25.442604][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 25.448054][ T277] ? f2fs_get_block+0x140/0x140 [ 25.453012][ T277] ? __kasan_check_read+0x11/0x20 [ 25.458223][ T277] ? memset+0x35/0x40 [ 25.462313][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 25.467438][ T277] f2fs_readdir+0x457/0x970 [ 25.472792][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 25.478160][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 25.482959][ T277] ? __kasan_check_write+0x14/0x20 [ 25.488167][ T277] iterate_dir+0x260/0x570 [ 25.492766][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 25.498138][ T277] __se_sys_getdents64+0xf2/0x250 [ 25.504206][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 25.509492][ T277] ? filldir+0x690/0x690 [ 25.513830][ T277] ? debug_smp_processor_id+0x17/0x20 [ 25.519368][ T277] __x64_sys_getdents64+0x7b/0x90 [ 25.524381][ T277] do_syscall_64+0x31/0x40 [ 25.528871][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.534858][ T277] RIP: 0033:0x7fbcceed11b3 [ 25.539730][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 25.559734][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 25.568231][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 25.576205][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 25.584283][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 25.592347][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 25.600487][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 25.609650][ T340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.612185][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 25.623664][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 25.632517][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 25.642937][ T277] Call Trace: [ 25.646421][ T277] __dump_stack+0x21/0x24 [ 25.650752][ T277] dump_stack_lvl+0x1a7/0x208 [ 25.655416][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 25.661650][ T277] ? show_regs_print_info+0x18/0x18 [ 25.666839][ T277] ? __kasan_check_read+0x11/0x20 [ 25.671947][ T277] dump_stack+0x15/0x1c [ 25.676204][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 25.681648][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 25.687178][ T277] ? f2fs_get_block+0x140/0x140 [ 25.692128][ T277] ? may_link+0x3de/0x560 [ 25.696654][ T277] ? may_create+0x7d0/0x7d0 [ 25.701173][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 25.706639][ T277] f2fs_empty_dir+0xca/0x230 [ 25.711413][ T277] f2fs_rmdir+0x3f/0x70 [ 25.715589][ T277] vfs_rmdir+0x1b3/0x3e0 [ 25.720013][ T277] do_rmdir+0x230/0x630 [ 25.724278][ T277] ? d_delete_notify+0xd0/0xd0 [ 25.729140][ T277] ? getname_flags+0x206/0x500 [ 25.733986][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 25.738820][ T277] do_syscall_64+0x31/0x40 [ 25.743317][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.749384][ T277] RIP: 0033:0x7fbcceea7937 [ 25.754217][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.774212][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 25.782814][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 25.791207][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 25.799400][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 25.807792][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 25.816110][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 25.825842][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 25.832442][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 25.842597][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 25.852889][ T277] Call Trace: [ 25.856438][ T277] __dump_stack+0x21/0x24 [ 25.860764][ T277] dump_stack_lvl+0x1a7/0x208 [ 25.865541][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 25.871763][ T277] ? show_regs_print_info+0x18/0x18 [ 25.876974][ T277] ? __kasan_check_read+0x11/0x20 [ 25.878104][ T299] usb 4-1: USB disconnect, device number 2 [ 25.882184][ T277] dump_stack+0x15/0x1c [ 25.882195][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 25.882206][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 25.882214][ T277] ? f2fs_get_block+0x140/0x140 [ 25.882235][ T277] ? __kasan_check_read+0x11/0x20 [ 25.913559][ T277] ? memset+0x35/0x40 [ 25.917643][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 25.922948][ T277] f2fs_readdir+0x457/0x970 [ 25.927724][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 25.932917][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 25.937765][ T277] ? __kasan_check_write+0x14/0x20 [ 25.942873][ T277] iterate_dir+0x260/0x570 [ 25.947272][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 25.952459][ T277] __se_sys_getdents64+0xf2/0x250 [ 25.957551][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 25.962730][ T277] ? filldir+0x690/0x690 [ 25.967074][ T277] ? debug_smp_processor_id+0x17/0x20 [ 25.972615][ T277] __x64_sys_getdents64+0x7b/0x90 [ 25.977717][ T277] do_syscall_64+0x31/0x40 [ 25.982219][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.988573][ T277] RIP: 0033:0x7fbcceed11b3 [ 25.992980][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 26.013320][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 26.021911][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 26.029985][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 26.038058][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 26.046260][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 26.054304][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 26.063433][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 26.069558][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 26.078856][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 26.091105][ T277] Call Trace: [ 26.094587][ T277] __dump_stack+0x21/0x24 [ 26.099088][ T277] dump_stack_lvl+0x1a7/0x208 [ 26.103943][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 26.109940][ T277] ? show_regs_print_info+0x18/0x18 [ 26.115133][ T277] ? __kasan_check_read+0x11/0x20 [ 26.120894][ T277] dump_stack+0x15/0x1c [ 26.125165][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 26.131120][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 26.136827][ T277] ? f2fs_get_block+0x140/0x140 [ 26.141810][ T277] ? may_link+0x3de/0x560 [ 26.146256][ T277] ? may_create+0x7d0/0x7d0 [ 26.150963][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 26.156903][ T277] f2fs_empty_dir+0xca/0x230 [ 26.161856][ T277] f2fs_rmdir+0x3f/0x70 [ 26.166034][ T277] vfs_rmdir+0x1b3/0x3e0 [ 26.170424][ T277] do_rmdir+0x230/0x630 [ 26.175010][ T277] ? d_delete_notify+0xd0/0xd0 [ 26.179895][ T277] ? getname_flags+0x206/0x500 [ 26.184917][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 26.189823][ T277] do_syscall_64+0x31/0x40 [ 26.194441][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.200851][ T277] RIP: 0033:0x7fbcceea7937 [ 26.205435][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.226454][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 26.235039][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 26.243855][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 26.251937][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 26.260511][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 26.268477][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 26.278236][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 26.284571][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 26.293953][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 26.304750][ T277] Call Trace: [ 26.308125][ T277] __dump_stack+0x21/0x24 [ 26.312639][ T277] dump_stack_lvl+0x1a7/0x208 [ 26.317521][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 26.323407][ T277] ? show_regs_print_info+0x18/0x18 [ 26.328852][ T277] ? __kasan_check_read+0x11/0x20 [ 26.333872][ T277] dump_stack+0x15/0x1c [ 26.338696][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 26.344399][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 26.349857][ T277] ? f2fs_get_block+0x140/0x140 [ 26.354695][ T277] ? __kasan_check_read+0x11/0x20 [ 26.359790][ T277] ? memset+0x35/0x40 [ 26.363756][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 26.368986][ T277] f2fs_readdir+0x457/0x970 [ 26.373789][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 26.379204][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 26.383963][ T277] ? __kasan_check_write+0x14/0x20 [ 26.389142][ T277] iterate_dir+0x260/0x570 [ 26.393640][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 26.398847][ T277] __se_sys_getdents64+0xf2/0x250 [ 26.403884][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 26.409103][ T277] ? filldir+0x690/0x690 [ 26.413342][ T277] ? debug_smp_processor_id+0x17/0x20 [ 26.419183][ T277] __x64_sys_getdents64+0x7b/0x90 [ 26.424505][ T277] do_syscall_64+0x31/0x40 [ 26.429013][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.434907][ T277] RIP: 0033:0x7fbcceed11b3 [ 26.439419][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 26.459652][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 26.468470][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 26.477285][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 26.485860][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 26.495497][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 26.504049][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 26.513890][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 26.520461][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 26.529407][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 26.539889][ T277] Call Trace: [ 26.543282][ T277] __dump_stack+0x21/0x24 [ 26.547882][ T277] dump_stack_lvl+0x1a7/0x208 [ 26.552759][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 26.559049][ T277] ? show_regs_print_info+0x18/0x18 [ 26.564413][ T277] ? __kasan_check_read+0x11/0x20 [ 26.569617][ T277] dump_stack+0x15/0x1c [ 26.573868][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 26.579225][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 26.584893][ T277] ? f2fs_get_block+0x140/0x140 [ 26.590087][ T277] ? may_link+0x3de/0x560 [ 26.594630][ T277] ? may_create+0x7d0/0x7d0 [ 26.599230][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 26.604642][ T277] f2fs_empty_dir+0xca/0x230 [ 26.609539][ T277] f2fs_rmdir+0x3f/0x70 [ 26.613722][ T277] vfs_rmdir+0x1b3/0x3e0 [ 26.618294][ T277] do_rmdir+0x230/0x630 [ 26.622730][ T277] ? d_delete_notify+0xd0/0xd0 [ 26.627614][ T277] ? getname_flags+0x206/0x500 [ 26.632547][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 26.637423][ T277] do_syscall_64+0x31/0x40 [ 26.642011][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.647886][ T277] RIP: 0033:0x7fbcceea7937 [ 26.652581][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.673655][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 26.682167][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 26.690220][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 26.698269][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 26.706311][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 26.714450][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 26.724568][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 26.730846][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 26.739980][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 26.750598][ T277] Call Trace: [ 26.753984][ T277] __dump_stack+0x21/0x24 [ 26.758645][ T277] dump_stack_lvl+0x1a7/0x208 [ 26.763402][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 26.769469][ T277] ? show_regs_print_info+0x18/0x18 [ 26.774652][ T277] ? __kasan_check_read+0x11/0x20 [ 26.780125][ T277] dump_stack+0x15/0x1c [ 26.784362][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 26.789922][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 26.795390][ T277] ? f2fs_get_block+0x140/0x140 [ 26.800234][ T277] ? __kasan_check_read+0x11/0x20 [ 26.805336][ T277] ? memset+0x35/0x40 [ 26.809345][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 26.814530][ T277] f2fs_readdir+0x457/0x970 [ 26.819027][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 26.824212][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 26.828966][ T277] ? __kasan_check_write+0x14/0x20 [ 26.834064][ T277] iterate_dir+0x260/0x570 [ 26.838481][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 26.844013][ T277] __se_sys_getdents64+0xf2/0x250 [ 26.849226][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 26.854616][ T277] ? filldir+0x690/0x690 [ 26.858860][ T277] ? debug_smp_processor_id+0x17/0x20 [ 26.864224][ T277] __x64_sys_getdents64+0x7b/0x90 [ 26.869248][ T277] do_syscall_64+0x31/0x40 [ 26.874016][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.880029][ T277] RIP: 0033:0x7fbcceed11b3 [ 26.884607][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 26.904719][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 26.913373][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 26.921663][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 26.929831][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 26.937818][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 26.946025][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 26.956605][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 26.963376][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 26.972826][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 26.983883][ T277] Call Trace: [ 26.987290][ T277] __dump_stack+0x21/0x24 [ 26.991856][ T277] dump_stack_lvl+0x1a7/0x208 [ 26.996776][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 27.003035][ T277] ? show_regs_print_info+0x18/0x18 [ 27.008739][ T277] ? __kasan_check_read+0x11/0x20 [ 27.013847][ T277] dump_stack+0x15/0x1c [ 27.017986][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 27.023579][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 27.029130][ T277] ? f2fs_get_block+0x140/0x140 [ 27.034162][ T277] ? may_link+0x3de/0x560 [ 27.038802][ T277] ? may_create+0x7d0/0x7d0 [ 27.043593][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 27.049311][ T277] f2fs_empty_dir+0xca/0x230 [ 27.054083][ T277] f2fs_rmdir+0x3f/0x70 [ 27.058403][ T277] vfs_rmdir+0x1b3/0x3e0 [ 27.062932][ T277] do_rmdir+0x230/0x630 [ 27.067397][ T277] ? d_delete_notify+0xd0/0xd0 [ 27.072244][ T277] ? getname_flags+0x206/0x500 [ 27.077055][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 27.082324][ T277] do_syscall_64+0x31/0x40 [ 27.086741][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.092891][ T277] RIP: 0033:0x7fbcceea7937 [ 27.097615][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.117426][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 27.126015][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 27.134683][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 27.142752][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 27.150802][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 27.158900][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 27.168659][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 27.175090][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 27.184160][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.194614][ T277] Call Trace: [ 27.198106][ T277] __dump_stack+0x21/0x24 [ 27.202424][ T277] dump_stack_lvl+0x1a7/0x208 [ 27.207102][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 27.213119][ T277] ? show_regs_print_info+0x18/0x18 [ 27.218364][ T277] ? __kasan_check_read+0x11/0x20 [ 27.223568][ T277] dump_stack+0x15/0x1c [ 27.227742][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 27.233108][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 27.238567][ T277] ? f2fs_get_block+0x140/0x140 [ 27.243530][ T277] ? __kasan_check_read+0x11/0x20 [ 27.248559][ T277] ? memset+0x35/0x40 [ 27.252541][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 27.257636][ T277] f2fs_readdir+0x457/0x970 [ 27.262238][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 27.267617][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 27.272541][ T277] ? __kasan_check_write+0x14/0x20 [ 27.277922][ T277] iterate_dir+0x260/0x570 [ 27.282494][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 27.287923][ T277] __se_sys_getdents64+0xf2/0x250 [ 27.293109][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 27.298507][ T277] ? filldir+0x690/0x690 [ 27.302836][ T277] ? debug_smp_processor_id+0x17/0x20 [ 27.308418][ T277] __x64_sys_getdents64+0x7b/0x90 [ 27.313449][ T277] do_syscall_64+0x31/0x40 [ 27.317851][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.323749][ T277] RIP: 0033:0x7fbcceed11b3 [ 27.328330][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 27.348448][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 27.357093][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 27.365057][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 27.373136][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 27.381193][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 27.389453][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 27.398971][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 27.405333][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 27.414322][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.424642][ T277] Call Trace: [ 27.428020][ T277] __dump_stack+0x21/0x24 [ 27.432347][ T277] dump_stack_lvl+0x1a7/0x208 [ 27.437053][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 27.442943][ T277] ? show_regs_print_info+0x18/0x18 [ 27.448129][ T277] ? __kasan_check_read+0x11/0x20 [ 27.453488][ T277] dump_stack+0x15/0x1c [ 27.457800][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 27.463371][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 27.469134][ T277] ? f2fs_get_block+0x140/0x140 [ 27.474140][ T277] ? may_link+0x3de/0x560 [ 27.478581][ T277] ? may_create+0x7d0/0x7d0 [ 27.483416][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 27.488871][ T277] f2fs_empty_dir+0xca/0x230 [ 27.493761][ T277] f2fs_rmdir+0x3f/0x70 [ 27.498401][ T277] vfs_rmdir+0x1b3/0x3e0 [ 27.502738][ T277] do_rmdir+0x230/0x630 [ 27.506887][ T277] ? d_delete_notify+0xd0/0xd0 [ 27.511641][ T277] ? getname_flags+0x206/0x500 [ 27.516659][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 27.522006][ T277] do_syscall_64+0x31/0x40 [ 27.527127][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.533096][ T277] RIP: 0033:0x7fbcceea7937 [ 27.537688][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.558459][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 27.567052][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 27.575111][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 27.583078][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 27.591129][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 27.599291][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 27.609320][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 27.615658][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 27.624588][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.634814][ T277] Call Trace: [ 27.638105][ T277] __dump_stack+0x21/0x24 [ 27.642429][ T277] dump_stack_lvl+0x1a7/0x208 [ 27.647095][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 27.652891][ T277] ? show_regs_print_info+0x18/0x18 [ 27.658165][ T277] ? __kasan_check_read+0x11/0x20 [ 27.663626][ T277] dump_stack+0x15/0x1c [ 27.667803][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 27.673384][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 27.678867][ T277] ? f2fs_get_block+0x140/0x140 [ 27.684068][ T277] ? __kasan_check_read+0x11/0x20 [ 27.689187][ T277] ? memset+0x35/0x40 [ 27.693284][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 27.698385][ T277] f2fs_readdir+0x457/0x970 [ 27.702970][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 27.708343][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 27.713185][ T277] ? __kasan_check_write+0x14/0x20 [ 27.718294][ T277] iterate_dir+0x260/0x570 [ 27.722710][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 27.728180][ T277] __se_sys_getdents64+0xf2/0x250 [ 27.733423][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 27.738706][ T277] ? filldir+0x690/0x690 [ 27.743223][ T277] ? debug_smp_processor_id+0x17/0x20 [ 27.748640][ T277] __x64_sys_getdents64+0x7b/0x90 [ 27.753685][ T277] do_syscall_64+0x31/0x40 [ 27.758473][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.764480][ T277] RIP: 0033:0x7fbcceed11b3 [ 27.768914][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 27.788794][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 27.797440][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 27.805791][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 27.814053][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 27.822032][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 27.830092][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 27.839645][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 27.846258][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 27.855732][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 27.866139][ T277] Call Trace: [ 27.869445][ T277] __dump_stack+0x21/0x24 [ 27.873902][ T277] dump_stack_lvl+0x1a7/0x208 [ 27.879149][ T277] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 27.885750][ T277] ? show_regs_print_info+0x18/0x18 [ 27.891216][ T277] dump_stack+0x15/0x1c [ 27.895461][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 27.901047][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 27.906666][ T277] ? f2fs_get_block+0x140/0x140 [ 27.911618][ T277] ? may_link+0x3de/0x560 [ 27.915936][ T277] ? may_create+0x7d0/0x7d0 [ 27.920615][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 27.925997][ T277] f2fs_empty_dir+0xca/0x230 [ 27.930776][ T277] f2fs_rmdir+0x3f/0x70 [ 27.935109][ T277] vfs_rmdir+0x1b3/0x3e0 [ 27.939568][ T277] do_rmdir+0x230/0x630 [ 27.943909][ T277] ? d_delete_notify+0xd0/0xd0 [ 27.948672][ T277] ? getname_flags+0x206/0x500 [ 27.954034][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 27.958869][ T277] do_syscall_64+0x31/0x40 [ 27.963731][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.970100][ T277] RIP: 0033:0x7fbcceea7937 [ 27.974538][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.995222][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 28.003723][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 28.011830][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 28.020088][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 28.028492][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 28.037042][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 28.046167][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 28.052478][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 28.061480][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.071909][ T277] Call Trace: [ 28.075471][ T277] __dump_stack+0x21/0x24 [ 28.080104][ T277] dump_stack_lvl+0x1a7/0x208 [ 28.085099][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 28.091425][ T277] ? show_regs_print_info+0x18/0x18 [ 28.097087][ T277] ? __kasan_check_read+0x11/0x20 [ 28.102364][ T277] dump_stack+0x15/0x1c [ 28.106665][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 28.112042][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 28.117879][ T277] ? f2fs_get_block+0x140/0x140 [ 28.123081][ T277] ? __kasan_check_read+0x11/0x20 [ 28.128650][ T277] ? memset+0x35/0x40 [ 28.132764][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 28.138099][ T277] f2fs_readdir+0x457/0x970 [ 28.142683][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 28.147868][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 28.152734][ T277] ? __kasan_check_write+0x14/0x20 [ 28.157940][ T277] iterate_dir+0x260/0x570 [ 28.162577][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 28.167786][ T277] __se_sys_getdents64+0xf2/0x250 [ 28.172902][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 28.178291][ T277] ? filldir+0x690/0x690 [ 28.182626][ T277] ? debug_smp_processor_id+0x17/0x20 [ 28.188098][ T277] __x64_sys_getdents64+0x7b/0x90 [ 28.193145][ T277] do_syscall_64+0x31/0x40 [ 28.197549][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.203563][ T277] RIP: 0033:0x7fbcceed11b3 [ 28.207964][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 28.227949][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 28.236528][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 28.244784][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 28.252922][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 28.261599][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 28.269869][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 28.280001][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 28.286926][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 28.296032][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.308675][ T277] Call Trace: [ 28.311971][ T277] __dump_stack+0x21/0x24 [ 28.316835][ T277] dump_stack_lvl+0x1a7/0x208 [ 28.322213][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 28.328462][ T277] ? show_regs_print_info+0x18/0x18 [ 28.334375][ T277] ? __kasan_check_read+0x11/0x20 [ 28.339974][ T277] dump_stack+0x15/0x1c [ 28.344630][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 28.350803][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 28.356707][ T277] ? f2fs_get_block+0x140/0x140 [ 28.361668][ T277] ? may_link+0x3de/0x560 [ 28.366075][ T277] ? may_create+0x7d0/0x7d0 [ 28.370566][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 28.375944][ T277] f2fs_empty_dir+0xca/0x230 [ 28.380713][ T277] f2fs_rmdir+0x3f/0x70 [ 28.385199][ T277] vfs_rmdir+0x1b3/0x3e0 [ 28.389535][ T277] do_rmdir+0x230/0x630 [ 28.393690][ T277] ? d_delete_notify+0xd0/0xd0 [ 28.398739][ T277] ? getname_flags+0x206/0x500 [ 28.403694][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 28.408813][ T277] do_syscall_64+0x31/0x40 [ 28.413242][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.419296][ T277] RIP: 0033:0x7fbcceea7937 [ 28.423902][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.444135][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 28.452634][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 28.460803][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 28.469127][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 28.477324][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 28.485691][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 28.494778][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 28.501098][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 28.510209][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.520644][ T277] Call Trace: [ 28.523936][ T277] __dump_stack+0x21/0x24 [ 28.528341][ T277] dump_stack_lvl+0x1a7/0x208 [ 28.533413][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 28.539436][ T277] ? show_regs_print_info+0x18/0x18 [ 28.544941][ T277] ? __kasan_check_read+0x11/0x20 [ 28.550051][ T277] dump_stack+0x15/0x1c [ 28.554301][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 28.559676][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 28.565513][ T277] ? f2fs_get_block+0x140/0x140 [ 28.570415][ T277] ? __kasan_check_read+0x11/0x20 [ 28.575450][ T277] ? memset+0x35/0x40 [ 28.579439][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 28.584647][ T277] f2fs_readdir+0x457/0x970 [ 28.589889][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 28.595085][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 28.600081][ T277] ? __kasan_check_write+0x14/0x20 [ 28.605390][ T277] iterate_dir+0x260/0x570 [ 28.609794][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 28.615272][ T277] __se_sys_getdents64+0xf2/0x250 [ 28.620385][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 28.625875][ T277] ? filldir+0x690/0x690 [ 28.630280][ T277] ? debug_smp_processor_id+0x17/0x20 [ 28.635668][ T277] __x64_sys_getdents64+0x7b/0x90 [ 28.640810][ T277] do_syscall_64+0x31/0x40 [ 28.645228][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.651186][ T277] RIP: 0033:0x7fbcceed11b3 [ 28.655584][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 28.675641][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 28.684045][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 28.692100][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 28.700457][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 28.708513][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 28.716662][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 28.726563][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 28.732813][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 28.741966][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.752195][ T277] Call Trace: [ 28.755800][ T277] __dump_stack+0x21/0x24 [ 28.760116][ T277] dump_stack_lvl+0x1a7/0x208 [ 28.764868][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 28.770842][ T277] ? show_regs_print_info+0x18/0x18 [ 28.776141][ T277] ? __kasan_check_read+0x11/0x20 [ 28.781480][ T277] dump_stack+0x15/0x1c [ 28.785642][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 28.791103][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 28.796687][ T277] ? f2fs_get_block+0x140/0x140 [ 28.801682][ T277] ? may_link+0x3de/0x560 [ 28.806094][ T277] ? may_create+0x7d0/0x7d0 [ 28.810630][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 28.816286][ T277] f2fs_empty_dir+0xca/0x230 [ 28.820938][ T277] f2fs_rmdir+0x3f/0x70 [ 28.825076][ T277] vfs_rmdir+0x1b3/0x3e0 [ 28.829300][ T277] do_rmdir+0x230/0x630 [ 28.833525][ T277] ? d_delete_notify+0xd0/0xd0 [ 28.838376][ T277] ? getname_flags+0x206/0x500 [ 28.843166][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 28.848010][ T277] do_syscall_64+0x31/0x40 [ 28.852454][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.858341][ T277] RIP: 0033:0x7fbcceea7937 [ 28.862741][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.883256][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 28.892307][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 28.900449][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 28.908430][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 28.916837][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 28.924900][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 28.934826][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 28.940884][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 28.949717][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.959799][ T277] Call Trace: [ 28.963089][ T277] __dump_stack+0x21/0x24 [ 28.967577][ T277] dump_stack_lvl+0x1a7/0x208 [ 28.972330][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 28.978300][ T277] ? show_regs_print_info+0x18/0x18 [ 28.983657][ T277] ? __kasan_check_read+0x11/0x20 [ 28.988756][ T277] dump_stack+0x15/0x1c [ 28.992922][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 28.998452][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 29.004014][ T277] ? f2fs_get_block+0x140/0x140 [ 29.009043][ T277] ? __kasan_check_read+0x11/0x20 [ 29.014062][ T277] ? memset+0x35/0x40 [ 29.018031][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 29.023127][ T277] f2fs_readdir+0x457/0x970 [ 29.027621][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 29.033334][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 29.038263][ T277] ? __kasan_check_write+0x14/0x20 [ 29.043358][ T277] iterate_dir+0x260/0x570 [ 29.047759][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 29.053170][ T277] __se_sys_getdents64+0xf2/0x250 [ 29.058213][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 29.063407][ T277] ? filldir+0x690/0x690 [ 29.067766][ T277] ? debug_smp_processor_id+0x17/0x20 [ 29.073129][ T277] __x64_sys_getdents64+0x7b/0x90 [ 29.078151][ T277] do_syscall_64+0x31/0x40 [ 29.082656][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.088998][ T277] RIP: 0033:0x7fbcceed11b3 [ 29.093532][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 29.113838][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 29.122368][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 29.130848][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 29.139033][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 29.147212][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 29.155190][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 29.163601][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 29.169755][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 29.178592][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.189576][ T277] Call Trace: [ 29.193145][ T277] __dump_stack+0x21/0x24 [ 29.198193][ T277] dump_stack_lvl+0x1a7/0x208 [ 29.203146][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 29.209246][ T277] ? show_regs_print_info+0x18/0x18 [ 29.214439][ T277] ? __kasan_check_read+0x11/0x20 [ 29.219454][ T277] dump_stack+0x15/0x1c [ 29.223673][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 29.229115][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 29.234559][ T277] ? f2fs_get_block+0x140/0x140 [ 29.239426][ T277] ? may_link+0x3de/0x560 [ 29.243912][ T277] ? may_create+0x7d0/0x7d0 [ 29.248407][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 29.253778][ T277] f2fs_empty_dir+0xca/0x230 [ 29.258360][ T277] f2fs_rmdir+0x3f/0x70 [ 29.262708][ T277] vfs_rmdir+0x1b3/0x3e0 [ 29.266964][ T277] do_rmdir+0x230/0x630 [ 29.271114][ T277] ? d_delete_notify+0xd0/0xd0 [ 29.276089][ T277] ? getname_flags+0x206/0x500 [ 29.280878][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 29.285914][ T277] do_syscall_64+0x31/0x40 [ 29.290786][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.296752][ T277] RIP: 0033:0x7fbcceea7937 [ 29.301264][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.321045][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 29.329645][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 29.337721][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 29.345693][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 29.353947][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 29.362482][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 29.370730][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 29.376735][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 29.385846][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.396249][ T277] Call Trace: [ 29.399626][ T277] __dump_stack+0x21/0x24 [ 29.403976][ T277] dump_stack_lvl+0x1a7/0x208 [ 29.408686][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 29.414548][ T277] ? show_regs_print_info+0x18/0x18 [ 29.419732][ T277] ? __kasan_check_read+0x11/0x20 [ 29.424786][ T277] dump_stack+0x15/0x1c [ 29.428951][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 29.434421][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 29.440216][ T277] ? f2fs_get_block+0x140/0x140 [ 29.445056][ T277] ? __kasan_check_read+0x11/0x20 [ 29.450147][ T277] ? memset+0x35/0x40 [ 29.454201][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 29.459472][ T277] f2fs_readdir+0x457/0x970 [ 29.463970][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 29.469171][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 29.474159][ T277] ? __kasan_check_write+0x14/0x20 [ 29.480006][ T277] iterate_dir+0x260/0x570 [ 29.484999][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 29.490209][ T277] __se_sys_getdents64+0xf2/0x250 [ 29.495348][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 29.500654][ T277] ? filldir+0x690/0x690 [ 29.504997][ T277] ? debug_smp_processor_id+0x17/0x20 [ 29.510450][ T277] __x64_sys_getdents64+0x7b/0x90 [ 29.515543][ T277] do_syscall_64+0x31/0x40 [ 29.520060][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.526039][ T277] RIP: 0033:0x7fbcceed11b3 [ 29.530492][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 29.550460][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 29.558961][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 29.567030][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 29.575302][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 29.583438][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 29.591591][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 29.600155][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 29.606584][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 29.615687][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.626183][ T277] Call Trace: [ 29.629581][ T277] __dump_stack+0x21/0x24 [ 29.634093][ T277] dump_stack_lvl+0x1a7/0x208 [ 29.638978][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 29.645053][ T277] ? show_regs_print_info+0x18/0x18 [ 29.650436][ T277] ? __kasan_check_read+0x11/0x20 [ 29.655453][ T277] dump_stack+0x15/0x1c [ 29.659604][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 29.664962][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 29.670421][ T277] ? f2fs_get_block+0x140/0x140 [ 29.675271][ T277] ? may_link+0x3de/0x560 [ 29.679713][ T277] ? may_create+0x7d0/0x7d0 [ 29.684282][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 29.690031][ T277] f2fs_empty_dir+0xca/0x230 [ 29.694634][ T277] f2fs_rmdir+0x3f/0x70 [ 29.698839][ T277] vfs_rmdir+0x1b3/0x3e0 [ 29.703150][ T277] do_rmdir+0x230/0x630 [ 29.707390][ T277] ? d_delete_notify+0xd0/0xd0 [ 29.712221][ T277] ? getname_flags+0x206/0x500 [ 29.717066][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 29.722013][ T277] do_syscall_64+0x31/0x40 [ 29.726428][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.732394][ T277] RIP: 0033:0x7fbcceea7937 [ 29.736813][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.756595][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 29.765284][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 29.773330][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 29.781308][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 29.789886][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 29.798013][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 29.807583][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 29.813797][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 29.822699][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.832976][ T277] Call Trace: [ 29.836395][ T277] __dump_stack+0x21/0x24 [ 29.840839][ T277] dump_stack_lvl+0x1a7/0x208 [ 29.845607][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 29.851715][ T277] ? show_regs_print_info+0x18/0x18 [ 29.857105][ T277] ? __kasan_check_read+0x11/0x20 [ 29.862147][ T277] dump_stack+0x15/0x1c [ 29.866286][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 29.872097][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 29.877643][ T277] ? f2fs_get_block+0x140/0x140 [ 29.882677][ T277] ? __kasan_check_read+0x11/0x20 [ 29.888006][ T277] ? memset+0x35/0x40 [ 29.892164][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 29.897483][ T277] f2fs_readdir+0x457/0x970 [ 29.902676][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 29.907879][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 29.912980][ T277] ? __kasan_check_write+0x14/0x20 [ 29.918320][ T277] iterate_dir+0x260/0x570 [ 29.922906][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 29.928118][ T277] __se_sys_getdents64+0xf2/0x250 [ 29.933246][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 29.938518][ T277] ? filldir+0x690/0x690 [ 29.942751][ T277] ? debug_smp_processor_id+0x17/0x20 [ 29.948130][ T277] __x64_sys_getdents64+0x7b/0x90 [ 29.953422][ T277] do_syscall_64+0x31/0x40 [ 29.957825][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.964013][ T277] RIP: 0033:0x7fbcceed11b3 [ 29.968743][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 29.989606][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 29.998236][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 30.006492][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 30.014549][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 30.022861][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 30.031509][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 30.039894][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 30.046062][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 30.055259][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.065342][ T277] Call Trace: [ 30.068703][ T277] __dump_stack+0x21/0x24 [ 30.073027][ T277] dump_stack_lvl+0x1a7/0x208 [ 30.077778][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 30.083572][ T277] ? show_regs_print_info+0x18/0x18 [ 30.088853][ T277] ? __kasan_check_read+0x11/0x20 [ 30.094050][ T277] dump_stack+0x15/0x1c [ 30.098192][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 30.103811][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 30.110250][ T277] ? f2fs_get_block+0x140/0x140 [ 30.115189][ T277] ? may_link+0x3de/0x560 [ 30.120091][ T277] ? may_create+0x7d0/0x7d0 [ 30.124840][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 30.130337][ T277] f2fs_empty_dir+0xca/0x230 [ 30.135018][ T277] f2fs_rmdir+0x3f/0x70 [ 30.139281][ T277] vfs_rmdir+0x1b3/0x3e0 [ 30.143695][ T277] do_rmdir+0x230/0x630 [ 30.148152][ T277] ? d_delete_notify+0xd0/0xd0 [ 30.152908][ T277] ? getname_flags+0x206/0x500 [ 30.157689][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 30.162619][ T277] do_syscall_64+0x31/0x40 [ 30.167204][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.173554][ T277] RIP: 0033:0x7fbcceea7937 [ 30.178224][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.198431][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 30.207017][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 30.215309][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 30.223534][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 30.231760][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 30.239968][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 30.248225][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 30.254240][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 30.263561][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.273814][ T277] Call Trace: [ 30.277197][ T277] __dump_stack+0x21/0x24 [ 30.281534][ T277] dump_stack_lvl+0x1a7/0x208 [ 30.286388][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 30.292292][ T277] ? show_regs_print_info+0x18/0x18 [ 30.297767][ T277] ? __kasan_check_read+0x11/0x20 [ 30.303226][ T277] dump_stack+0x15/0x1c [ 30.307569][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 30.313036][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 30.318658][ T277] ? f2fs_get_block+0x140/0x140 [ 30.323760][ T277] ? __kasan_check_read+0x11/0x20 [ 30.328859][ T277] ? memset+0x35/0x40 [ 30.333121][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 30.338243][ T277] f2fs_readdir+0x457/0x970 [ 30.343012][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 30.348303][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 30.353069][ T277] ? __kasan_check_write+0x14/0x20 [ 30.358179][ T277] iterate_dir+0x260/0x570 [ 30.362847][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 30.368207][ T277] __se_sys_getdents64+0xf2/0x250 [ 30.373237][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 30.378693][ T277] ? filldir+0x690/0x690 [ 30.383115][ T277] ? debug_smp_processor_id+0x17/0x20 [ 30.388539][ T277] __x64_sys_getdents64+0x7b/0x90 [ 30.393565][ T277] do_syscall_64+0x31/0x40 [ 30.398162][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.404064][ T277] RIP: 0033:0x7fbcceed11b3 [ 30.408661][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 30.428717][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 30.437471][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 30.445803][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 30.453936][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 30.462278][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 30.470861][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 30.479277][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 30.485607][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 30.494622][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.505119][ T277] Call Trace: [ 30.508522][ T277] __dump_stack+0x21/0x24 [ 30.512939][ T277] dump_stack_lvl+0x1a7/0x208 [ 30.517627][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 30.523713][ T277] ? show_regs_print_info+0x18/0x18 [ 30.529093][ T277] ? __kasan_check_read+0x11/0x20 [ 30.534286][ T277] dump_stack+0x15/0x1c [ 30.538457][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 30.543820][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 30.549501][ T277] ? f2fs_get_block+0x140/0x140 [ 30.554586][ T277] ? may_link+0x3de/0x560 [ 30.559029][ T277] ? may_create+0x7d0/0x7d0 [ 30.563548][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 30.568910][ T277] f2fs_empty_dir+0xca/0x230 [ 30.573594][ T277] f2fs_rmdir+0x3f/0x70 [ 30.577744][ T277] vfs_rmdir+0x1b3/0x3e0 [ 30.581974][ T277] do_rmdir+0x230/0x630 [ 30.586309][ T277] ? d_delete_notify+0xd0/0xd0 [ 30.591173][ T277] ? getname_flags+0x206/0x500 [ 30.595935][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 30.600955][ T277] do_syscall_64+0x31/0x40 [ 30.605358][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.611253][ T277] RIP: 0033:0x7fbcceea7937 [ 30.615850][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.635632][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 30.644131][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 30.652280][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 30.660432][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 30.668488][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 30.676544][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 30.686774][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 30.692984][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 30.701898][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.712223][ T277] Call Trace: [ 30.715697][ T277] __dump_stack+0x21/0x24 [ 30.720108][ T277] dump_stack_lvl+0x1a7/0x208 [ 30.724795][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 30.730846][ T277] ? show_regs_print_info+0x18/0x18 [ 30.736522][ T277] ? __kasan_check_read+0x11/0x20 [ 30.741543][ T277] dump_stack+0x15/0x1c [ 30.745877][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 30.751233][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 30.756769][ T277] ? f2fs_get_block+0x140/0x140 [ 30.761633][ T277] ? __kasan_check_read+0x11/0x20 [ 30.766727][ T277] ? memset+0x35/0x40 [ 30.770869][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 30.776150][ T277] f2fs_readdir+0x457/0x970 [ 30.780649][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 30.786502][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 30.791515][ T277] ? __kasan_check_write+0x14/0x20 [ 30.797352][ T277] iterate_dir+0x260/0x570 [ 30.801815][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 30.806994][ T277] __se_sys_getdents64+0xf2/0x250 [ 30.811999][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 30.817175][ T277] ? filldir+0x690/0x690 [ 30.821509][ T277] ? debug_smp_processor_id+0x17/0x20 [ 30.827054][ T277] __x64_sys_getdents64+0x7b/0x90 [ 30.832088][ T277] do_syscall_64+0x31/0x40 [ 30.837068][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.843493][ T277] RIP: 0033:0x7fbcceed11b3 [ 30.847972][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 30.868668][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 30.877751][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 30.885930][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 30.894331][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 30.902560][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 30.910605][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 30.918983][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 30.925161][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 30.934433][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.944790][ T277] Call Trace: [ 30.948084][ T277] __dump_stack+0x21/0x24 [ 30.952436][ T277] dump_stack_lvl+0x1a7/0x208 [ 30.957109][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 30.962998][ T277] ? show_regs_print_info+0x18/0x18 [ 30.968379][ T277] ? __kasan_check_read+0x11/0x20 [ 30.973593][ T277] dump_stack+0x15/0x1c [ 30.977845][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 30.983430][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 30.988903][ T277] ? f2fs_get_block+0x140/0x140 [ 30.993947][ T277] ? may_link+0x3de/0x560 [ 30.998268][ T277] ? may_create+0x7d0/0x7d0 [ 31.002931][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 31.008322][ T277] f2fs_empty_dir+0xca/0x230 [ 31.013205][ T277] f2fs_rmdir+0x3f/0x70 [ 31.017383][ T277] vfs_rmdir+0x1b3/0x3e0 [ 31.021614][ T277] do_rmdir+0x230/0x630 [ 31.025758][ T277] ? d_delete_notify+0xd0/0xd0 [ 31.030636][ T277] ? getname_flags+0x206/0x500 [ 31.035395][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 31.040322][ T277] do_syscall_64+0x31/0x40 [ 31.044723][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.050819][ T277] RIP: 0033:0x7fbcceea7937 [ 31.055356][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.075372][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 31.083963][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 31.092500][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 31.100574][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 31.108718][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 31.116843][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 31.125855][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 31.131917][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 31.141045][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.151459][ T277] Call Trace: [ 31.154834][ T277] __dump_stack+0x21/0x24 [ 31.159181][ T277] dump_stack_lvl+0x1a7/0x208 [ 31.164111][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 31.170125][ T277] ? show_regs_print_info+0x18/0x18 [ 31.175433][ T277] ? __kasan_check_read+0x11/0x20 [ 31.180445][ T277] dump_stack+0x15/0x1c [ 31.184594][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 31.190152][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 31.195796][ T277] ? f2fs_get_block+0x140/0x140 [ 31.200737][ T277] ? __kasan_check_read+0x11/0x20 [ 31.205773][ T277] ? memset+0x35/0x40 [ 31.209934][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 31.215131][ T277] f2fs_readdir+0x457/0x970 [ 31.219630][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 31.225026][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 31.229878][ T277] ? __kasan_check_write+0x14/0x20 [ 31.235368][ T277] iterate_dir+0x260/0x570 [ 31.239925][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 31.245125][ T277] __se_sys_getdents64+0xf2/0x250 [ 31.250147][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 31.255329][ T277] ? filldir+0x690/0x690 [ 31.259835][ T277] ? debug_smp_processor_id+0x17/0x20 [ 31.265427][ T277] __x64_sys_getdents64+0x7b/0x90 [ 31.270577][ T277] do_syscall_64+0x31/0x40 [ 31.275095][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.281065][ T277] RIP: 0033:0x7fbcceed11b3 [ 31.285862][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 31.305718][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 31.314202][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 31.322178][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 31.330438][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 31.338595][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 31.346553][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 31.355055][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 31.361275][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 31.370559][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.381082][ T277] Call Trace: [ 31.384366][ T277] __dump_stack+0x21/0x24 [ 31.388732][ T277] dump_stack_lvl+0x1a7/0x208 [ 31.393483][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 31.399273][ T277] ? show_regs_print_info+0x18/0x18 [ 31.404455][ T277] ? __kasan_check_read+0x11/0x20 [ 31.409464][ T277] dump_stack+0x15/0x1c [ 31.413730][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 31.419289][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 31.424732][ T277] ? f2fs_get_block+0x140/0x140 [ 31.429584][ T277] ? may_link+0x3de/0x560 [ 31.434411][ T277] ? may_create+0x7d0/0x7d0 [ 31.438920][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 31.444413][ T277] f2fs_empty_dir+0xca/0x230 [ 31.449010][ T277] f2fs_rmdir+0x3f/0x70 [ 31.453165][ T277] vfs_rmdir+0x1b3/0x3e0 [ 31.457563][ T277] do_rmdir+0x230/0x630 [ 31.461721][ T277] ? d_delete_notify+0xd0/0xd0 [ 31.467011][ T277] ? getname_flags+0x206/0x500 [ 31.471860][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 31.476758][ T277] do_syscall_64+0x31/0x40 [ 31.481180][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.487171][ T277] RIP: 0033:0x7fbcceea7937 [ 31.491657][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.511532][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 31.520038][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 31.528022][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 31.536072][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 31.544875][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 31.552950][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 31.561547][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 31.567549][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 31.576503][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.586838][ T277] Call Trace: [ 31.590144][ T277] __dump_stack+0x21/0x24 [ 31.594486][ T277] dump_stack_lvl+0x1a7/0x208 [ 31.599168][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 31.604969][ T277] ? show_regs_print_info+0x18/0x18 [ 31.610159][ T277] ? __kasan_check_read+0x11/0x20 [ 31.615185][ T277] dump_stack+0x15/0x1c [ 31.619484][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 31.625057][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 31.631228][ T277] ? f2fs_get_block+0x140/0x140 [ 31.636264][ T277] ? __kasan_check_read+0x11/0x20 [ 31.641271][ T277] ? memset+0x35/0x40 [ 31.645326][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 31.650423][ T277] f2fs_readdir+0x457/0x970 [ 31.654995][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 31.660186][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 31.664936][ T277] ? __kasan_check_write+0x14/0x20 [ 31.670026][ T277] iterate_dir+0x260/0x570 [ 31.674526][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 31.679781][ T277] __se_sys_getdents64+0xf2/0x250 [ 31.685582][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 31.690798][ T277] ? filldir+0x690/0x690 [ 31.695181][ T277] ? debug_smp_processor_id+0x17/0x20 [ 31.700592][ T277] __x64_sys_getdents64+0x7b/0x90 [ 31.705745][ T277] do_syscall_64+0x31/0x40 [ 31.710369][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.716631][ T277] RIP: 0033:0x7fbcceed11b3 [ 31.721173][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 31.741142][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 31.749556][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 31.758092][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 31.766145][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 31.774277][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 31.782592][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 31.790947][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 31.797399][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 31.806413][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.816769][ T277] Call Trace: [ 31.820397][ T277] __dump_stack+0x21/0x24 [ 31.824746][ T277] dump_stack_lvl+0x1a7/0x208 [ 31.829432][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 31.835435][ T277] ? show_regs_print_info+0x18/0x18 [ 31.840648][ T277] ? __kasan_check_read+0x11/0x20 [ 31.845802][ T277] dump_stack+0x15/0x1c [ 31.850036][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 31.855422][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 31.860877][ T277] ? f2fs_get_block+0x140/0x140 [ 31.865809][ T277] ? may_link+0x3de/0x560 [ 31.870139][ T277] ? may_create+0x7d0/0x7d0 [ 31.875497][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 31.881181][ T277] f2fs_empty_dir+0xca/0x230 [ 31.885852][ T277] f2fs_rmdir+0x3f/0x70 [ 31.890002][ T277] vfs_rmdir+0x1b3/0x3e0 [ 31.894606][ T277] do_rmdir+0x230/0x630 [ 31.898762][ T277] ? d_delete_notify+0xd0/0xd0 [ 31.903609][ T277] ? getname_flags+0x206/0x500 [ 31.908371][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 31.913295][ T277] do_syscall_64+0x31/0x40 [ 31.918306][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.924178][ T277] RIP: 0033:0x7fbcceea7937 [ 31.928600][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.948850][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 31.957622][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 31.966075][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 31.974423][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 31.982512][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 31.990556][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 31.999391][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 32.005847][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 32.015242][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.025400][ T277] Call Trace: [ 32.028891][ T277] __dump_stack+0x21/0x24 [ 32.033399][ T277] dump_stack_lvl+0x1a7/0x208 [ 32.038254][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 32.044161][ T277] ? show_regs_print_info+0x18/0x18 [ 32.049536][ T277] ? __kasan_check_read+0x11/0x20 [ 32.054645][ T277] dump_stack+0x15/0x1c [ 32.058888][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 32.064751][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 32.070330][ T277] ? f2fs_get_block+0x140/0x140 [ 32.075345][ T277] ? __kasan_check_read+0x11/0x20 [ 32.080581][ T277] ? memset+0x35/0x40 [ 32.084549][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 32.089772][ T277] f2fs_readdir+0x457/0x970 [ 32.094265][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 32.100091][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 32.105539][ T277] ? __kasan_check_write+0x14/0x20 [ 32.110663][ T277] iterate_dir+0x260/0x570 [ 32.115080][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 32.120581][ T277] __se_sys_getdents64+0xf2/0x250 [ 32.125843][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 32.131053][ T277] ? filldir+0x690/0x690 [ 32.135516][ T277] ? debug_smp_processor_id+0x17/0x20 [ 32.140890][ T277] __x64_sys_getdents64+0x7b/0x90 [ 32.146001][ T277] do_syscall_64+0x31/0x40 [ 32.150417][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.156396][ T277] RIP: 0033:0x7fbcceed11b3 [ 32.160840][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 32.180624][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 32.189652][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 32.197719][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 32.205679][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 32.213636][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 32.221601][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 32.229832][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 32.235817][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 32.244676][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.254819][ T277] Call Trace: [ 32.258098][ T277] __dump_stack+0x21/0x24 [ 32.262437][ T277] dump_stack_lvl+0x1a7/0x208 [ 32.267188][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 32.273066][ T277] ? show_regs_print_info+0x18/0x18 [ 32.278276][ T277] ? __kasan_check_read+0x11/0x20 [ 32.283697][ T277] dump_stack+0x15/0x1c [ 32.287860][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 32.293425][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 32.299016][ T277] ? f2fs_get_block+0x140/0x140 [ 32.303967][ T277] ? may_link+0x3de/0x560 [ 32.308292][ T277] ? may_create+0x7d0/0x7d0 [ 32.312790][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 32.318260][ T277] f2fs_empty_dir+0xca/0x230 [ 32.322943][ T277] f2fs_rmdir+0x3f/0x70 [ 32.327263][ T277] vfs_rmdir+0x1b3/0x3e0 [ 32.331582][ T277] do_rmdir+0x230/0x630 [ 32.335932][ T277] ? d_delete_notify+0xd0/0xd0 [ 32.340864][ T277] ? getname_flags+0x206/0x500 [ 32.345710][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 32.350634][ T277] do_syscall_64+0x31/0x40 [ 32.355340][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.361246][ T277] RIP: 0033:0x7fbcceea7937 [ 32.365668][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.385488][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 32.394256][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 32.402412][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 32.410646][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 32.418868][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 32.426838][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 32.435414][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 32.441490][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 32.450508][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.460635][ T277] Call Trace: [ 32.464222][ T277] __dump_stack+0x21/0x24 [ 32.468660][ T277] dump_stack_lvl+0x1a7/0x208 [ 32.473356][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 32.479530][ T277] ? show_regs_print_info+0x18/0x18 [ 32.485096][ T277] ? __kasan_check_read+0x11/0x20 [ 32.490239][ T277] dump_stack+0x15/0x1c [ 32.494811][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 32.500176][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 32.505815][ T277] ? f2fs_get_block+0x140/0x140 [ 32.510793][ T277] ? __kasan_check_read+0x11/0x20 [ 32.515935][ T277] ? memset+0x35/0x40 [ 32.520086][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 32.525274][ T277] f2fs_readdir+0x457/0x970 [ 32.529882][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 32.535358][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 32.540106][ T277] ? __kasan_check_write+0x14/0x20 [ 32.545200][ T277] iterate_dir+0x260/0x570 [ 32.549797][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 32.555209][ T277] __se_sys_getdents64+0xf2/0x250 [ 32.560615][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 32.565804][ T277] ? filldir+0x690/0x690 [ 32.570459][ T277] ? debug_smp_processor_id+0x17/0x20 [ 32.576039][ T277] __x64_sys_getdents64+0x7b/0x90 [ 32.581097][ T277] do_syscall_64+0x31/0x40 [ 32.585516][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.591505][ T277] RIP: 0033:0x7fbcceed11b3 [ 32.595927][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 32.615920][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 32.624572][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 32.632819][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 32.640778][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 32.649110][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 32.657256][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 32.665563][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 32.672147][ T277] CPU: 1 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 32.681098][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.691309][ T277] Call Trace: [ 32.694596][ T277] __dump_stack+0x21/0x24 [ 32.699104][ T277] dump_stack_lvl+0x1a7/0x208 [ 32.703787][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 32.709593][ T277] ? show_regs_print_info+0x18/0x18 [ 32.714865][ T277] ? __kasan_check_read+0x11/0x20 [ 32.719881][ T277] dump_stack+0x15/0x1c [ 32.724115][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 32.729797][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 32.735422][ T277] ? f2fs_get_block+0x140/0x140 [ 32.740259][ T277] ? may_link+0x3de/0x560 [ 32.744743][ T277] ? may_create+0x7d0/0x7d0 [ 32.749404][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 32.754778][ T277] f2fs_empty_dir+0xca/0x230 [ 32.759505][ T277] f2fs_rmdir+0x3f/0x70 [ 32.763769][ T277] vfs_rmdir+0x1b3/0x3e0 [ 32.768159][ T277] do_rmdir+0x230/0x630 [ 32.772408][ T277] ? d_delete_notify+0xd0/0xd0 [ 32.777152][ T277] ? getname_flags+0x206/0x500 [ 32.781982][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 32.786815][ T277] do_syscall_64+0x31/0x40 [ 32.791226][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.797100][ T277] RIP: 0033:0x7fbcceea7937 [ 32.801497][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.821397][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 32.830059][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 32.838557][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 32.846518][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 32.854853][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 32.862811][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 32.871418][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 32.877458][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 32.886489][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.896876][ T277] Call Trace: [ 32.900183][ T277] __dump_stack+0x21/0x24 [ 32.904526][ T277] dump_stack_lvl+0x1a7/0x208 [ 32.909353][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 32.915522][ T277] ? show_regs_print_info+0x18/0x18 [ 32.920796][ T277] ? __kasan_check_read+0x11/0x20 [ 32.925909][ T277] dump_stack+0x15/0x1c [ 32.930150][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 32.935521][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 32.941153][ T277] ? f2fs_get_block+0x140/0x140 [ 32.945988][ T277] ? __kasan_check_read+0x11/0x20 [ 32.951001][ T277] ? memset+0x35/0x40 [ 32.955064][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 32.960228][ T277] f2fs_readdir+0x457/0x970 [ 32.964946][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 32.970320][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 32.975119][ T277] ? __kasan_check_write+0x14/0x20 [ 32.980535][ T277] iterate_dir+0x260/0x570 [ 32.985032][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 32.990316][ T277] __se_sys_getdents64+0xf2/0x250 [ 32.995433][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 33.001004][ T277] ? filldir+0x690/0x690 [ 33.005541][ T277] ? debug_smp_processor_id+0x17/0x20 [ 33.011002][ T277] __x64_sys_getdents64+0x7b/0x90 [ 33.016207][ T277] do_syscall_64+0x31/0x40 [ 33.021045][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.026938][ T277] RIP: 0033:0x7fbcceed11b3 [ 33.031522][ T277] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 33.051492][ T277] RSP: 002b:00007ffd35c94048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 33.060265][ T277] RAX: ffffffffffffffda RBX: 000055557061c950 RCX: 00007fbcceed11b3 [ 33.068228][ T277] RDX: 0000000000008000 RSI: 000055557061c980 RDI: 0000000000000006 [ 33.076440][ T277] RBP: 000055557061c980 R08: 00007fbccf0f8e20 R09: 0000000000000001 [ 33.084524][ T277] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557061c954 [ 33.092718][ T277] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd35c973e0 [ 33.102106][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 33.108214][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 33.117075][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 33.127218][ T277] Call Trace: [ 33.130520][ T277] __dump_stack+0x21/0x24 [ 33.134863][ T277] dump_stack_lvl+0x1a7/0x208 [ 33.139835][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 33.145631][ T277] ? show_regs_print_info+0x18/0x18 [ 33.150947][ T277] ? __kasan_check_read+0x11/0x20 [ 33.155976][ T277] dump_stack+0x15/0x1c [ 33.160132][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 33.165586][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 33.171128][ T277] ? f2fs_get_block+0x140/0x140 [ 33.176160][ T277] ? may_link+0x3de/0x560 [ 33.180580][ T277] ? may_create+0x7d0/0x7d0 [ 33.185222][ T277] f2fs_get_lock_data_page+0x59/0x230 [ 33.190603][ T277] f2fs_empty_dir+0xca/0x230 [ 33.195191][ T277] f2fs_rmdir+0x3f/0x70 [ 33.200192][ T277] vfs_rmdir+0x1b3/0x3e0 [ 33.204519][ T277] do_rmdir+0x230/0x630 [ 33.208756][ T277] ? d_delete_notify+0xd0/0xd0 [ 33.213621][ T277] ? getname_flags+0x206/0x500 [ 33.218719][ T277] __x64_sys_unlinkat+0xc7/0xf0 [ 33.223754][ T277] do_syscall_64+0x31/0x40 [ 33.228165][ T277] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.234402][ T277] RIP: 0033:0x7fbcceea7937 [ 33.238926][ T277] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.259263][ T277] RSP: 002b:00007ffd35c94078 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 33.268019][ T277] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbcceea7937 [ 33.276238][ T277] RDX: 0000000000000200 RSI: 00007ffd35c95220 RDI: 00000000ffffff9c [ 33.284231][ T277] RBP: 00007fbccef3e048 R08: 0000000000018680 R09: 0000000000000001 [ 33.292526][ T277] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd35c95220 [ 33.300922][ T277] R13: 00007fbccef3e048 R14: 00005555705f94e8 R15: 00007ffd35c973e0 [ 33.309469][ T277] F2FS-fs (loop0): access invalid blkaddr:36 [ 33.315465][ T277] CPU: 0 PID: 277 Comm: syz-executor Tainted: G B syzkaller #0 [ 33.324945][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 33.335436][ T277] Call Trace: [ 33.338741][ T277] __dump_stack+0x21/0x24 [ 33.343251][ T277] dump_stack_lvl+0x1a7/0x208 [ 33.347964][ T277] ? f2fs_get_next_page_offset+0x760/0x760 [ 33.354023][ T277] ? show_regs_print_info+0x18/0x18 [ 33.359521][ T277] ? __kasan_check_read+0x11/0x20 [ 33.364553][ T277] dump_stack+0x15/0x1c [ 33.368721][ T277] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 33.374253][ T277] f2fs_get_read_data_page+0x3e7/0x7a0 [ 33.380159][ T277] ? f2fs_get_block+0x140/0x140 [ 33.385108][ T277] ? __kasan_check_read+0x11/0x20 [ 33.390115][ T277] ? memset+0x35/0x40 [ 33.394080][ T277] f2fs_find_data_page+0x18f/0x3f0 [ 33.399273][ T277] f2fs_readdir+0x457/0x970 [ 33.403845][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 33.409029][ T277] ? fsnotify_perm+0x31b/0x4b0 [ 33.413861][ T277] ? __kasan_check_write+0x14/0x20 [ 33.419069][ T277] iterate_dir+0x260/0x570 [ 33.423568][ T277] ? f2fs_fill_dentries+0xcd0/0xcd0 [ 33.428841][ T277] __se_sys_getdents64+0xf2/0x250 [ 33.433938][ T277] ? __x64_sys_getdents64+0x90/0x90 [ 33.439128][ T277] ? filldir+0x690/0x690 [ 33.443581][ T277] ? debug_smp_processor_id+0x17/0x20 [ 33.449214][ T277] __x64_sys_getdents64+0x7b/0x90