last executing test programs: 4.098957081s ago: executing program 3 (id=480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000000)="f461a9bbc95c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) listen(r0, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x1ff, r0, 'id0\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x28}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shmdt(0x0) r8 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$binfmt_script(r8, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r9, 0x10001, 0x0) mprotect(&(0x7f000059a000/0x3000)=nil, 0x3000, 0xa) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r7, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.007540886s ago: executing program 3 (id=491): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x46, &(0x7f0000000100)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x8, 0xfffffffffffffe67, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0x3]}, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2}, 0xfffffff0}], 0x1, 0x40012140, &(0x7f0000000a00)) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.433300265s ago: executing program 1 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x37}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x20008844) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000003ac0)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001c00010000000000001000000a000000", @ANYRES32=r7, @ANYBLOB="00005e0014000100fc0200000000000000000000000000002a8c8cbd3b9f388fd477d8a15f19d1fb2bdb2db72a577ac45ec448c73fc265f4451239f32e54eb2bf18d12608e4f8a43791da3816b6a"], 0x30}}, 0x4000040) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) 2.119766321s ago: executing program 3 (id=504): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.53138074s ago: executing program 1 (id=508): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff47, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) 1.526261246s ago: executing program 0 (id=509): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x46, &(0x7f0000000100)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x8, 0xfffffffffffffe67, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0x3]}, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2}, 0xfffffff0}], 0x1, 0x40012140, &(0x7f0000000a00)) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.513901987s ago: executing program 1 (id=510): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 1.458360972s ago: executing program 1 (id=512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) fcntl$setstatus(r3, 0x4, 0x40800) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {}, 0x1}, 0x18) sendfile(r3, r2, 0x0, 0x1000000000000a) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14}}, 0x3c}}, 0x0) 1.379598993s ago: executing program 0 (id=514): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@checkpoint_diasble}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x16}}, {@adaptive_mode}, {@noacl}, {@fsync_mode_posix}, {@jqfmt_vfsv0}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0x1000000}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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") 1.350297719s ago: executing program 4 (id=516): r0 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0), &(0x7f0000000180)=0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x4}, &(0x7f000000ac00)=0x28) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x10, 0xffff}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x24004800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 1.295482709s ago: executing program 4 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180), 0x0, 0x4854, &(0x7f0000000140)={0x11, 0x1c, r2, 0x1, 0xd8, 0x6, @random="cb14417b2184"}, 0x14) 1.250909667s ago: executing program 4 (id=518): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0xf, 0x4, 0x2, 0x87, 0xe717, 0x40}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x1, 0x9, 0x10, 0x9, 0x5, "952306fea071565408ee799014b54fb6dd7a28"}) syz_open_dev$ptys(0xc, 0x3, 0x0) 1.242196136s ago: executing program 3 (id=519): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@clear_cache}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x2d, 0x32, 0x36, 0x32, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000040)=0x1, 0xd, 0x2, 0x0, 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.135516661s ago: executing program 4 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x1, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.132812206s ago: executing program 0 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x168, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MASTER={0x8}, @IFLA_PROTO_DOWN={0x5}, @IFLA_LINK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8}, @IFLA_AF_SPEC={0xf4, 0x1a, 0x0, 0x1, [@AF_INET6={0x21, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x19}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x24}, @IFLA_INET6_TOKEN={0x0, 0x7, @private0}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x168}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000), 0xff, 0x50d4, &(0x7f00000051c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18) fallocate(r2, 0x1, 0x0, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="66000000000000000000000000a5"]) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="0e8ab57c68947ac200a430a89ed78d3a6291d381e762009e5931802528e949267b02e5b968a273b9700eba98b30d7e7b9ad4ac321afe34a01a6d18734db33b7c992ab8152a84d833bd299f5218cb719509b23d892fe829feed83fa6b0a04822161b658fad0d702468aacef98b1cabef8d5863d60922f375193a802ca0e1203957e508b9a7686eb", 0x87}, {&(0x7f0000000180)="7be2d17446a6a2daa7f3c1ba5bd5113b268973e1eb3ac58b242ae50d4780bfe486d34257dc6b84dd3d16d6933bccf7da6518a3c2e09bc129709e5003f3668b4f2b699f7bbb112665e82c964447423c50c4f9f1e3bf9546b7fd0e573eb2b20e31e1106fe618d7355362eab6a3ac78379783b21d245d4d30a1115dc19515d22122fff79b1e78c676d6d41b", 0x8a}, {&(0x7f0000000240)="51d79df531fd64475a7315cffcaf96ecde150e4d956e61f7d156c32dd7bb8abebabde71ee1257b7171f9448b0f12666fe6202c6cfb870981ddddb2003d3fae6d93046b5c5885efed7cba8c44886c777eb86fe9a20d48ee781304195d0eb0dc94ee08615bdf2f61acb9bd1cf462e489631c6a24", 0x73}, {0xffffffffffffffff}, {&(0x7f00000002c0)="f1e47788df8e73f63bf97505b81d1db98bccafc8f2e931661e4e0cf45d981e593c98ff9aa2e0bf91956d2c7f72334e871f4e339fef0a07a349a1d0e4b2edf5ff6754f1fac5471e73eac4358bc5c27e10953aea583b79c08855ab787cbb9c851fd933b781f97d47", 0x67}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) 1.046509057s ago: executing program 4 (id=524): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f000000df00)={[{@nodiscard}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@grpjquota}, {@noflush_merge}, {@nocheckpoint_merge}, {@acl}, {@gc_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@background_gc_off}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cJg5EcQB+Nnhh/2nRau/byt6gjC1hj3uMKCBNUEAOpIU0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALt1X68Xt1e/rtjm7fTt5RgMAAABcsq3Wi/qfWep/be5/b279bPpFRJQRcWnuPopPZ5mjJqd6ef7m9PnqVQ13EXXC4T0mzfUlIv401+OPrj8FAAAA+Lg2y9U8zdbTn9nQBdGntGhTfvubKa+IiGr2kCmtPOT9yhRWf7/H8T9TWr2ANc0UlpbcxrnS3qT+uR9X7aYnTZGa8uLLjkVmGzsAANCj0VnT7ywEAACAPv0bugCGUcTzVuZxK3CSmmZ77/NZDwAAAHiHiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zc7OxlbFNcoeIqLgQS92u62tvYkHJXjwTxBCuq2xW3+0OdhSxFy8Sc69iB5FBCXe+j/0nEAu8ZbDHiJ4jszszO7kB7j+6Mwm+XzgzfvuMMz7vlkI+c57CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBh+O4kjtNDexQ38nObew+W037rUJ96tL69kLY0jqpM+mR4ufwh6ozDvTqSAQAA4GyIi/o+hLCTbCymfaOd1f9JcU1a83//7Cgu6vnDdX/RF7V/2n77dffF8UDt0TjpTW+sDPoXj6bSfHKznG3P/e0VzezJZ+9e4uwLaXyw9sIwyZ5n9O3jx++1snCuimwBgH/jQtHnQfH7UNr36kwMgDOjWSq8i/o/btebEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAVhmvh6SKOQggLzUmc2tp7sHxc/2h9e6FoVx8+XA9fT+6Z3iIJIdxYGfQvVjqb2Xb33v1bS4NB/071wSshhLpGfyef/q2Pprg4hFqej+D/Cfbn8i97RvI5IUGNP5QAADiVkryldf1OsrGYnovmQ9j/4WD9/3opDlPW/7sfX90sj1Wu/3uVzXD2dVdvf969e+/+myu3l272b/Y/fetS7+3e5WtXrlzrZu9Kut6YAAAA8N+08lau/xvzR9f/z5fiMGX9/8V3va/KY8Xq/2NNFv3qzgQAAOBse/7VP/+IjjkftVrhy6XV1Tu90XH8+dLoWEOq/9hc3sr1fzxfd1YAAABAFYZr0YH1/+ulOEy5/v/Mjy/9XL5nHEI4l6//X1j+bHC9uunMtCr+nLjuOQIAAFCvc3krr/8n2f7/xnjLQyOE8MZrozj/N4BT1f/x+9/8VB6rvP//cnVTnEmNzuh5ZH0nhGan7owAAAA4zZ7KW1rs/55sLH7yy/kPW/b/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//RAE/8A==") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400), 0x24, 0x2) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file5\x00') mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) 996.81124ms ago: executing program 2 (id=525): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x46, &(0x7f0000000100)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x8, 0xfffffffffffffe67, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0x3]}, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2}, 0xfffffff0}], 0x1, 0x40012140, &(0x7f0000000a00)) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 911.407708ms ago: executing program 2 (id=526): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 843.697755ms ago: executing program 2 (id=527): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 768.05251ms ago: executing program 2 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="bad330fbc9b554", 0x7, 0x4854, &(0x7f0000000140)={0x11, 0x1c, r2, 0x1, 0xd8, 0x6, @random="cb14417b2184"}, 0x14) 759.786105ms ago: executing program 2 (id=529): r0 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='mqueue\x00', 0x2200011, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x20000400) mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_max_data_len={{0x6}, {0x6, 0xd, 0xfffb, 0x7f, 0x6}}}}, 0xf) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10, 0xffff}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x24004800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 735.161124ms ago: executing program 3 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xf, 0xfff2}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1e9e2}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60ea}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)="fcf47e6bb4", 0x5}], 0x1, 0x0, 0x0, 0x900}, 0x0) 631.325961ms ago: executing program 2 (id=531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xd}, 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0xba, 0x8, 0x9}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000380)={0x7, {0x0, 0x1000, 0x5, 0x7}, {0x7, 0x4, 0x10000, 0x5}, {0x7fff, 0x9}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x8000000000000000, 0x2) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', '', [{0x20, '6\xeem/\x97\x8b\xae\xc0\xb0\x9cA\xe4m\x8b\x93\xf8T?\xb7#VR0U\x8c\x90 \xb1\xe1\x96\x1b\x94K\xd3\xe7^f$\xc8\xf9a\x89\x9b\x84\x88\x1bU\xeb\xd6}no\xe6\rS\x0e \xae\x02\xd2\xf2k\x19\x9bN\xf9\x99\xd13|\n\xbe\xa3cD\xf3V\xb9\xe5h\xe6/}_7\b]\x99G\xa0\xf8KP\xa2\xd0\x8d\xb5yk\x8b$l\xf6\a}\x18\xe5\x9d\xc0\xfc#\xa1\x9c\x98\x0eY\x96\x90\x13\xe9\xd9\x8dNe)\xca^\x89\x1el\xc8\xf0\x88\x98\x16mc\x81k)\xe1?\va\xc6\x15q\xa0\x90\'\x03_\xc2\xe4\xf2\xc1\x06!/r\xb1\xef\xad\b\x00\x00\x00&U\xb3q\xc6q0*\x13\xecuF/\xffY\xe5'}, {0x20, '\'+}}/'}, {0x20, '\x02\x00qx'}, {0x20, 'ver\x92'}, {0x20, '-'}], 0xa, "928e134c2a367ce7de9fb8f399343482dcbfb7145e68cea5601fa2ec3371c12639cb2fe7060159b98838886bf774f7f629a1ba8d07e126703d325edf22129a1c2c2bbba7"}, 0x112) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x2, 0xfffffffffffffeb0) sendfile(r0, r2, 0x0, 0x8000002b) 630.813319ms ago: executing program 4 (id=532): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079004f000000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) 545.098973ms ago: executing program 3 (id=533): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff47, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) 259.504998ms ago: executing program 0 (id=534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x1, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 99.650562ms ago: executing program 1 (id=535): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x0) 98.549365ms ago: executing program 0 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x10) 57.744029ms ago: executing program 1 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x4c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x67, 0x300, 0x9, 0x1, 0x0, @remote, @remote}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) 0s ago: executing program 0 (id=538): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x28}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 27 [ 42.098731][ T6988] CPU: 1 UID: 0 PID: 6988 Comm: syz.4.92 Not tainted syzkaller #0 PREEMPT [ 42.098741][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 42.098748][ T6988] Call trace: [ 42.098751][ T6988] show_stack+0x2c/0x3c (C) [ 42.098767][ T6988] __dump_stack+0x30/0x40 [ 42.098777][ T6988] dump_stack_lvl+0xd8/0x12c [ 42.098784][ T6988] dump_stack+0x1c/0x28 [ 42.098791][ T6988] f2fs_handle_critical_error+0x34c/0x4b8 [ 42.098802][ T6988] f2fs_stop_checkpoint+0x5c/0x70 [ 42.098810][ T6988] f2fs_write_end_io+0x768/0xa70 [ 42.098815][ T6988] bio_endio+0x858/0x894 [ 42.098821][ T6988] submit_bio_noacct+0x158/0x177c [ 42.098829][ T6988] submit_bio+0x3b4/0x550 [ 42.098837][ T6988] f2fs_submit_write_bio+0x13c/0x324 [ 42.098846][ T6988] __submit_merged_bio+0x254/0x704 [ 42.098855][ T6988] __submit_merged_write_cond+0x23c/0x4ac [ 42.098864][ T6988] f2fs_write_data_pages+0x1d28/0x2634 [ 42.098874][ T6988] do_writepages+0x270/0x468 [ 42.098884][ T6988] filemap_fdatawrite+0x14c/0x1f4 [ 42.098894][ T6988] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 42.098902][ T6988] f2fs_write_checkpoint+0x690/0x16a0 [ 42.098910][ T6988] kill_f2fs_super+0x21c/0x584 [ 42.098919][ T6988] deactivate_locked_super+0xc4/0x12c [ 42.098927][ T6988] deactivate_super+0xe0/0x100 [ 42.098933][ T6988] cleanup_mnt+0x31c/0x3ac [ 42.098941][ T6988] __cleanup_mnt+0x20/0x30 [ 42.098949][ T6988] task_work_run+0x1dc/0x260 [ 42.098958][ T6988] exit_to_user_mode_loop+0xfc/0x168 [ 42.098968][ T6988] el0_svc+0x170/0x254 [ 42.098975][ T6988] el0t_64_sync_handler+0x84/0x12c [ 42.098980][ T6988] el0t_64_sync+0x198/0x19c [ 42.099000][ T6988] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 42.224580][ T7006] loop2: detected capacity change from 0 to 32768 [ 42.237797][ T7006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.99 (7006) [ 42.246333][ T7006] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 42.246420][ T7006] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 42.276439][ T7006] BTRFS info (device loop2): enabling ssd optimizations [ 42.278937][ T7006] BTRFS info (device loop2): enabling free space tree [ 42.466658][ T7058] smc: net device bond0 applied user defined pnetid SYZ2 [ 42.506355][ T6550] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 42.667495][ T6558] Bluetooth: hci4: command 0x0c1a tx timeout [ 42.667507][ T6553] Bluetooth: hci3: command 0x0c1a tx timeout [ 42.667558][ T6553] Bluetooth: hci2: command 0x0c1a tx timeout [ 42.667579][ T6553] Bluetooth: hci1: command 0x0c1a tx timeout [ 42.680365][ T7070] loop2: detected capacity change from 0 to 8192 [ 42.776439][ T7072] loop0: detected capacity change from 0 to 32768 [ 42.816650][ T7085] FAULT_INJECTION: forcing a failure. [ 42.816650][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 42.819033][ T7085] CPU: 0 UID: 0 PID: 7085 Comm: syz.2.118 Not tainted syzkaller #0 PREEMPT [ 42.819044][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 42.819048][ T7085] Call trace: [ 42.819051][ T7085] show_stack+0x2c/0x3c (C) [ 42.819064][ T7085] __dump_stack+0x30/0x40 [ 42.819070][ T7085] dump_stack_lvl+0xd8/0x12c [ 42.819076][ T7085] dump_stack+0x1c/0x28 [ 42.819081][ T7085] should_fail_ex+0x41c/0x594 [ 42.819087][ T7085] should_failslab+0xc0/0x128 [ 42.819094][ T7085] __kmalloc_cache_noprof+0x80/0x3fc [ 42.819101][ T7085] alloc_pipe_info+0xf0/0x4d8 [ 42.819106][ T7085] splice_direct_to_actor+0x7b8/0x994 [ 42.819112][ T7085] do_splice_direct+0x130/0x210 [ 42.819116][ T7085] do_sendfile+0x3cc/0x658 [ 42.819121][ T7085] __arm64_sys_sendfile64+0x1b4/0x274 [ 42.819126][ T7085] invoke_syscall+0x98/0x254 [ 42.819132][ T7085] el0_svc_common+0x130/0x23c [ 42.819137][ T7085] do_el0_svc+0x48/0x58 [ 42.819142][ T7085] el0_svc+0x5c/0x254 [ 42.819148][ T7085] el0t_64_sync_handler+0x84/0x12c [ 42.819153][ T7085] el0t_64_sync+0x198/0x19c [ 42.851023][ T7083] fuse: Bad value for 'group_id' [ 42.851072][ T7083] fuse: Bad value for 'group_id' [ 42.855550][ T7072] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 43.222781][ T7104] loop4: detected capacity change from 0 to 256 [ 43.291685][ T7111] tipc: Enabling of bearer rejected, already enabled [ 43.295484][ T7111] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 43.296931][ T7111] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 43.329611][ T7111] tipc: Resetting bearer [ 43.375900][ T7124] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 43.377465][ T7124] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 43.503799][ T7130] loop3: detected capacity change from 0 to 32768 [ 43.528645][ T7130] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 43.560510][ T7130] XFS (loop3): Ending clean mount [ 43.590755][ T6543] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 43.600340][ T6542] ocfs2: Unmounting device (7,0) on (node local) [ 43.800599][ T7144] loop0: detected capacity change from 0 to 32768 [ 43.857618][ T7144] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4:15,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 43.861454][ T7144] allowing incompatible features above 0.0: (unknown version) [ 43.862962][ T7144] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 43.865519][ T7144] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 43.866927][ T7144] bcachefs (loop0): initializing new filesystem [ 43.869811][ T7144] bcachefs (loop0): going read-write [ 43.908860][ T7144] bcachefs (loop0): marking superblocks [ 43.911099][ T7149] loop3: detected capacity change from 0 to 32768 [ 43.918103][ T7144] bcachefs (loop0): initializing freespace [ 43.920349][ T7144] bcachefs (loop0): done initializing freespace [ 43.922060][ T7144] bcachefs (loop0): reading snapshots table [ 43.923097][ T7144] bcachefs (loop0): reading snapshots done [ 43.939452][ T7144] bcachefs (loop0): done starting filesystem [ 43.984125][ T7164] FAULT_INJECTION: forcing a failure. [ 43.984125][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 43.984159][ T7164] CPU: 0 UID: 0 PID: 7164 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT [ 43.984170][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 43.984176][ T7164] Call trace: [ 43.984180][ T7164] show_stack+0x2c/0x3c (C) [ 43.984195][ T7164] __dump_stack+0x30/0x40 [ 43.984203][ T7164] dump_stack_lvl+0xd8/0x12c [ 43.984208][ T7164] dump_stack+0x1c/0x28 [ 43.984214][ T7164] should_fail_ex+0x41c/0x594 [ 43.984220][ T7164] should_failslab+0xc0/0x128 [ 43.984227][ T7164] kmem_cache_alloc_node_noprof+0x88/0x3f4 [ 43.984235][ T7164] dup_task_struct+0x70/0x7a0 [ 43.984241][ T7164] copy_process+0x480/0x31ec [ 43.984246][ T7164] kernel_clone+0x1d8/0x84c [ 43.984252][ T7164] __arm64_sys_clone3+0x308/0x348 [ 43.984257][ T7164] invoke_syscall+0x98/0x254 [ 43.984264][ T7164] el0_svc_common+0x130/0x23c [ 43.984273][ T7164] do_el0_svc+0x48/0x58 [ 43.984279][ T7164] el0_svc+0x5c/0x254 [ 43.984285][ T7164] el0t_64_sync_handler+0x84/0x12c [ 43.984290][ T7164] el0t_64_sync+0x198/0x19c [ 44.019254][ T6558] Bluetooth: hci0: command 0x0c1a tx timeout [ 44.035087][ T7149] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 44.041283][ T7149] allowing incompatible features above 0.0: (unknown version) [ 44.041325][ T7149] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 44.041356][ T7149] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 44.041432][ T7149] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 44.041533][ T7149] bcachefs (loop3): Version upgrade required: [ 44.041533][ T7149] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 44.041533][ T7149] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 44.041533][ T7149] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 44.065390][ T7149] bcachefs (loop3): dropping and reconstructing all alloc info [ 44.072460][ T7149] bcachefs (loop3): accounting_read... done [ 44.128792][ T7149] bcachefs (loop3): alloc_read... done [ 44.132245][ T7149] bcachefs (loop3): snapshots_read... done [ 44.140331][ T7149] bcachefs (loop3): check_allocations... [ 44.146740][ T7173] tipc: Enabling of bearer rejected, failed to enable media [ 44.154977][ T7149] done [ 44.156591][ T7149] bcachefs (loop3): going read-write [ 44.160327][ T6542] bcachefs (loop0): shutting down [ 44.160386][ T6542] bcachefs (loop0): going read-only [ 44.160415][ T6542] bcachefs (loop0): finished waiting for writes to stop [ 44.184501][ T7149] bcachefs (loop3): done starting filesystem [ 44.186078][ T6542] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 44.221505][ T6542] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 44.224638][ T6542] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 44.225090][ T6542] bcachefs (loop0): marking filesystem clean [ 44.259776][ T6543] bcachefs (loop3): shutting down [ 44.261264][ T6543] bcachefs (loop3): going read-only [ 44.262166][ T6543] bcachefs (loop3): finished waiting for writes to stop [ 44.272863][ T6542] bcachefs (loop0): shutdown complete [ 44.301924][ T6543] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 44.307383][ T6543] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 44.316318][ T6543] bcachefs (loop3): unclean shutdown complete, journal seq 12 [ 44.319843][ T6543] bcachefs (loop3): done going read-only, filesystem not clean [ 44.352591][ T6543] bcachefs (loop3): shutdown complete [ 44.721896][ T7201] loop0: detected capacity change from 0 to 40427 [ 44.722384][ T7201] F2FS-fs: heap/no_heap options were deprecated [ 44.727197][ T7201] F2FS-fs (loop0): build fault injection rate: 19 [ 44.727307][ T7201] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 44.732040][ T7201] F2FS-fs (loop0): invalid crc value [ 44.737215][ T6557] Bluetooth: hci4: command 0x0c1a tx timeout [ 44.738625][ T7201] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 44.747560][ T6558] Bluetooth: hci2: command 0x0c1a tx timeout [ 44.747663][ T6558] Bluetooth: hci3: command 0x0c1a tx timeout [ 44.748097][ T6557] Bluetooth: hci1: command 0x0c1a tx timeout [ 44.769370][ T7201] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 44.776429][ T7201] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 44.780716][ T7201] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.795983][ T7201] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 44.805127][ T7201] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0xe4/0x6d0 [ 44.833648][ T6542] syz-executor: attempt to access beyond end of device [ 44.833648][ T6542] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.833707][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 44.833718][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.833724][ T6542] Call trace: [ 44.833727][ T6542] show_stack+0x2c/0x3c (C) [ 44.833741][ T6542] __dump_stack+0x30/0x40 [ 44.833748][ T6542] dump_stack_lvl+0xd8/0x12c [ 44.833754][ T6542] dump_stack+0x1c/0x28 [ 44.833759][ T6542] f2fs_handle_critical_error+0x34c/0x4b8 [ 44.833767][ T6542] f2fs_stop_checkpoint+0x5c/0x70 [ 44.833773][ T6542] f2fs_write_end_io+0x768/0xa70 [ 44.833778][ T6542] bio_endio+0x858/0x894 [ 44.833784][ T6542] submit_bio_noacct+0x158/0x177c [ 44.833790][ T6542] submit_bio+0x3b4/0x550 [ 44.833796][ T6542] f2fs_submit_write_bio+0x13c/0x324 [ 44.833802][ T6542] __submit_merged_bio+0x254/0x704 [ 44.833809][ T6542] __submit_merged_write_cond+0x23c/0x4ac [ 44.833815][ T6542] f2fs_write_data_pages+0x1d28/0x2634 [ 44.833822][ T6542] do_writepages+0x270/0x468 [ 44.833830][ T6542] filemap_fdatawrite+0x14c/0x1f4 [ 44.833836][ T6542] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 44.833842][ T6542] f2fs_write_checkpoint+0x690/0x16a0 [ 44.833848][ T6542] kill_f2fs_super+0x21c/0x584 [ 44.833855][ T6542] deactivate_locked_super+0xc4/0x12c [ 44.833861][ T6542] deactivate_super+0xe0/0x100 [ 44.833866][ T6542] cleanup_mnt+0x31c/0x3ac [ 44.833872][ T6542] __cleanup_mnt+0x20/0x30 [ 44.833878][ T6542] task_work_run+0x1dc/0x260 [ 44.833885][ T6542] exit_to_user_mode_loop+0xfc/0x168 [ 44.833892][ T6542] el0_svc+0x170/0x254 [ 44.833899][ T6542] el0t_64_sync_handler+0x84/0x12c [ 44.833903][ T6542] el0t_64_sync+0x198/0x19c [ 44.833922][ T6542] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 44.945246][ T7221] loop4: detected capacity change from 0 to 2048 [ 44.950167][ T7221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 44.960433][ T7221] warning: `syz.4.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 44.971486][ T7227] rdma_rxe: rxe_newlink: failed to add lo [ 44.987923][ T7221] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 45.072720][ T7232] loop4: detected capacity change from 0 to 1024 [ 45.073129][ T7232] hfsplus: Bad value for 'gid' [ 45.085001][ T7232] loop4: detected capacity change from 0 to 47 [ 45.085368][ T7232] minix: Unknown parameter '0000000000000000' [ 45.156941][ T7227] loop1: detected capacity change from 0 to 40427 [ 45.160652][ T7227] F2FS-fs: inline encryption not supported [ 45.161671][ T7227] F2FS-fs: heap/no_heap options were deprecated [ 45.162985][ T7227] F2FS-fs (loop1): Image doesn't support compression [ 45.164088][ T7227] F2FS-fs (loop1): build fault injection rate: 688 [ 45.166149][ T7227] F2FS-fs (loop1): invalid crc value [ 45.220720][ T7227] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 45.227404][ T7227] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.241625][ T7227] rdma_rxe: rxe_newlink: failed to add syz_tun [ 45.248518][ T7236] loop0: detected capacity change from 0 to 32768 [ 45.282968][ T7233] loop2: detected capacity change from 0 to 32768 [ 45.284918][ T7233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.161 (7233) [ 45.303414][ T7233] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.303484][ T7233] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 45.303511][ T7233] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 45.349308][ T7233] BTRFS info (device loop2): rebuilding free space tree [ 45.361252][ T7232] loop4: detected capacity change from 0 to 32768 [ 45.361406][ T7233] BTRFS info (device loop2): disabling free space tree [ 45.361431][ T7233] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 45.361439][ T7233] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 45.372332][ T7233] BTRFS info (device loop2): enabling ssd optimizations [ 45.372366][ T7233] BTRFS info (device loop2): enabling disk space caching [ 45.372385][ T7233] BTRFS info (device loop2): force clearing of disk cache [ 45.372391][ T7233] BTRFS info (device loop2): enabling auto defrag [ 45.372398][ T7233] BTRFS info (device loop2): force zlib compression, level 3 [ 45.372404][ T7233] BTRFS info (device loop2): max_inline set to 0 [ 45.404774][ T7236] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=compression=zstd [ 45.404802][ T7236] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 45.404827][ T7236] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 45.404891][ T7236] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 45.404928][ T7236] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 45.404928][ T7236] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 45.430984][ T7236] bcachefs (loop0): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 45.431131][ T7236] bcachefs (loop0): check_topology... [ 45.433758][ T2116] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 45.441661][ T7236] done [ 45.441717][ T7236] bcachefs (loop0): accounting_read... [ 45.460685][ T7232] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 45.460726][ T7232] allowing incompatible features above 0.0: (unknown version) [ 45.487988][ T7232] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 45.488069][ T7232] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 45.488161][ T7232] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 45.488242][ T7232] bcachefs (loop4): Version upgrade required: [ 45.488242][ T7232] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 45.488242][ T7232] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 45.488242][ T7232] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 45.509959][ T7232] bcachefs (loop4): dropping and reconstructing all alloc info [ 45.514321][ T7236] done [ 45.514356][ T7236] bcachefs (loop0): alloc_read... done [ 45.515626][ T7236] bcachefs (loop0): snapshots_read... done [ 45.517918][ T7236] bcachefs (loop0): check_allocations... [ 45.520004][ T7236] bcachefs (loop0): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 45.520068][ T7236] bcachefs (loop0): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 45.524989][ T6550] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.532106][ T7232] bcachefs (loop4): accounting_read... done [ 45.560056][ T7232] bcachefs (loop4): alloc_read... done [ 45.562404][ T7232] bcachefs (loop4): snapshots_read... [ 45.562999][ T7236] done [ 45.566602][ T7232] done [ 45.566654][ T7232] bcachefs (loop4): check_allocations... [ 45.586569][ T7236] bcachefs (loop0): going read-write [ 45.591312][ T7236] bcachefs (loop0): journal_replay... [ 45.592377][ T7232] done [ 45.593641][ T7232] bcachefs (loop4): going read-write [ 45.609999][ T7232] bcachefs (loop4): done starting filesystem [ 45.622381][ T7281] loop3: detected capacity change from 0 to 128 [ 45.623949][ T7281] ext3: Unknown parameter 'noacl' [ 45.676747][ T7236] done [ 45.677061][ T7236] bcachefs (loop0): check_lrus... done [ 45.682809][ T7236] bcachefs (loop0): check_backpointers_to_extents... done [ 45.686659][ T7236] bcachefs (loop0): check_extents_to_backpointers... done [ 45.693508][ T7236] bcachefs (loop0): check_inodes... done [ 45.694659][ T7236] bcachefs (loop0): resume_logged_ops... done [ 45.694991][ T7236] bcachefs (loop0): delete_dead_inodes... done [ 45.696731][ T7236] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 45.696741][ T7236] bcachefs (loop0): check_extents_to_backpointers... [ 45.698626][ T7236] bcachefs (loop0): scanning for missing backpointers in 1/512 buckets [ 45.701829][ T7236] done [ 45.703088][ T7236] bcachefs (loop0): check_inodes... done [ 45.703575][ T7236] bcachefs (loop0): resume_logged_ops... done [ 45.704135][ T7236] bcachefs (loop0): delete_dead_inodes... done [ 45.705092][ T7236] bcachefs (loop0): done starting filesystem [ 45.758422][ T7232] bcachefs (loop4): shutting down [ 45.758451][ T7232] bcachefs (loop4): going read-only [ 45.758476][ T7232] bcachefs (loop4): finished waiting for writes to stop [ 45.773560][ T7281] loop3: detected capacity change from 0 to 40427 [ 45.783733][ T7281] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 45.785078][ T7281] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.807970][ T7232] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 45.821017][ T7232] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 45.828414][ T7286] netlink: 152 bytes leftover after parsing attributes in process `syz.1.163'. [ 45.832203][ T7232] bcachefs (loop4): unclean shutdown complete, journal seq 12 [ 45.832970][ T7232] bcachefs (loop4): done going read-only, filesystem not clean [ 45.847062][ T7281] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 45.853901][ T7281] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.856911][ T7232] bcachefs (loop4): shutdown complete [ 45.862185][ T7281] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.044433][ T6542] bcachefs (loop0): shutting down [ 46.044457][ T6542] bcachefs (loop0): going read-only [ 46.044483][ T6542] bcachefs (loop0): finished waiting for writes to stop [ 46.063243][ T6542] bcachefs (loop0): flushing journal and stopping allocators, journal seq 19 [ 46.086084][ T6542] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 21 [ 46.088992][ T6542] bcachefs (loop0): clean shutdown complete, journal seq 22 [ 46.089537][ T6542] bcachefs (loop0): marking filesystem clean [ 46.097648][ T6557] Bluetooth: hci0: command 0x0c1a tx timeout [ 46.124729][ T6542] bcachefs (loop0): shutdown complete [ 46.311187][ T7310] rdma_rxe: rxe_newlink: failed to add lo [ 46.369399][ T7307] loop2: detected capacity change from 0 to 32768 [ 46.374352][ T7307] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.172 (7307) [ 46.392317][ T7307] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.392411][ T7307] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 46.392443][ T7307] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 46.449878][ T7310] loop4: detected capacity change from 0 to 40427 [ 46.451594][ T7310] F2FS-fs: inline encryption not supported [ 46.453550][ T7310] F2FS-fs: heap/no_heap options were deprecated [ 46.459425][ T7310] F2FS-fs (loop4): Image doesn't support compression [ 46.460696][ T7310] F2FS-fs (loop4): build fault injection rate: 688 [ 46.471974][ T7310] F2FS-fs (loop4): invalid crc value [ 46.482669][ T7307] BTRFS info (device loop2): rebuilding free space tree [ 46.493314][ T7307] BTRFS info (device loop2): disabling free space tree [ 46.493362][ T7307] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 46.493371][ T7307] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 46.496895][ T7307] BTRFS info (device loop2): enabling ssd optimizations [ 46.496907][ T7307] BTRFS info (device loop2): enabling disk space caching [ 46.496913][ T7307] BTRFS info (device loop2): force clearing of disk cache [ 46.496919][ T7307] BTRFS info (device loop2): enabling auto defrag [ 46.496925][ T7307] BTRFS info (device loop2): force zlib compression, level 3 [ 46.496932][ T7307] BTRFS info (device loop2): max_inline set to 0 [ 46.509382][ T7310] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 46.511950][ T7310] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.525176][ T7310] syz1: rxe_newlink: already configured on syz_tun [ 46.591523][ T14] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 46.661560][ T6550] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.827696][ T6557] Bluetooth: hci1: command 0x0c1a tx timeout [ 46.828897][ T6557] Bluetooth: hci3: command 0x0c1a tx timeout [ 46.828937][ T6557] Bluetooth: hci2: command 0x0c1a tx timeout [ 46.828959][ T6557] Bluetooth: hci4: command 0x0c1a tx timeout [ 46.835445][ T7337] FAULT_INJECTION: forcing a failure. [ 46.835445][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 46.835485][ T7337] CPU: 1 UID: 0 PID: 7337 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT [ 46.835500][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 46.835507][ T7337] Call trace: [ 46.835510][ T7337] show_stack+0x2c/0x3c (C) [ 46.835524][ T7337] __dump_stack+0x30/0x40 [ 46.835531][ T7337] dump_stack_lvl+0xd8/0x12c [ 46.835537][ T7337] dump_stack+0x1c/0x28 [ 46.835542][ T7337] should_fail_ex+0x41c/0x594 [ 46.835549][ T7337] should_failslab+0xc0/0x128 [ 46.835556][ T7337] kmem_cache_alloc_node_noprof+0x88/0x3f4 [ 46.835563][ T7337] __alloc_skb+0x144/0x2ec [ 46.835570][ T7337] tcp_stream_alloc_skb+0x44/0x2c4 [ 46.835576][ T7337] tcp_sendmsg_locked+0xb18/0x4774 [ 46.835581][ T7337] tcp_sendmsg+0x40/0x64 [ 46.835586][ T7337] inet6_sendmsg+0xb4/0xd8 [ 46.835593][ T7337] sock_sendmsg+0x1f8/0x318 [ 46.835598][ T7337] splice_to_socket+0x788/0xd60 [ 46.835604][ T7337] direct_splice_actor+0xec/0x14c [ 46.835609][ T7337] splice_direct_to_actor+0x414/0x994 [ 46.835614][ T7337] do_splice_direct+0x130/0x210 [ 46.835620][ T7337] do_sendfile+0x3cc/0x658 [ 46.835625][ T7337] __arm64_sys_sendfile64+0x1b4/0x274 [ 46.835630][ T7337] invoke_syscall+0x98/0x254 [ 46.835637][ T7337] el0_svc_common+0x130/0x23c [ 46.835642][ T7337] do_el0_svc+0x48/0x58 [ 46.835648][ T7337] el0_svc+0x5c/0x254 [ 46.835654][ T7337] el0t_64_sync_handler+0x84/0x12c [ 46.835659][ T7337] el0t_64_sync+0x198/0x19c [ 47.069088][ T14] wlan1: Trigger new scan to find an IBSS to join [ 47.400950][ T7347] binder: 7346:7347 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 47.403389][ T7347] binder: 7346:7347 got transaction to invalid handle, 1 [ 47.403446][ T7347] binder: 7346:7347 cannot find target node [ 47.403459][ T7347] binder: 7346:7347 transaction call to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3151 [ 47.413911][ T7347] binder: 7346:7347 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.413949][ T7347] binder: 7347 RLIMIT_NICE not set [ 47.467870][ T7350] binder: 7346:7350 got reply transaction with no transaction stack [ 47.467905][ T7350] binder: 7346:7350 transaction reply to 0:0 failed 4/29201/-71, code 0 size 0-8192 line 3054 [ 47.537640][ T7343] loop4: detected capacity change from 0 to 40427 [ 47.539247][ T7343] F2FS-fs: heap/no_heap options were deprecated [ 47.543456][ T7343] F2FS-fs (loop4): build fault injection rate: 19 [ 47.543490][ T7343] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 47.544743][ T7343] F2FS-fs (loop4): invalid crc value [ 47.555230][ T7343] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 47.566616][ T7363] rdma_rxe: rxe_newlink: failed to add syz_tun [ 47.575919][ T7343] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 47.584618][ T7343] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 47.586318][ T7343] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.606476][ T7343] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 47.613095][ T7343] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of f2fs_zero_range+0x92c/0xc3c [ 47.619249][ T7343] CPU: 1 UID: 0 PID: 7343 Comm: syz.4.178 Not tainted syzkaller #0 PREEMPT [ 47.619280][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.619291][ T7343] Call trace: [ 47.619295][ T7343] show_stack+0x2c/0x3c (C) [ 47.619317][ T7343] __dump_stack+0x30/0x40 [ 47.619330][ T7343] dump_stack_lvl+0xd8/0x12c [ 47.619342][ T7343] dump_stack+0x1c/0x28 [ 47.619350][ T7343] f2fs_handle_critical_error+0x34c/0x4b8 [ 47.619362][ T7343] f2fs_stop_checkpoint+0x5c/0x70 [ 47.619370][ T7343] f2fs_balance_fs+0x278/0x6ec [ 47.619377][ T7343] f2fs_zero_range+0x92c/0xc3c [ 47.619385][ T7343] f2fs_fallocate+0x408/0x8ec [ 47.619392][ T7343] vfs_fallocate+0x52c/0x668 [ 47.619401][ T7343] file_ioctl+0x584/0x75c [ 47.619411][ T7343] do_vfs_ioctl+0xa10/0x1834 [ 47.619420][ T7343] __arm64_sys_ioctl+0xe4/0x1c4 [ 47.619429][ T7343] invoke_syscall+0x98/0x254 [ 47.619437][ T7343] el0_svc_common+0x130/0x23c [ 47.619444][ T7343] do_el0_svc+0x48/0x58 [ 47.619451][ T7343] el0_svc+0x5c/0x254 [ 47.619458][ T7343] el0t_64_sync_handler+0x84/0x12c [ 47.619464][ T7343] el0t_64_sync+0x198/0x19c [ 47.619483][ T7343] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 47.754865][ T7376] FAULT_INJECTION: forcing a failure. [ 47.754865][ T7376] name failslab, interval 1, probability 0, space 0, times 0 [ 47.754906][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT [ 47.754919][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.754925][ T7376] Call trace: [ 47.754928][ T7376] show_stack+0x2c/0x3c (C) [ 47.754943][ T7376] __dump_stack+0x30/0x40 [ 47.754950][ T7376] dump_stack_lvl+0xd8/0x12c [ 47.754956][ T7376] dump_stack+0x1c/0x28 [ 47.754961][ T7376] should_fail_ex+0x41c/0x594 [ 47.754967][ T7376] should_failslab+0xc0/0x128 [ 47.754974][ T7376] kmem_cache_alloc_node_noprof+0x88/0x3f4 [ 47.754981][ T7376] __alloc_skb+0x144/0x2ec [ 47.754988][ T7376] tcp_stream_alloc_skb+0x44/0x2c4 [ 47.754994][ T7376] tcp_write_xmit+0xe00/0x51a8 [ 47.755001][ T7376] tcp_push_one+0xa4/0xfc [ 47.755008][ T7376] tcp_sendmsg_locked+0x2344/0x4774 [ 47.755013][ T7376] tcp_sendmsg+0x40/0x64 [ 47.755017][ T7376] inet6_sendmsg+0xb4/0xd8 [ 47.755024][ T7376] sock_sendmsg+0x1f8/0x318 [ 47.755029][ T7376] splice_to_socket+0x788/0xd60 [ 47.755034][ T7376] direct_splice_actor+0xec/0x14c [ 47.755039][ T7376] splice_direct_to_actor+0x414/0x994 [ 47.755044][ T7376] do_splice_direct+0x130/0x210 [ 47.755049][ T7376] do_sendfile+0x3cc/0x658 [ 47.755054][ T7376] __arm64_sys_sendfile64+0x1b4/0x274 [ 47.755059][ T7376] invoke_syscall+0x98/0x254 [ 47.755065][ T7376] el0_svc_common+0x130/0x23c [ 47.755071][ T7376] do_el0_svc+0x48/0x58 [ 47.755076][ T7376] el0_svc+0x5c/0x254 [ 47.755082][ T7376] el0t_64_sync_handler+0x84/0x12c [ 47.755086][ T7376] el0t_64_sync+0x198/0x19c [ 47.990194][ T7386] loop2: detected capacity change from 0 to 4096 [ 47.998077][ T7386] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 48.082920][ T7386] ntfs3(loop2): ino=1d, mi_enum_attr [ 48.083490][ T7386] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 48.090769][ T7386] ntfs3(loop2): ino=1d, mi_enum_attr [ 48.099439][ T7386] ntfs3(loop2): ino=1d, mi_enum_attr [ 48.232677][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.232802][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.302935][ T7404] rdma_rxe: rxe_newlink: failed to add syz_tun [ 48.338723][ T7392] loop4: detected capacity change from 0 to 40427 [ 48.339115][ T7392] F2FS-fs: heap/no_heap options were deprecated [ 48.343419][ T7392] F2FS-fs (loop4): build fault injection rate: 19 [ 48.343463][ T7392] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 48.357280][ T7392] F2FS-fs (loop4): invalid crc value [ 48.371289][ T7392] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 48.393832][ T7392] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 48.405598][ T7392] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 48.414682][ T7392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.432359][ T7415] tipc: Enabling of bearer rejected, failed to enable media [ 48.433736][ T7392] CPU: 1 UID: 0 PID: 7392 Comm: syz.4.196 Not tainted syzkaller #0 PREEMPT [ 48.433747][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 48.433753][ T7392] Call trace: [ 48.433756][ T7392] show_stack+0x2c/0x3c (C) [ 48.433771][ T7392] __dump_stack+0x30/0x40 [ 48.433779][ T7392] dump_stack_lvl+0xd8/0x12c [ 48.433787][ T7392] dump_stack+0x1c/0x28 [ 48.433793][ T7392] f2fs_handle_critical_error+0x34c/0x4b8 [ 48.433804][ T7392] f2fs_stop_checkpoint+0x5c/0x70 [ 48.433812][ T7392] f2fs_balance_fs+0x278/0x6ec [ 48.433820][ T7392] f2fs_zero_range+0x92c/0xc3c [ 48.433827][ T7392] f2fs_fallocate+0x408/0x8ec [ 48.433833][ T7392] vfs_fallocate+0x52c/0x668 [ 48.433843][ T7392] file_ioctl+0x584/0x75c [ 48.433853][ T7392] do_vfs_ioctl+0xa10/0x1834 [ 48.433861][ T7392] __arm64_sys_ioctl+0xe4/0x1c4 [ 48.433870][ T7392] invoke_syscall+0x98/0x254 [ 48.433879][ T7392] el0_svc_common+0x130/0x23c [ 48.433886][ T7392] do_el0_svc+0x48/0x58 [ 48.433894][ T7392] el0_svc+0x5c/0x254 [ 48.433901][ T7392] el0t_64_sync_handler+0x84/0x12c [ 48.433907][ T7392] el0t_64_sync+0x198/0x19c [ 48.433915][ T7392] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 48.568341][ T7430] binder: 7429:7430 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 48.570871][ T7430] binder: 7429:7430 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 48.572846][ T7430] binder: 7430 RLIMIT_NICE not set [ 48.624654][ T7433] binder: 7429:7433 got reply transaction with no transaction stack [ 48.624687][ T7433] binder: 7429:7433 transaction reply to 0:0 failed 6/29201/-71, code 0 size 0-8192 line 3054 [ 49.037660][ T7435] tipc: Started in network mode [ 49.039864][ T7435] tipc: Node identity 080211, cluster identity 4711 [ 49.041208][ T7435] tipc: Enabled bearer , priority 10 [ 49.244142][ T7452] loop4: detected capacity change from 0 to 40427 [ 49.250895][ T7452] F2FS-fs: heap/no_heap options were deprecated [ 49.254053][ T7452] F2FS-fs (loop4): build fault injection rate: 19 [ 49.255128][ T7452] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 49.262880][ T7452] F2FS-fs (loop4): invalid crc value [ 49.274225][ T7461] rdma_rxe: rxe_newlink: failed to add syz_tun [ 49.283503][ T7452] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 49.286252][ T7452] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 49.292992][ T7452] CPU: 0 UID: 0 PID: 7452 Comm: syz.4.216 Not tainted syzkaller #0 PREEMPT [ 49.293011][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 49.293017][ T7452] Call trace: [ 49.293020][ T7452] show_stack+0x2c/0x3c (C) [ 49.293038][ T7452] __dump_stack+0x30/0x40 [ 49.293048][ T7452] dump_stack_lvl+0xd8/0x12c [ 49.293056][ T7452] dump_stack+0x1c/0x28 [ 49.293064][ T7452] f2fs_handle_critical_error+0x34c/0x4b8 [ 49.293075][ T7452] f2fs_stop_checkpoint+0x5c/0x70 [ 49.293082][ T7452] f2fs_balance_fs+0x278/0x6ec [ 49.293089][ T7452] f2fs_zero_range+0x92c/0xc3c [ 49.293097][ T7452] f2fs_fallocate+0x408/0x8ec [ 49.293103][ T7452] vfs_fallocate+0x52c/0x668 [ 49.293113][ T7452] file_ioctl+0x584/0x75c [ 49.293122][ T7452] do_vfs_ioctl+0xa10/0x1834 [ 49.293130][ T7452] __arm64_sys_ioctl+0xe4/0x1c4 [ 49.293139][ T7452] invoke_syscall+0x98/0x254 [ 49.293147][ T7452] el0_svc_common+0x130/0x23c [ 49.293155][ T7452] do_el0_svc+0x48/0x58 [ 49.293162][ T7452] el0_svc+0x5c/0x254 [ 49.293169][ T7452] el0t_64_sync_handler+0x84/0x12c [ 49.293175][ T7452] el0t_64_sync+0x198/0x19c [ 49.311776][ T7452] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 49.416970][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.541106][ T7468] tipc: Enabling of bearer rejected, already enabled [ 49.881108][ T7481] tipc: Enabling of bearer rejected, already enabled [ 49.936708][ T7485] tipc: Started in network mode [ 49.936748][ T7485] tipc: Node identity 080211, cluster identity 4711 [ 49.941138][ T7485] tipc: Enabled bearer , priority 0 [ 49.943216][ T7485] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 49.943232][ T7485] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 49.963376][ T7485] tipc: Resetting bearer [ 50.026231][ T7484] loop2: detected capacity change from 0 to 32768 [ 50.107918][ T7489] loop1: detected capacity change from 0 to 40427 [ 50.109027][ T2237] wlan1: Trigger new scan to find an IBSS to join [ 50.112675][ T7489] F2FS-fs: heap/no_heap options were deprecated [ 50.115029][ T7484] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 50.115058][ T7484] allowing incompatible features above 0.0: (unknown version) [ 50.115063][ T7484] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 50.115073][ T7484] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 50.115091][ T7484] bcachefs (loop2): initializing new filesystem [ 50.118656][ T7484] bcachefs (loop2): going read-write [ 50.125730][ T7489] F2FS-fs (loop1): build fault injection rate: 19 [ 50.125753][ T7489] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 50.132746][ T7489] F2FS-fs (loop1): invalid crc value [ 50.135471][ T7489] f2fs_printk: 6 callbacks suppressed [ 50.138127][ T7489] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 50.148818][ T7506] syz1: rxe_newlink: already configured on syz_tun [ 50.157235][ T6600] tipc: Node number set to 134353152 [ 50.168576][ T7484] bcachefs (loop2): marking superblocks [ 50.178527][ T7484] bcachefs (loop2): initializing freespace [ 50.183560][ T7484] bcachefs (loop2): done initializing freespace [ 50.189162][ T7484] bcachefs (loop2): reading snapshots table [ 50.189265][ T7484] bcachefs (loop2): reading snapshots done [ 50.193314][ T7489] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 50.203087][ T7489] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 50.209972][ T7489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 50.213361][ T7484] bcachefs (loop2): done starting filesystem [ 50.218903][ T7489] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 50.227764][ T7489] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_zero_range+0x92c/0xc3c [ 50.227823][ T7489] CPU: 1 UID: 0 PID: 7489 Comm: syz.1.231 Not tainted syzkaller #0 PREEMPT [ 50.227832][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 50.227837][ T7489] Call trace: [ 50.227841][ T7489] show_stack+0x2c/0x3c (C) [ 50.227853][ T7489] __dump_stack+0x30/0x40 [ 50.227861][ T7489] dump_stack_lvl+0xd8/0x12c [ 50.227868][ T7489] dump_stack+0x1c/0x28 [ 50.227875][ T7489] f2fs_handle_critical_error+0x34c/0x4b8 [ 50.227885][ T7489] f2fs_stop_checkpoint+0x5c/0x70 [ 50.227893][ T7489] f2fs_balance_fs+0x278/0x6ec [ 50.227901][ T7489] f2fs_zero_range+0x92c/0xc3c [ 50.227907][ T7489] f2fs_fallocate+0x408/0x8ec [ 50.227914][ T7489] vfs_fallocate+0x52c/0x668 [ 50.227923][ T7489] file_ioctl+0x584/0x75c [ 50.227932][ T7489] do_vfs_ioctl+0xa10/0x1834 [ 50.227941][ T7489] __arm64_sys_ioctl+0xe4/0x1c4 [ 50.227950][ T7489] invoke_syscall+0x98/0x254 [ 50.227958][ T7489] el0_svc_common+0x130/0x23c [ 50.227966][ T7489] do_el0_svc+0x48/0x58 [ 50.227973][ T7489] el0_svc+0x5c/0x254 [ 50.227980][ T7489] el0t_64_sync_handler+0x84/0x12c [ 50.227986][ T7489] el0t_64_sync+0x198/0x19c [ 50.227994][ T7489] F2FS-fs (loop1): Stopped filesystem due to reason: 1 [ 50.249423][ T6550] bcachefs (loop2): shutting down [ 50.249435][ T6550] bcachefs (loop2): going read-only [ 50.249451][ T6550] bcachefs (loop2): finished waiting for writes to stop [ 50.280000][ T6550] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5 [ 50.373992][ T6550] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 7 [ 50.376424][ T6550] bcachefs (loop2): clean shutdown complete, journal seq 8 [ 50.376818][ T6550] bcachefs (loop2): marking filesystem clean [ 50.391490][ T6550] bcachefs (loop2): shutdown complete [ 50.449214][ T7511] tipc: Started in network mode [ 50.449255][ T7511] tipc: Node identity 080211, cluster identity 4711 [ 50.449321][ T7511] tipc: Enabled bearer , priority 10 [ 50.584253][ T7515] loop4: detected capacity change from 0 to 32768 [ 50.604555][ T7515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.238 (7515) [ 50.615861][ T7515] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.615918][ T7515] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 50.615940][ T7515] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 50.648829][ T7530] syz_tun: entered allmulticast mode [ 50.652060][ T7526] syz_tun: left allmulticast mode [ 50.673640][ T7515] BTRFS info (device loop4): rebuilding free space tree [ 50.699783][ T7515] BTRFS info (device loop4): disabling free space tree [ 50.699825][ T7515] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 50.699848][ T7515] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 50.700991][ T7515] BTRFS info (device loop4): setting nodatasum [ 50.701000][ T7515] BTRFS info (device loop4): setting nodatacow [ 50.701006][ T7515] BTRFS info (device loop4): enabling ssd optimizations [ 50.701013][ T7515] BTRFS info (device loop4): enabling disk space caching [ 50.701018][ T7515] BTRFS info (device loop4): force clearing of disk cache [ 50.701024][ T7515] BTRFS info (device loop4): enabling auto defrag [ 50.701030][ T7515] BTRFS info (device loop4): max_inline set to 0 [ 50.846948][ T12] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 50.967189][ T24] tipc: Node number set to 134353152 [ 50.974952][ T7551] loop1: detected capacity change from 0 to 32768 [ 50.987590][ T7471] loop0: detected capacity change from 0 to 262144 [ 50.990487][ T7471] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.224 (7471) [ 50.994091][ T7471] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 50.995835][ T7471] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 51.007620][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 51.031903][ T7471] BTRFS info (device loop0): enabling ssd optimizations [ 51.033157][ T7471] BTRFS info (device loop0): enabling free space tree [ 51.049386][ T7547] loop3: detected capacity change from 0 to 40427 [ 51.051798][ T7547] F2FS-fs: heap/no_heap options were deprecated [ 51.072673][ T7547] F2FS-fs (loop3): build fault injection rate: 19 [ 51.072704][ T7547] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 51.074364][ T7547] F2FS-fs (loop3): invalid crc value [ 51.075960][ T7547] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 51.084487][ T7547] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 51.085888][ T7547] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 51.086766][ T7547] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.105393][ T7547] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 51.110875][ T7547] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_zero_range+0x92c/0xc3c [ 51.110940][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT [ 51.110950][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 51.110955][ T7547] Call trace: [ 51.110958][ T7547] show_stack+0x2c/0x3c (C) [ 51.110971][ T7547] __dump_stack+0x30/0x40 [ 51.110979][ T7547] dump_stack_lvl+0xd8/0x12c [ 51.110986][ T7547] dump_stack+0x1c/0x28 [ 51.110993][ T7547] f2fs_handle_critical_error+0x34c/0x4b8 [ 51.111003][ T7547] f2fs_stop_checkpoint+0x5c/0x70 [ 51.111011][ T7547] f2fs_balance_fs+0x278/0x6ec [ 51.111018][ T7547] f2fs_zero_range+0x92c/0xc3c [ 51.111025][ T7547] f2fs_fallocate+0x408/0x8ec [ 51.111031][ T7547] vfs_fallocate+0x52c/0x668 [ 51.111040][ T7547] file_ioctl+0x584/0x75c [ 51.111050][ T7547] do_vfs_ioctl+0xa10/0x1834 [ 51.111059][ T7547] __arm64_sys_ioctl+0xe4/0x1c4 [ 51.111068][ T7547] invoke_syscall+0x98/0x254 [ 51.111075][ T7547] el0_svc_common+0x130/0x23c [ 51.111083][ T7547] do_el0_svc+0x48/0x58 [ 51.111090][ T7547] el0_svc+0x5c/0x254 [ 51.111097][ T7547] el0t_64_sync_handler+0x84/0x12c [ 51.111103][ T7547] el0t_64_sync+0x198/0x19c [ 51.111111][ T7547] F2FS-fs (loop3): Stopped filesystem due to reason: 1 [ 51.143980][ T7575] rdma_rxe: rxe_newlink: failed to add syz_tun [ 51.260095][ T7471] btrfs: Unknown parameter 'ikeep' [ 51.292423][ T6542] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 51.369128][ T7581] tipc: Enabling of bearer rejected, already enabled [ 51.369442][ T7581] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 51.369457][ T7581] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 51.419259][ T7583] tipc: Enabling of bearer rejected, already enabled [ 51.462400][ T24] tipc: Node number set to 134353152 [ 51.466951][ T7515] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.550567][ T7588] tipc: Enabling of bearer rejected, already enabled [ 52.150107][ T7598] loop4: detected capacity change from 0 to 512 [ 52.151980][ T7605] binder: 7603:7605 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 52.154048][ T7598] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 52.154088][ T7598] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 52.154096][ T7598] EXT4-fs (loop4): group descriptors corrupted! [ 52.204686][ T7610] rdma_rxe: rxe_newlink: failed to add syz_tun [ 52.221644][ T7611] binder: 7603:7611 transaction reply to 0:0 failed 8/29201/-71, code 0 size 0-8192 line 3054 [ 52.236909][ T7613] tipc: Started in network mode [ 52.236950][ T7613] tipc: Node identity 080211, cluster identity 4711 [ 52.237013][ T7613] tipc: Enabled bearer , priority 0 [ 52.238866][ T7613] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 52.238886][ T7613] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 52.260280][ T7613] tipc: Resetting bearer [ 52.296065][ T7617] tipc: Enabling of bearer rejected, already enabled [ 52.414444][ T7627] tipc: Enabling of bearer rejected, already enabled [ 52.609515][ T7635] loop0: detected capacity change from 0 to 164 [ 52.808540][ T7635] ISOFS: unable to read i-node block [ 52.808605][ T7635] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 52.923261][ T7634] loop3: detected capacity change from 0 to 32768 [ 52.976648][ T7634] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 52.976675][ T7634] allowing incompatible features above 0.0: (unknown version) [ 52.976694][ T7634] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 52.976711][ T7634] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 52.976768][ T7634] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 52.976824][ T7634] bcachefs (loop3): Version upgrade required: [ 52.976824][ T7634] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 52.976824][ T7634] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 52.976824][ T7634] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 52.978671][ T7634] bcachefs (loop3): dropping and reconstructing all alloc info [ 52.988273][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.003955][ T7634] bcachefs (loop3): accounting_read... [ 53.014531][ T7649] tipc: Enabling of bearer rejected, already enabled [ 53.014869][ T7649] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 53.014918][ T7649] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 53.022328][ T7634] done [ 53.022348][ T7634] bcachefs (loop3): alloc_read... done [ 53.022764][ T7634] bcachefs (loop3): snapshots_read... done [ 53.023722][ T7634] bcachefs (loop3): check_allocations... [ 53.028616][ T7649] tipc: Resetting bearer [ 53.039080][ T7634] done [ 53.040507][ T7634] bcachefs (loop3): going read-write [ 53.050263][ T7634] bcachefs (loop3): done starting filesystem [ 53.065540][ T7654] tipc: Enabling of bearer rejected, already enabled [ 53.106699][ T6543] bcachefs (loop3): shutting down [ 53.106725][ T6543] bcachefs (loop3): going read-only [ 53.106753][ T6543] bcachefs (loop3): finished waiting for writes to stop [ 53.118837][ T6543] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 53.141099][ T6543] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 53.144778][ T6543] bcachefs (loop3): unclean shutdown complete, journal seq 12 [ 53.146560][ T6543] bcachefs (loop3): done going read-only, filesystem not clean [ 53.191638][ T6543] bcachefs (loop3): shutdown complete [ 53.206906][ T7658] syz1: rxe_newlink: already configured on syz_tun [ 53.236094][ T7656] loop2: detected capacity change from 0 to 40427 [ 53.241506][ T7656] F2FS-fs: heap/no_heap options were deprecated [ 53.264754][ T7656] F2FS-fs (loop2): build fault injection rate: 19 [ 53.264790][ T7656] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 53.268699][ T7656] F2FS-fs (loop2): invalid crc value [ 53.277239][ T1832] tipc: Node number set to 134353152 [ 53.288932][ T7656] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 53.301638][ T7656] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 53.308527][ T7656] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 53.309077][ T7656] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.330850][ T6550] syz-executor: attempt to access beyond end of device [ 53.330850][ T6550] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.330903][ T6550] CPU: 0 UID: 0 PID: 6550 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 53.330915][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 53.330921][ T6550] Call trace: [ 53.330924][ T6550] show_stack+0x2c/0x3c (C) [ 53.330941][ T6550] __dump_stack+0x30/0x40 [ 53.330949][ T6550] dump_stack_lvl+0xd8/0x12c [ 53.330955][ T6550] dump_stack+0x1c/0x28 [ 53.330961][ T6550] f2fs_handle_critical_error+0x34c/0x4b8 [ 53.330969][ T6550] f2fs_stop_checkpoint+0x5c/0x70 [ 53.330975][ T6550] f2fs_write_end_io+0x768/0xa70 [ 53.330980][ T6550] bio_endio+0x858/0x894 [ 53.330986][ T6550] submit_bio_noacct+0x158/0x177c [ 53.330992][ T6550] submit_bio+0x3b4/0x550 [ 53.330997][ T6550] f2fs_submit_write_bio+0x13c/0x324 [ 53.331004][ T6550] __submit_merged_bio+0x254/0x704 [ 53.331010][ T6550] __submit_merged_write_cond+0x23c/0x4ac [ 53.331017][ T6550] f2fs_write_data_pages+0x1d28/0x2634 [ 53.331024][ T6550] do_writepages+0x270/0x468 [ 53.331031][ T6550] filemap_fdatawrite+0x14c/0x1f4 [ 53.331038][ T6550] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 53.331044][ T6550] f2fs_write_checkpoint+0x690/0x16a0 [ 53.331049][ T6550] kill_f2fs_super+0x21c/0x584 [ 53.331056][ T6550] deactivate_locked_super+0xc4/0x12c [ 53.331062][ T6550] deactivate_super+0xe0/0x100 [ 53.331068][ T6550] cleanup_mnt+0x31c/0x3ac [ 53.331074][ T6550] __cleanup_mnt+0x20/0x30 [ 53.331079][ T6550] task_work_run+0x1dc/0x260 [ 53.331087][ T6550] exit_to_user_mode_loop+0xfc/0x168 [ 53.331094][ T6550] el0_svc+0x170/0x254 [ 53.331100][ T6550] el0t_64_sync_handler+0x84/0x12c [ 53.331105][ T6550] el0t_64_sync+0x198/0x19c [ 53.331123][ T6550] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 53.463735][ T7679] binder_user_error: 3 callbacks suppressed [ 53.464934][ T7679] binder: 7678:7679 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 53.467541][ T7679] binder: 7678:7679 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.469848][ T7679] binder: 7679 RLIMIT_NICE not set [ 53.527435][ T7681] binder: 7678:7681 got reply transaction with no transaction stack [ 53.527469][ T7681] binder: 7678:7681 transaction reply to 0:0 failed 10/29201/-71, code 0 size 0-8192 line 3054 [ 53.562054][ T7685] tipc: Enabling of bearer rejected, already enabled [ 54.033933][ T7699] loop1: detected capacity change from 0 to 40427 [ 54.034417][ T7699] F2FS-fs: heap/no_heap options were deprecated [ 54.036474][ T7699] F2FS-fs (loop1): build fault injection rate: 19 [ 54.036700][ T7699] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 54.039410][ T7699] F2FS-fs (loop1): invalid crc value [ 54.054224][ T7699] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 54.054702][ T7699] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.075737][ T6546] syz-executor: attempt to access beyond end of device [ 54.075737][ T6546] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 54.075794][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 54.075805][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 54.075811][ T6546] Call trace: [ 54.075814][ T6546] show_stack+0x2c/0x3c (C) [ 54.075831][ T6546] __dump_stack+0x30/0x40 [ 54.075838][ T6546] dump_stack_lvl+0xd8/0x12c [ 54.075844][ T6546] dump_stack+0x1c/0x28 [ 54.075849][ T6546] f2fs_handle_critical_error+0x34c/0x4b8 [ 54.075858][ T6546] f2fs_stop_checkpoint+0x5c/0x70 [ 54.075864][ T6546] f2fs_write_end_io+0x768/0xa70 [ 54.075869][ T6546] bio_endio+0x858/0x894 [ 54.075875][ T6546] submit_bio_noacct+0x158/0x177c [ 54.075881][ T6546] submit_bio+0x3b4/0x550 [ 54.075887][ T6546] f2fs_submit_write_bio+0x13c/0x324 [ 54.075893][ T6546] __submit_merged_bio+0x254/0x704 [ 54.075900][ T6546] __submit_merged_write_cond+0x23c/0x4ac [ 54.075907][ T6546] f2fs_write_data_pages+0x1d28/0x2634 [ 54.075914][ T6546] do_writepages+0x270/0x468 [ 54.075922][ T6546] filemap_fdatawrite+0x14c/0x1f4 [ 54.075929][ T6546] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 54.075935][ T6546] f2fs_write_checkpoint+0x690/0x16a0 [ 54.075941][ T6546] kill_f2fs_super+0x21c/0x584 [ 54.075947][ T6546] deactivate_locked_super+0xc4/0x12c [ 54.075954][ T6546] deactivate_super+0xe0/0x100 [ 54.075960][ T6546] cleanup_mnt+0x31c/0x3ac [ 54.075966][ T6546] __cleanup_mnt+0x20/0x30 [ 54.075972][ T6546] task_work_run+0x1dc/0x260 [ 54.075979][ T6546] exit_to_user_mode_loop+0xfc/0x168 [ 54.075987][ T6546] el0_svc+0x170/0x254 [ 54.075993][ T6546] el0t_64_sync_handler+0x84/0x12c [ 54.075998][ T6546] el0t_64_sync+0x198/0x19c [ 54.076006][ T6546] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 54.264022][ T7707] rdma_rxe: rxe_newlink: failed to add syz_tun [ 54.342663][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.356593][ T7710] FAULT_INJECTION: forcing a failure. [ 54.356593][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 54.359426][ T7710] CPU: 0 UID: 0 PID: 7710 Comm: syz.0.293 Not tainted syzkaller #0 PREEMPT [ 54.359449][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 54.359453][ T7710] Call trace: [ 54.359456][ T7710] show_stack+0x2c/0x3c (C) [ 54.359472][ T7710] __dump_stack+0x30/0x40 [ 54.359480][ T7710] dump_stack_lvl+0xd8/0x12c [ 54.359485][ T7710] dump_stack+0x1c/0x28 [ 54.359490][ T7710] should_fail_ex+0x41c/0x594 [ 54.359497][ T7710] should_failslab+0xc0/0x128 [ 54.359504][ T7710] kmem_cache_alloc_noprof+0x80/0x3e8 [ 54.359511][ T7710] vm_area_dup+0x34/0x50c [ 54.359518][ T7710] dup_mmap+0x778/0x16b4 [ 54.359523][ T7710] copy_mm+0x100/0x438 [ 54.359530][ T7710] copy_process+0x1520/0x31ec [ 54.359535][ T7710] kernel_clone+0x1d8/0x84c [ 54.359541][ T7710] __arm64_sys_clone3+0x308/0x348 [ 54.359546][ T7710] invoke_syscall+0x98/0x254 [ 54.359553][ T7710] el0_svc_common+0x130/0x23c [ 54.359558][ T7710] do_el0_svc+0x48/0x58 [ 54.359564][ T7710] el0_svc+0x5c/0x254 [ 54.359569][ T7710] el0t_64_sync_handler+0x84/0x12c [ 54.359574][ T7710] el0t_64_sync+0x198/0x19c [ 54.419910][ T7718] tipc: Enabling of bearer rejected, already enabled [ 54.466559][ T7723] loop4: detected capacity change from 0 to 4096 [ 54.468714][ T7723] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 54.471230][ T7723] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 54.473880][ T7723] ntfs3(loop4): Failed to load $BadClus (-22). [ 54.611956][ T7733] binder: 7732:7733 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 54.614463][ T7733] binder: 7732:7733 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 54.614626][ T7733] binder: 7733 RLIMIT_NICE not set [ 54.652557][ T7731] loop4: detected capacity change from 0 to 32768 [ 54.655664][ T7731] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.303 (7731) [ 54.659043][ T7731] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.659088][ T7731] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 54.659110][ T7731] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 54.666777][ T7737] binder: 7732:7737 got reply transaction with no transaction stack [ 54.666813][ T7737] binder: 7732:7737 transaction reply to 0:0 failed 12/29201/-71, code 0 size 0-8192 line 3054 [ 54.724100][ T7731] BTRFS info (device loop4): rebuilding free space tree [ 54.732850][ T7731] BTRFS info (device loop4): disabling free space tree [ 54.732898][ T7731] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 54.732929][ T7731] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 54.739823][ T7731] BTRFS info (device loop4): setting nodatasum [ 54.740994][ T7731] BTRFS info (device loop4): setting nodatacow [ 54.742129][ T7731] BTRFS info (device loop4): enabling ssd optimizations [ 54.743320][ T7731] BTRFS info (device loop4): enabling disk space caching [ 54.744547][ T7731] BTRFS info (device loop4): force clearing of disk cache [ 54.745775][ T7731] BTRFS info (device loop4): enabling auto defrag [ 54.746792][ T7731] BTRFS info (device loop4): max_inline set to 0 [ 54.824190][ T2237] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 54.824372][ T7731] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.837967][ T7755] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 54.838007][ T7755] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 54.843939][ T7755] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 54.894248][ T7760] loop2: detected capacity change from 0 to 16 [ 54.915417][ T7760] erofs (device loop2): mounted with root inode @ nid 36. [ 54.916946][ T7760] erofs (device loop2): xattr_isize 12 of nid 46 is not supported yet [ 54.916973][ T7760] erofs (device loop2): xattr_isize 12 of nid 46 is not supported yet [ 54.916989][ T7760] erofs (device loop2): xattr_isize 12 of nid 46 is not supported yet [ 54.920306][ T7760] erofs (device loop2): xattr_isize 12 of nid 46 is not supported yet [ 54.977516][ T7757] loop3: detected capacity change from 0 to 32768 [ 54.983209][ T7757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.276 (7757) [ 54.989889][ T7757] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.992043][ T7757] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 54.993586][ T7757] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 55.017081][ T7757] BTRFS info (device loop3): rebuilding free space tree [ 55.027948][ T7757] BTRFS info (device loop3): disabling free space tree [ 55.027988][ T7757] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 55.028019][ T7757] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 55.029199][ T7757] BTRFS info (device loop3): enabling ssd optimizations [ 55.029208][ T7757] BTRFS info (device loop3): enabling disk space caching [ 55.029214][ T7757] BTRFS info (device loop3): force clearing of disk cache [ 55.029220][ T7757] BTRFS info (device loop3): enabling auto defrag [ 55.029227][ T7757] BTRFS info (device loop3): force zlib compression, level 3 [ 55.029233][ T7757] BTRFS info (device loop3): max_inline set to 0 [ 55.069859][ T2237] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 55.271927][ T7784] tipc: Enabling of bearer rejected, already enabled [ 55.293064][ T7786] netlink: 64 bytes leftover after parsing attributes in process `syz.0.311'. [ 55.447770][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 55.584627][ T7801] FAULT_INJECTION: forcing a failure. [ 55.584627][ T7801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.584662][ T7801] CPU: 0 UID: 0 PID: 7801 Comm: syz.2.317 Not tainted syzkaller #0 PREEMPT [ 55.584671][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 55.584675][ T7801] Call trace: [ 55.584678][ T7801] show_stack+0x2c/0x3c (C) [ 55.584691][ T7801] __dump_stack+0x30/0x40 [ 55.584698][ T7801] dump_stack_lvl+0xd8/0x12c [ 55.584703][ T7801] dump_stack+0x1c/0x28 [ 55.584709][ T7801] should_fail_ex+0x41c/0x594 [ 55.584715][ T7801] should_fail+0x14/0x24 [ 55.584720][ T7801] should_fail_usercopy+0x20/0x30 [ 55.584725][ T7801] _copy_to_iter+0x198/0x139c [ 55.584730][ T7801] get_random_bytes_user+0x188/0x31c [ 55.584739][ T7801] __arm64_sys_getrandom+0x148/0x234 [ 55.584745][ T7801] invoke_syscall+0x98/0x254 [ 55.584751][ T7801] el0_svc_common+0x130/0x23c [ 55.584757][ T7801] do_el0_svc+0x48/0x58 [ 55.584762][ T7801] el0_svc+0x5c/0x254 [ 55.584768][ T7801] el0t_64_sync_handler+0x84/0x12c [ 55.584773][ T7801] el0t_64_sync+0x198/0x19c [ 55.634304][ T7804] trusted_key: syz.2.318 sent an empty control message without MSG_MORE. [ 55.697950][ T7814] FAULT_INJECTION: forcing a failure. [ 55.697950][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 55.697992][ T7814] CPU: 1 UID: 0 PID: 7814 Comm: syz.4.321 Not tainted syzkaller #0 PREEMPT [ 55.698006][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 55.698010][ T7814] Call trace: [ 55.698013][ T7814] show_stack+0x2c/0x3c (C) [ 55.698029][ T7814] __dump_stack+0x30/0x40 [ 55.698037][ T7814] dump_stack_lvl+0xd8/0x12c [ 55.698043][ T7814] dump_stack+0x1c/0x28 [ 55.698048][ T7814] should_fail_ex+0x41c/0x594 [ 55.698054][ T7814] should_failslab+0xc0/0x128 [ 55.698062][ T7814] kmem_cache_alloc_node_noprof+0x88/0x3f4 [ 55.698069][ T7814] __alloc_skb+0x144/0x2ec [ 55.698076][ T7814] netlink_alloc_large_skb+0xd8/0x118 [ 55.698083][ T7814] netlink_sendmsg+0x498/0x930 [ 55.698090][ T7814] ____sys_sendmsg+0x490/0x7b8 [ 55.698095][ T7814] ___sys_sendmsg+0x204/0x278 [ 55.698101][ T7814] __arm64_sys_sendmsg+0x184/0x238 [ 55.698107][ T7814] invoke_syscall+0x98/0x254 [ 55.698113][ T7814] el0_svc_common+0x130/0x23c [ 55.698119][ T7814] do_el0_svc+0x48/0x58 [ 55.698124][ T7814] el0_svc+0x5c/0x254 [ 55.698130][ T7814] el0t_64_sync_handler+0x84/0x12c [ 55.698135][ T7814] el0t_64_sync+0x198/0x19c [ 55.740918][ T6543] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 55.793280][ T7818] binder: 7817:7818 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 55.796505][ T7818] binder: 7817:7818 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 55.825703][ T7820] netlink: 14 bytes leftover after parsing attributes in process `syz.3.322'. [ 55.849199][ T7821] binder: 7817:7821 transaction reply to 0:0 failed 14/29201/-71, code 0 size 0-8192 line 3054 [ 55.875755][ T7820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.909869][ T7820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.950309][ T7820] bond0 (unregistering): Released all slaves [ 56.170725][ T7790] loop0: detected capacity change from 0 to 262144 [ 56.176619][ T7790] F2FS-fs (loop0): invalid crc value [ 56.194001][ T7790] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 56.196853][ T7790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.212137][ T7790] f2fs: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777ñ¼ÊíXc¥vÌ:ýQºòœÞ' [ 56.563627][ T7834] overlay: filesystem on ./file0 not supported as upperdir [ 56.610017][ T7834] loop2: detected capacity change from 0 to 8192 [ 56.613246][ T7834] FAT-fs (loop2): bogus logical sector size 0 [ 56.614649][ T7834] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 56.616447][ T7834] FAT-fs (loop2): Can't find a valid FAT filesystem [ 56.637605][ T6600] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.127506][ T7846] loop4: detected capacity change from 0 to 32768 [ 57.132009][ T7846] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.332 (7846) [ 57.142773][ T7846] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 57.144891][ T7846] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 57.146500][ T7846] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 57.172223][ T7848] loop2: detected capacity change from 0 to 40427 [ 57.172625][ T7848] F2FS-fs: heap/no_heap options were deprecated [ 57.175759][ T7846] BTRFS info (device loop4): rebuilding free space tree [ 57.185115][ T7848] F2FS-fs (loop2): build fault injection rate: 19 [ 57.185163][ T7848] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 57.186237][ T7848] F2FS-fs (loop2): invalid crc value [ 57.191501][ T7848] f2fs_printk: 4 callbacks suppressed [ 57.192099][ T7846] BTRFS info (device loop4): disabling free space tree [ 57.192124][ T7846] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 57.192133][ T7846] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 57.196928][ T7848] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 57.209014][ T7846] BTRFS info (device loop4): enabling ssd optimizations [ 57.209048][ T7846] BTRFS info (device loop4): enabling disk space caching [ 57.209056][ T7846] BTRFS info (device loop4): force clearing of disk cache [ 57.209064][ T7846] BTRFS info (device loop4): enabling auto defrag [ 57.209073][ T7846] BTRFS info (device loop4): force zlib compression, level 3 [ 57.209081][ T7846] BTRFS info (device loop4): max_inline set to 0 [ 57.211126][ T7848] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 57.212240][ T7848] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 57.217343][ T7848] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 57.226827][ T7848] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 57.243627][ T7848] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0xe4/0x6d0 [ 57.255358][ T14] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 57.274697][ T6550] syz-executor: attempt to access beyond end of device [ 57.274697][ T6550] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 57.274754][ T6550] CPU: 0 UID: 0 PID: 6550 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 57.274763][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 57.274769][ T6550] Call trace: [ 57.274772][ T6550] show_stack+0x2c/0x3c (C) [ 57.274789][ T6550] __dump_stack+0x30/0x40 [ 57.274796][ T6550] dump_stack_lvl+0xd8/0x12c [ 57.274802][ T6550] dump_stack+0x1c/0x28 [ 57.274807][ T6550] f2fs_handle_critical_error+0x34c/0x4b8 [ 57.274816][ T6550] f2fs_stop_checkpoint+0x5c/0x70 [ 57.274822][ T6550] f2fs_write_end_io+0x768/0xa70 [ 57.274827][ T6550] bio_endio+0x858/0x894 [ 57.274832][ T6550] submit_bio_noacct+0x158/0x177c [ 57.274838][ T6550] submit_bio+0x3b4/0x550 [ 57.274844][ T6550] f2fs_submit_write_bio+0x13c/0x324 [ 57.274850][ T6550] __submit_merged_bio+0x254/0x704 [ 57.274856][ T6550] __submit_merged_write_cond+0x23c/0x4ac [ 57.274863][ T6550] f2fs_write_data_pages+0x1d28/0x2634 [ 57.274870][ T6550] do_writepages+0x270/0x468 [ 57.274877][ T6550] filemap_fdatawrite+0x14c/0x1f4 [ 57.274884][ T6550] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 57.274890][ T6550] f2fs_write_checkpoint+0x690/0x16a0 [ 57.274896][ T6550] kill_f2fs_super+0x21c/0x584 [ 57.274903][ T6550] deactivate_locked_super+0xc4/0x12c [ 57.274909][ T6550] deactivate_super+0xe0/0x100 [ 57.274914][ T6550] cleanup_mnt+0x31c/0x3ac [ 57.274920][ T6550] __cleanup_mnt+0x20/0x30 [ 57.274925][ T6550] task_work_run+0x1dc/0x260 [ 57.274932][ T6550] exit_to_user_mode_loop+0xfc/0x168 [ 57.274940][ T6550] el0_svc+0x170/0x254 [ 57.274945][ T6550] el0t_64_sync_handler+0x84/0x12c [ 57.274950][ T6550] el0t_64_sync+0x198/0x19c [ 57.274957][ T6550] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 57.582551][ T6552] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.053937][ T7894] binder: 7890:7894 transaction reply to 0:0 failed 16/29201/-71, code 0 size 0-8192 line 3054 [ 58.384251][ T7902] loop2: detected capacity change from 0 to 2048 [ 58.387395][ T7902] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 58.388059][ T7902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.756683][ T6600] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.876174][ T7918] FAULT_INJECTION: forcing a failure. [ 58.876174][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 58.876214][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.1.352 Not tainted syzkaller #0 PREEMPT [ 58.876225][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 58.876232][ T7918] Call trace: [ 58.876235][ T7918] show_stack+0x2c/0x3c (C) [ 58.876249][ T7918] __dump_stack+0x30/0x40 [ 58.876256][ T7918] dump_stack_lvl+0xd8/0x12c [ 58.876262][ T7918] dump_stack+0x1c/0x28 [ 58.876267][ T7918] should_fail_ex+0x41c/0x594 [ 58.876278][ T7918] should_failslab+0xc0/0x128 [ 58.876285][ T7918] kmem_cache_alloc_bulk_noprof+0x88/0x710 [ 58.876293][ T7918] mas_dup_build+0x6dc/0xd88 [ 58.876301][ T7918] __mt_dup+0x108/0x1d8 [ 58.876307][ T7918] dup_mmap+0x324/0x16b4 [ 58.876314][ T7918] copy_mm+0x100/0x438 [ 58.876320][ T7918] copy_process+0x1520/0x31ec [ 58.876326][ T7918] kernel_clone+0x1d8/0x84c [ 58.876332][ T7918] __arm64_sys_clone3+0x308/0x348 [ 58.876337][ T7918] invoke_syscall+0x98/0x254 [ 58.876344][ T7918] el0_svc_common+0x130/0x23c [ 58.876349][ T7918] do_el0_svc+0x48/0x58 [ 58.876355][ T7918] el0_svc+0x5c/0x254 [ 58.876359][ T7918] el0t_64_sync_handler+0x84/0x12c [ 58.876364][ T7918] el0t_64_sync+0x198/0x19c [ 58.976613][ T7915] loop3: detected capacity change from 0 to 32768 [ 58.980645][ T7915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.351 (7915) [ 58.996521][ T7915] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.996587][ T7915] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 58.996613][ T7915] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 59.061889][ T7915] BTRFS info (device loop3): rebuilding free space tree [ 59.069392][ T7915] BTRFS info (device loop3): disabling free space tree [ 59.070896][ T7915] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 59.072740][ T7915] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 59.088120][ T7915] BTRFS info (device loop3): enabling ssd optimizations [ 59.088152][ T7915] BTRFS info (device loop3): enabling disk space caching [ 59.088177][ T7915] BTRFS info (device loop3): force clearing of disk cache [ 59.088189][ T7915] BTRFS info (device loop3): enabling auto defrag [ 59.088202][ T7915] BTRFS info (device loop3): force zlib compression, level 3 [ 59.088214][ T7915] BTRFS info (device loop3): max_inline set to 0 [ 59.124698][ T14] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 59.313130][ T7943] tipc: Enabling of bearer rejected, already enabled [ 59.425443][ T7950] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 59.426879][ T7950] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 59.433287][ T7950] tipc: Enabling of bearer rejected, already enabled [ 59.464277][ T7952] binder: 7951:7952 ioctl 4018620d 0 returned -22 [ 59.464716][ T7952] binder_user_error: 6 callbacks suppressed [ 59.464723][ T7952] binder: 7951:7952 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 59.465934][ T7952] binder: 7951:7952 got transaction to invalid handle, 1 [ 59.465946][ T7952] binder: 7951:7952 cannot find target node [ 59.465953][ T7952] binder: 7951:7952 transaction call to 0:0 failed 19/29201/-22, code 0 size 0-0 line 3151 [ 59.466407][ T7952] binder: 7951:7952 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.466416][ T7952] binder: 7952 RLIMIT_NICE not set [ 59.473325][ T7948] loop2: detected capacity change from 0 to 40427 [ 59.475266][ T7948] F2FS-fs: heap/no_heap options were deprecated [ 59.476914][ T7948] F2FS-fs (loop2): build fault injection rate: 19 [ 59.476962][ T7948] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 59.481494][ T7948] F2FS-fs (loop2): invalid crc value [ 59.486572][ T7948] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 59.494209][ T7948] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 59.495624][ T7948] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 59.496187][ T7948] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.518837][ T7957] binder: 7951:7957 got reply transaction with no transaction stack [ 59.518872][ T7957] binder: 7951:7957 transaction reply to 0:0 failed 20/29201/-71, code 0 size 0-8192 line 3054 [ 59.685608][ T6543] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 59.800266][ T7963] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 59.800319][ T7963] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 59.813418][ T7967] FAULT_INJECTION: forcing a failure. [ 59.813418][ T7967] name failslab, interval 1, probability 0, space 0, times 0 [ 59.813458][ T7967] CPU: 0 UID: 0 PID: 7967 Comm: syz.3.361 Not tainted syzkaller #0 PREEMPT [ 59.813466][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 59.813471][ T7967] Call trace: [ 59.813474][ T7967] show_stack+0x2c/0x3c (C) [ 59.813488][ T7967] __dump_stack+0x30/0x40 [ 59.813495][ T7967] dump_stack_lvl+0xd8/0x12c [ 59.813500][ T7967] dump_stack+0x1c/0x28 [ 59.813506][ T7967] should_fail_ex+0x41c/0x594 [ 59.813512][ T7967] should_failslab+0xc0/0x128 [ 59.813519][ T7967] kmem_cache_alloc_noprof+0x80/0x3e8 [ 59.813527][ T7967] skb_clone+0x1b4/0x328 [ 59.813534][ T7967] nfnetlink_rcv+0x3e4/0x1db4 [ 59.813540][ T7967] netlink_unicast+0x694/0x8c4 [ 59.813547][ T7967] netlink_sendmsg+0x648/0x930 [ 59.813553][ T7967] ____sys_sendmsg+0x490/0x7b8 [ 59.813559][ T7967] ___sys_sendmsg+0x204/0x278 [ 59.813565][ T7967] __arm64_sys_sendmsg+0x184/0x238 [ 59.813570][ T7967] invoke_syscall+0x98/0x254 [ 59.813577][ T7967] el0_svc_common+0x130/0x23c [ 59.813582][ T7967] do_el0_svc+0x48/0x58 [ 59.813587][ T7967] el0_svc+0x5c/0x254 [ 59.813593][ T7967] el0t_64_sync_handler+0x84/0x12c [ 59.813598][ T7967] el0t_64_sync+0x198/0x19c [ 59.895258][ T7975] tipc: Enabling of bearer rejected, already enabled [ 59.956484][ T7970] loop2: detected capacity change from 0 to 32768 [ 59.961905][ T7970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.362 (7970) [ 59.969717][ T7970] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 59.969795][ T7970] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 59.969831][ T7970] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 59.995916][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 60.026484][ T7970] BTRFS info (device loop2): rebuilding free space tree [ 60.044012][ T7970] BTRFS info (device loop2): disabling free space tree [ 60.044055][ T7970] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 60.044078][ T7970] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.054585][ T7970] BTRFS info (device loop2): setting nodatasum [ 60.055740][ T7970] BTRFS info (device loop2): setting nodatacow [ 60.057060][ T7970] BTRFS info (device loop2): enabling ssd optimizations [ 60.057664][ T7977] loop3: detected capacity change from 0 to 32768 [ 60.069141][ T7970] BTRFS info (device loop2): enabling disk space caching [ 60.069163][ T7970] BTRFS info (device loop2): force clearing of disk cache [ 60.069176][ T7970] BTRFS info (device loop2): enabling auto defrag [ 60.069189][ T7970] BTRFS info (device loop2): max_inline set to 0 [ 60.091831][ T7977] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 60.108455][ T8001] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 60.108491][ T8001] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 60.115010][ T8001] tipc: Enabling of bearer rejected, already enabled [ 60.174698][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 60.186612][ T7977] XFS (loop3): Ending clean mount [ 60.191933][ T7970] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 60.207385][ T8008] loop0: detected capacity change from 0 to 32768 [ 60.225426][ T8008] BTRFS info: device /dev/loop0 (7:0) using temp-fsid b3511f29-9701-4521-906e-ab7e5dd5c94c [ 60.225484][ T8008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.370 (8008) [ 60.257642][ T8008] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 60.257723][ T8008] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 60.257753][ T8008] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 60.259396][ T7977] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0xf0, xfs_rmapbt block 0x14 [ 60.259536][ T7977] XFS (loop3): Unmount and run xfs_repair [ 60.259545][ T7977] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 60.259634][ T7977] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 60.259644][ T7977] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 60.259653][ T7977] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 60.259736][ T7977] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 60.259744][ T7977] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 60.259752][ T7977] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 60.259843][ T7977] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 60.259853][ T7977] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 60.260339][ T7977] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x14 len 4 error 74 [ 60.263891][ T7977] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c8/0x964 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 60.263936][ T7977] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 60.304964][ T6600] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.306157][ T6600] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.347867][ T8008] BTRFS info (device loop0): rebuilding free space tree [ 60.387868][ T8008] BTRFS info (device loop0): disabling free space tree [ 60.387921][ T8008] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 60.387939][ T8008] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.390311][ T8008] BTRFS info (device loop0): enabling ssd optimizations [ 60.390324][ T8008] BTRFS info (device loop0): enabling disk space caching [ 60.390334][ T8008] BTRFS info (device loop0): force clearing of disk cache [ 60.390342][ T8008] BTRFS info (device loop0): enabling auto defrag [ 60.390350][ T8008] BTRFS info (device loop0): force zlib compression, level 3 [ 60.390357][ T8008] BTRFS info (device loop0): max_inline set to 0 [ 60.424821][ T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 60.569287][ T6543] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 60.666145][ T8026] loop4: detected capacity change from 0 to 32768 [ 60.670616][ T8026] XFS: noikeep mount option is deprecated. [ 60.684200][ T8038] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 60.685694][ T8038] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 60.688907][ T8038] tipc: Resetting bearer [ 60.691360][ T8026] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 60.695393][ T8038] tipc: Resetting bearer [ 60.735721][ T8026] XFS (loop4): Ending clean mount [ 60.755697][ T8026] XFS (loop4): Quotacheck needed: Please wait. [ 60.773446][ T8026] XFS (loop4): Quotacheck: Done. [ 60.870802][ T41] tipc: Resetting bearer [ 60.874022][ T8049] rdma_rxe: rxe_newlink: failed to add lo [ 60.970797][ T6542] BTRFS info (device loop0): last unmount of filesystem b3511f29-9701-4521-906e-ab7e5dd5c94c [ 60.989429][ T8049] loop2: detected capacity change from 0 to 40427 [ 60.990978][ T8049] F2FS-fs: inline encryption not supported [ 60.993020][ T8049] F2FS-fs: heap/no_heap options were deprecated [ 60.995331][ T8049] F2FS-fs (loop2): Image doesn't support compression [ 60.999626][ T8049] F2FS-fs (loop2): build fault injection rate: 688 [ 61.014874][ T8049] F2FS-fs (loop2): invalid crc value [ 61.070121][ T8049] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 61.080902][ T8049] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.097616][ T8049] rdma_rxe: rxe_newlink: failed to add syz_tun [ 61.122279][ T8053] tipc: Enabling of bearer rejected, already enabled [ 61.175609][ T6552] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 61.212834][ T8061] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 61.212894][ T8061] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 61.219058][ T8061] tipc: Enabling of bearer rejected, already enabled [ 61.238029][ T8063] binder: 8062:8063 ioctl 4018620d 0 returned -22 [ 61.243342][ T8063] binder: 8062:8063 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 61.252318][ T8063] binder: 8062:8063 got transaction to invalid handle, 1 [ 61.252355][ T8063] binder: 8062:8063 cannot find target node [ 61.252375][ T8063] binder: 8062:8063 transaction call to 0:0 failed 23/29201/-22, code 0 size 0-0 line 3151 [ 61.252784][ T8063] binder: 8062:8063 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 61.252793][ T8063] binder: 8063 RLIMIT_NICE not set [ 61.265500][ T8065] FAULT_INJECTION: forcing a failure. [ 61.265500][ T8065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.265535][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.0.383 Not tainted syzkaller #0 PREEMPT [ 61.265546][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 61.265551][ T8065] Call trace: [ 61.265554][ T8065] show_stack+0x2c/0x3c (C) [ 61.265568][ T8065] __dump_stack+0x30/0x40 [ 61.265574][ T8065] dump_stack_lvl+0xd8/0x12c [ 61.265580][ T8065] dump_stack+0x1c/0x28 [ 61.265585][ T8065] should_fail_ex+0x41c/0x594 [ 61.265592][ T8065] should_fail+0x14/0x24 [ 61.265597][ T8065] should_fail_usercopy+0x20/0x30 [ 61.265602][ T8065] _inline_copy_from_user+0x40/0x180 [ 61.265609][ T8065] ucma_accept+0x124/0x578 [ 61.265614][ T8065] ucma_write+0x210/0x2b4 [ 61.265619][ T8065] vfs_write+0x2b8/0xa3c [ 61.265625][ T8065] ksys_write+0x120/0x210 [ 61.265629][ T8065] __arm64_sys_write+0x7c/0x90 [ 61.265634][ T8065] invoke_syscall+0x98/0x254 [ 61.265640][ T8065] el0_svc_common+0x130/0x23c [ 61.265645][ T8065] do_el0_svc+0x48/0x58 [ 61.265651][ T8065] el0_svc+0x5c/0x254 [ 61.265657][ T8065] el0t_64_sync_handler+0x84/0x12c [ 61.265662][ T8065] el0t_64_sync+0x198/0x19c [ 61.305089][ T8066] binder: 8062:8066 got reply transaction with no transaction stack [ 61.305127][ T8066] binder: 8062:8066 transaction reply to 0:0 failed 24/29201/-71, code 0 size 0-8192 line 3054 [ 61.358165][ T8072] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 61.365833][ T8070] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 61.369005][ T8070] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 61.554757][ T8084] netlink: del zone limit has 4 unknown bytes [ 61.803173][ T8082] loop2: detected capacity change from 0 to 32768 [ 61.806503][ T8082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.386 (8082) [ 61.814300][ T8082] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.814786][ T8082] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 61.815276][ T8082] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 61.857054][ T8082] BTRFS info (device loop2): rebuilding free space tree [ 61.864121][ T8082] BTRFS info (device loop2): disabling free space tree [ 61.864164][ T8082] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 61.864172][ T8082] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 61.866470][ T8082] BTRFS info (device loop2): enabling ssd optimizations [ 61.866482][ T8082] BTRFS info (device loop2): enabling disk space caching [ 61.866488][ T8082] BTRFS info (device loop2): force clearing of disk cache [ 61.866494][ T8082] BTRFS info (device loop2): enabling auto defrag [ 61.866500][ T8082] BTRFS info (device loop2): force zlib compression, level 3 [ 61.866506][ T8082] BTRFS info (device loop2): max_inline set to 0 [ 61.902220][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 62.102706][ T8109] rdma_rxe: rxe_newlink: failed to add lo [ 62.211405][ T8109] loop1: detected capacity change from 0 to 40427 [ 62.213151][ T8109] F2FS-fs: inline encryption not supported [ 62.214922][ T8109] F2FS-fs: heap/no_heap options were deprecated [ 62.219883][ T8109] F2FS-fs (loop1): Image doesn't support compression [ 62.221218][ T8109] F2FS-fs (loop1): build fault injection rate: 688 [ 62.224137][ T8109] F2FS-fs (loop1): invalid crc value [ 62.291850][ T8109] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 62.294032][ T8109] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 62.473465][ T8117] loop4: detected capacity change from 0 to 4096 [ 62.482705][ T8117] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 62.550263][ T8117] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 62.551689][ T8117] ntfs3(loop4): Failed to load $UpCase (-22). [ 62.570574][ T8109] rdma_rxe: rxe_newlink: failed to add syz_tun [ 62.588845][ T6550] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 62.654577][ T8114] loop0: detected capacity change from 0 to 32768 [ 62.656384][ T8114] btrfs: Deprecated parameter 'usebackuproot' [ 62.657953][ T8114] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 62.666334][ T8114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.391 (8114) [ 62.685422][ T8114] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.685496][ T8114] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 62.685620][ T8114] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 62.703851][ T8120] FAULT_INJECTION: forcing a failure. [ 62.703851][ T8120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.703886][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.3.394 Not tainted syzkaller #0 PREEMPT [ 62.703896][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 62.703902][ T8120] Call trace: [ 62.703906][ T8120] show_stack+0x2c/0x3c (C) [ 62.703922][ T8120] __dump_stack+0x30/0x40 [ 62.703930][ T8120] dump_stack_lvl+0xd8/0x12c [ 62.703936][ T8120] dump_stack+0x1c/0x28 [ 62.703942][ T8120] should_fail_ex+0x41c/0x594 [ 62.703948][ T8120] should_fail+0x14/0x24 [ 62.703953][ T8120] should_fail_usercopy+0x20/0x30 [ 62.703958][ T8120] _inline_copy_from_user+0x40/0x180 [ 62.703966][ T8120] ___sys_sendmsg+0x144/0x278 [ 62.703972][ T8120] __arm64_sys_sendmsg+0x184/0x238 [ 62.703977][ T8120] invoke_syscall+0x98/0x254 [ 62.703984][ T8120] el0_svc_common+0x130/0x23c [ 62.703989][ T8120] do_el0_svc+0x48/0x58 [ 62.703994][ T8120] el0_svc+0x5c/0x254 [ 62.704000][ T8120] el0t_64_sync_handler+0x84/0x12c [ 62.704005][ T8120] el0t_64_sync+0x198/0x19c [ 62.740945][ T41] BTRFS warning (device loop0): checksum verify failed on logical 5292032 mirror 1 wanted 0xe145e4ee found 0x53a6a3f2 level 0 [ 62.741744][ T8114] BTRFS warning (device loop0): failed to read root (objectid=9): -5 [ 62.741767][ T8114] BTRFS warning (device loop0): try to load backup roots slot 1 [ 62.744689][ T2237] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x12d9d70a level 0 [ 62.749009][ T8114] BTRFS warning (device loop0): couldn't read tree root [ 62.749054][ T8114] BTRFS warning (device loop0): try to load backup roots slot 2 [ 62.749332][ T4863] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 62.749390][ T8114] BTRFS warning (device loop0): couldn't read tree root [ 62.749404][ T8114] BTRFS warning (device loop0): try to load backup roots slot 3 [ 62.749723][ T8114] BTRFS warning (device loop0): global root 2 0 already exists [ 62.749738][ T8114] BTRFS error (device loop0): failed to load root extent [ 62.782745][ T8114] BTRFS error (device loop0): open_ctree failed: -17 [ 62.808256][ T8114] 9pnet_fd: Insufficient options for proto=fd [ 62.830362][ T8142] tipc: Enabling of bearer rejected, already enabled [ 62.863778][ T8146] binder: 8145:8146 ioctl 4018620d 0 returned -22 [ 62.915751][ T8151] FAULT_INJECTION: forcing a failure. [ 62.915751][ T8151] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 62.915787][ T8151] CPU: 0 UID: 0 PID: 8151 Comm: syz.2.401 Not tainted syzkaller #0 PREEMPT [ 62.915798][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 62.915804][ T8151] Call trace: [ 62.915807][ T8151] show_stack+0x2c/0x3c (C) [ 62.915822][ T8151] __dump_stack+0x30/0x40 [ 62.915829][ T8151] dump_stack_lvl+0xd8/0x12c [ 62.915835][ T8151] dump_stack+0x1c/0x28 [ 62.915840][ T8151] should_fail_ex+0x41c/0x594 [ 62.915847][ T8151] should_fail_alloc_page+0xec/0x10c [ 62.915854][ T8151] prepare_alloc_pages+0x1c8/0x50c [ 62.915859][ T8151] __alloc_frozen_pages_noprof+0x134/0x318 [ 62.915864][ T8151] alloc_pages_mpol+0x1e4/0x460 [ 62.915871][ T8151] alloc_pages_noprof+0xe0/0x308 [ 62.915878][ T8151] __pmd_alloc+0x54/0x4e0 [ 62.915885][ T8151] copy_pud_range+0x70d4/0x77f4 [ 62.915890][ T8151] copy_page_range+0x538/0xb30 [ 62.915896][ T8151] dup_mmap+0xc70/0x16b4 [ 62.915901][ T8151] copy_mm+0x100/0x438 [ 62.915907][ T8151] copy_process+0x1520/0x31ec [ 62.915912][ T8151] kernel_clone+0x1d8/0x84c [ 62.915918][ T8151] __arm64_sys_clone3+0x308/0x348 [ 62.915924][ T8151] invoke_syscall+0x98/0x254 [ 62.915930][ T8151] el0_svc_common+0x130/0x23c [ 62.915935][ T8151] do_el0_svc+0x48/0x58 [ 62.915940][ T8151] el0_svc+0x5c/0x254 [ 62.915947][ T8151] el0t_64_sync_handler+0x84/0x12c [ 62.915951][ T8151] el0t_64_sync+0x198/0x19c [ 63.124180][ T8155] loop1: detected capacity change from 0 to 32768 [ 63.126618][ T8155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.402 (8155) [ 63.131026][ T8155] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.133160][ T8155] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 63.134608][ T8155] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 63.163037][ T8155] BTRFS info (device loop1): rebuilding free space tree [ 63.165640][ T8155] BTRFS info (device loop1): disabling free space tree [ 63.165694][ T8155] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.165973][ T8155] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.168010][ T8155] BTRFS info (device loop1): enabling ssd optimizations [ 63.168020][ T8155] BTRFS info (device loop1): enabling disk space caching [ 63.168027][ T8155] BTRFS info (device loop1): force clearing of disk cache [ 63.168033][ T8155] BTRFS info (device loop1): enabling auto defrag [ 63.168039][ T8155] BTRFS info (device loop1): force zlib compression, level 3 [ 63.168046][ T8155] BTRFS info (device loop1): max_inline set to 0 [ 63.237047][ T2237] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 63.702557][ T6600] binder_debug: 5 callbacks suppressed [ 63.702591][ T6600] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.702704][ T6600] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.948528][ T6546] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.986685][ T8190] netlink: 14 bytes leftover after parsing attributes in process `syz.2.411'. [ 63.990163][ T8192] tipc: Enabling of bearer rejected, already enabled [ 64.166550][ T8190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.167049][ T8186] loop3: detected capacity change from 0 to 65536 [ 64.169903][ T8188] loop0: detected capacity change from 0 to 32768 [ 64.183547][ T8188] JBD2: Ignoring recovery information on journal [ 64.186230][ T8190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.190380][ T8186] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 64.200914][ T8188] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 64.209507][ T8190] bond0 (unregistering): Released all slaves [ 64.215727][ T8186] XFS (loop3): Ending clean mount [ 64.220989][ T8186] XFS (loop3): Quotacheck needed: Please wait. [ 64.246605][ T8186] XFS (loop3): Quotacheck: Done. [ 64.263551][ T8199] tipc: Enabling of bearer rejected, already enabled [ 64.322316][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.414'. [ 64.325206][ T8215] binder: BINDER_SET_CONTEXT_MGR already set [ 64.325240][ T8215] binder: 8214:8215 ioctl 4018620d 20004a80 returned -16 [ 64.346850][ T6542] ocfs2: Unmounting device (7,0) on (node local) [ 64.386174][ T8228] binder: 8214:8228 transaction reply to 0:0 failed 30/29201/-71, code 0 size 0-8192 line 3054 [ 64.500494][ T2429] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.500546][ T2429] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.543839][ T8235] netlink: 'syz.2.421': attribute type 5 has an invalid length. [ 64.675805][ T6543] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 64.694388][ T8225] loop4: detected capacity change from 0 to 32768 [ 64.700774][ T8225] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.418 (8225) [ 64.713618][ T8225] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.713673][ T8225] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 64.713695][ T8225] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 64.718695][ T8244] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 64.718720][ T8244] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 64.726123][ T8244] tipc: Enabling of bearer rejected, already enabled [ 64.840772][ T8225] BTRFS info (device loop4): rebuilding free space tree [ 64.860673][ T8270] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 64.862131][ T8270] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 64.865845][ T8225] BTRFS info (device loop4): disabling free space tree [ 64.865889][ T8225] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.865899][ T8225] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.867042][ T8225] BTRFS info (device loop4): enabling ssd optimizations [ 64.867052][ T8225] BTRFS info (device loop4): enabling disk space caching [ 64.867058][ T8225] BTRFS info (device loop4): force clearing of disk cache [ 64.867064][ T8225] BTRFS info (device loop4): enabling auto defrag [ 64.867071][ T8225] BTRFS info (device loop4): force zlib compression, level 3 [ 64.867077][ T8225] BTRFS info (device loop4): max_inline set to 0 [ 64.916088][ T8267] loop3: detected capacity change from 0 to 32768 [ 64.926297][ T14] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 64.965469][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 65.142832][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.239296][ T8277] loop0: detected capacity change from 0 to 40427 [ 65.246959][ T8277] F2FS-fs (loop0): invalid crc value [ 65.278447][ T8277] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 65.280756][ T8277] F2FS-fs (loop0): Start checkpoint disabled! [ 65.290110][ T8277] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 65.343490][ T6552] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.462392][ T8293] tipc: Enabling of bearer rejected, already enabled [ 65.498654][ T8297] FAULT_INJECTION: forcing a failure. [ 65.498654][ T8297] name failslab, interval 1, probability 0, space 0, times 0 [ 65.498690][ T8297] CPU: 1 UID: 0 PID: 8297 Comm: syz.3.439 Not tainted syzkaller #0 PREEMPT [ 65.498702][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 65.498707][ T8297] Call trace: [ 65.498709][ T8297] show_stack+0x2c/0x3c (C) [ 65.498723][ T8297] __dump_stack+0x30/0x40 [ 65.498729][ T8297] dump_stack_lvl+0xd8/0x12c [ 65.498735][ T8297] dump_stack+0x1c/0x28 [ 65.498740][ T8297] should_fail_ex+0x41c/0x594 [ 65.498746][ T8297] should_failslab+0xc0/0x128 [ 65.498753][ T8297] kmem_cache_alloc_noprof+0x80/0x3e8 [ 65.498760][ T8297] vm_area_dup+0x34/0x50c [ 65.498767][ T8297] dup_mmap+0x778/0x16b4 [ 65.498772][ T8297] copy_mm+0x100/0x438 [ 65.498778][ T8297] copy_process+0x1520/0x31ec [ 65.498784][ T8297] kernel_clone+0x1d8/0x84c [ 65.498789][ T8297] __arm64_sys_clone3+0x308/0x348 [ 65.498795][ T8297] invoke_syscall+0x98/0x254 [ 65.498801][ T8297] el0_svc_common+0x130/0x23c [ 65.498806][ T8297] do_el0_svc+0x48/0x58 [ 65.498811][ T8297] el0_svc+0x5c/0x254 [ 65.498817][ T8297] el0t_64_sync_handler+0x84/0x12c [ 65.498822][ T8297] el0t_64_sync+0x198/0x19c [ 65.526453][ T8299] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 65.526499][ T8299] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 65.617417][ T8308] mkiss: ax0: crc mode is auto. [ 65.636554][ T8306] fuse: Bad value for 'fd' [ 65.648832][ T8310] binder: BINDER_SET_CONTEXT_MGR already set [ 65.648865][ T8310] binder: 8309:8310 ioctl 4018620d 20004a80 returned -16 [ 65.649144][ T8310] binder_user_error: 8 callbacks suppressed [ 65.649149][ T8310] binder: 8309:8310 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 65.649160][ T8310] binder: 8310 RLIMIT_NICE not set [ 65.703259][ T8314] binder: 8309:8314 got reply transaction with no transaction stack [ 65.704740][ T8314] binder: 8309:8314 transaction reply to 0:0 failed 32/29201/-71, code 0 size 0-8192 line 3054 [ 65.764611][ T8313] mkiss: ax0: crc mode is auto. [ 65.865369][ T8318] loop1: detected capacity change from 0 to 32768 [ 65.874459][ T8318] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.445 (8318) [ 65.881893][ T8318] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.881943][ T8318] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 65.881964][ T8318] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 65.921609][ T8303] loop2: detected capacity change from 0 to 32768 [ 65.923570][ T8303] XFS: noikeep mount option is deprecated. [ 65.962346][ T8303] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 65.999870][ T8318] BTRFS info (device loop1): rebuilding free space tree [ 66.008493][ T8318] BTRFS info (device loop1): disabling free space tree [ 66.010671][ T8318] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.012361][ T8318] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.016362][ T8318] BTRFS info (device loop1): setting nodatasum [ 66.020258][ T8318] BTRFS info (device loop1): setting nodatacow [ 66.027493][ T8318] BTRFS info (device loop1): enabling ssd optimizations [ 66.027543][ T8318] BTRFS info (device loop1): enabling disk space caching [ 66.027564][ T8318] BTRFS info (device loop1): force clearing of disk cache [ 66.027584][ T8318] BTRFS info (device loop1): enabling auto defrag [ 66.027600][ T8318] BTRFS info (device loop1): max_inline set to 0 [ 66.055531][ T14] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 66.056453][ T8303] XFS (loop2): Ending clean mount [ 66.060839][ T8303] XFS (loop2): Quotacheck needed: Please wait. [ 66.070506][ T8318] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.096580][ T8303] XFS (loop2): Quotacheck: Done. [ 66.126419][ T6550] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 66.215945][ T8348] tipc: Enabling of bearer rejected, already enabled [ 66.335523][ T8354] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 66.343459][ T8354] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 66.346534][ T8354] tipc: Enabling of bearer rejected, already enabled [ 66.468867][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.484421][ T8360] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 66.484461][ T8360] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 66.724854][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 66.726789][ T8365] xt_l2tp: v2 sid > 0xffff: 262144 [ 66.925555][ T8374] loop3: detected capacity change from 0 to 64 [ 66.939565][ T8364] loop4: detected capacity change from 0 to 40427 [ 66.947542][ T8364] F2FS-fs: heap/no_heap options were deprecated [ 66.947959][ T8364] F2FS-fs (loop4): build fault injection rate: 19 [ 66.947967][ T8364] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 66.948585][ T8364] F2FS-fs (loop4): invalid crc value [ 66.953703][ T8364] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 66.969958][ T8374] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 66.973728][ T8374] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 66.982702][ T8364] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 66.985787][ T8364] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 66.993109][ T8364] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.005356][ T8364] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 67.014683][ T8364] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of f2fs_zero_range+0x92c/0xc3c [ 67.014747][ T8364] CPU: 1 UID: 0 PID: 8364 Comm: syz.4.455 Not tainted syzkaller #0 PREEMPT [ 67.014757][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 67.014763][ T8364] Call trace: [ 67.014766][ T8364] show_stack+0x2c/0x3c (C) [ 67.014776][ T8364] __dump_stack+0x30/0x40 [ 67.014784][ T8364] dump_stack_lvl+0xd8/0x12c [ 67.014791][ T8364] dump_stack+0x1c/0x28 [ 67.014799][ T8364] f2fs_handle_critical_error+0x34c/0x4b8 [ 67.014808][ T8364] f2fs_stop_checkpoint+0x5c/0x70 [ 67.014816][ T8364] f2fs_balance_fs+0x278/0x6ec [ 67.014824][ T8364] f2fs_zero_range+0x92c/0xc3c [ 67.014831][ T8364] f2fs_fallocate+0x408/0x8ec [ 67.014837][ T8364] vfs_fallocate+0x52c/0x668 [ 67.014847][ T8364] file_ioctl+0x584/0x75c [ 67.014857][ T8364] do_vfs_ioctl+0xa10/0x1834 [ 67.014865][ T8364] __arm64_sys_ioctl+0xe4/0x1c4 [ 67.014875][ T8364] invoke_syscall+0x98/0x254 [ 67.014882][ T8364] el0_svc_common+0x130/0x23c [ 67.014890][ T8364] do_el0_svc+0x48/0x58 [ 67.014897][ T8364] el0_svc+0x5c/0x254 [ 67.014904][ T8364] el0t_64_sync_handler+0x84/0x12c [ 67.014910][ T8364] el0t_64_sync+0x198/0x19c [ 67.014918][ T8364] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 67.216032][ T8380] loop4: detected capacity change from 0 to 64 [ 67.461427][ T8370] loop1: detected capacity change from 0 to 131072 [ 67.463742][ T8370] F2FS-fs (loop1): LFS is not compatible with ATGC [ 67.474314][ T8388] binder: BINDER_SET_CONTEXT_MGR already set [ 67.474342][ T8388] binder: 8386:8388 ioctl 4018620d 20004a80 returned -16 [ 67.474625][ T8388] binder: 8386:8388 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 67.474642][ T8388] binder: 8388 RLIMIT_NICE not set [ 67.525669][ T8390] binder: 8386:8390 got reply transaction with no transaction stack [ 67.539886][ T8390] binder: 8386:8390 transaction reply to 0:0 failed 34/29201/-71, code 0 size 0-8192 line 3054 [ 67.992566][ T8402] rdma_rxe: rxe_newlink: failed to add syz_tun [ 68.297276][ T8423] loop3: detected capacity change from 0 to 128 [ 68.304668][ T6600] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.409506][ T8415] loop0: detected capacity change from 0 to 40427 [ 68.409905][ T8415] F2FS-fs: heap/no_heap options were deprecated [ 68.415141][ T8415] F2FS-fs (loop0): build fault injection rate: 19 [ 68.415191][ T8415] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 68.418473][ T8415] F2FS-fs (loop0): invalid crc value [ 68.422240][ T8415] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 68.433757][ T8415] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 68.437889][ T8415] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 68.440059][ T8415] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 68.462997][ T8415] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 68.471651][ T8415] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0xe4/0x6d0 [ 68.491602][ T6542] syz-executor: attempt to access beyond end of device [ 68.491602][ T6542] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 68.493667][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 68.493692][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 68.493699][ T6542] Call trace: [ 68.493703][ T6542] show_stack+0x2c/0x3c (C) [ 68.493721][ T6542] __dump_stack+0x30/0x40 [ 68.493729][ T6542] dump_stack_lvl+0xd8/0x12c [ 68.493735][ T6542] dump_stack+0x1c/0x28 [ 68.493741][ T6542] f2fs_handle_critical_error+0x34c/0x4b8 [ 68.493749][ T6542] f2fs_stop_checkpoint+0x5c/0x70 [ 68.493755][ T6542] f2fs_write_end_io+0x768/0xa70 [ 68.493760][ T6542] bio_endio+0x858/0x894 [ 68.493766][ T6542] submit_bio_noacct+0x158/0x177c [ 68.493772][ T6542] submit_bio+0x3b4/0x550 [ 68.493778][ T6542] f2fs_submit_write_bio+0x13c/0x324 [ 68.493784][ T6542] __submit_merged_bio+0x254/0x704 [ 68.493791][ T6542] __submit_merged_write_cond+0x23c/0x4ac [ 68.493797][ T6542] f2fs_write_data_pages+0x1d28/0x2634 [ 68.493804][ T6542] do_writepages+0x270/0x468 [ 68.493812][ T6542] filemap_fdatawrite+0x14c/0x1f4 [ 68.493819][ T6542] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 68.493825][ T6542] f2fs_write_checkpoint+0x690/0x16a0 [ 68.493830][ T6542] kill_f2fs_super+0x21c/0x584 [ 68.493837][ T6542] deactivate_locked_super+0xc4/0x12c [ 68.493843][ T6542] deactivate_super+0xe0/0x100 [ 68.493849][ T6542] cleanup_mnt+0x31c/0x3ac [ 68.493855][ T6542] __cleanup_mnt+0x20/0x30 [ 68.493860][ T6542] task_work_run+0x1dc/0x260 [ 68.493867][ T6542] exit_to_user_mode_loop+0xfc/0x168 [ 68.493875][ T6542] el0_svc+0x170/0x254 [ 68.493881][ T6542] el0t_64_sync_handler+0x84/0x12c [ 68.493886][ T6542] el0t_64_sync+0x198/0x19c [ 68.493894][ T6542] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 68.551711][ T8442] rdma_rxe: rxe_newlink: failed to add syz_tun [ 68.813709][ T8449] loop2: detected capacity change from 0 to 256 [ 68.980325][ T8455] binder: 8454:8455 ioctl c0306201 0 returned -14 [ 68.986684][ T8455] binder: 8454:8455 got transaction to invalid handle, 1 [ 68.988172][ T8455] binder: 8454:8455 cannot find target node [ 68.989264][ T8455] binder: 8454:8455 transaction call to 0:0 failed 38/29201/-22, code 0 size 0-0 line 3151 [ 68.992779][ T8455] binder: 8454:8455 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.995465][ T8455] binder: 8455 RLIMIT_NICE not set [ 69.043819][ T8456] binder: 8454:8456 got reply transaction with no transaction stack [ 69.043859][ T8456] binder: 8454:8456 transaction reply to 0:0 failed 39/29201/-71, code 0 size 0-8192 line 3054 [ 69.453620][ T8462] loop0: detected capacity change from 0 to 256 [ 69.468502][ T8462] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.493035][ T8462] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.871902][ T1832] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.871975][ T1832] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.896829][ T8436] loop4: detected capacity change from 0 to 262144 [ 69.939326][ T8473] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 69.939390][ T8473] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 69.968294][ T8436] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 69.973777][ T8436] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.134037][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 70.134072][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 70.194618][ T8487] autofs: Bad value for 'fd' [ 70.220919][ T8482] loop2: detected capacity change from 0 to 40427 [ 70.223947][ T8482] F2FS-fs (loop2): build fault injection rate: 18 [ 70.223981][ T8482] F2FS-fs (loop2): build fault injection type: 0x77fd1 [ 70.226123][ T8482] F2FS-fs (loop2): invalid crc value [ 70.243736][ T8482] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x24c8/0x39c0 [ 70.243803][ T8482] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 70.366652][ T8498] binder: 8496:8498 ioctl c0306201 0 returned -14 [ 70.367607][ T8498] binder: BINDER_SET_CONTEXT_MGR already set [ 70.367613][ T8498] binder: 8496:8498 ioctl 4018620d 20004a80 returned -16 [ 70.367783][ T8498] binder: 8496:8498 cannot find target node [ 70.367791][ T8498] binder: 8496:8498 transaction call to 0:0 failed 42/29201/-22, code 0 size 0-0 line 3151 [ 70.418707][ T8501] binder: 8496:8501 transaction reply to 0:0 failed 43/29201/-71, code 0 size 0-8192 line 3054 [ 70.562633][ T8495] loop0: detected capacity change from 0 to 32768 [ 70.565424][ T8495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.501 (8495) [ 70.569566][ T8495] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.569627][ T8495] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 70.569648][ T8495] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 70.618845][ T8502] loop2: detected capacity change from 0 to 32768 [ 70.636944][ T8495] BTRFS info (device loop0): rebuilding free space tree [ 70.648238][ T8495] BTRFS info (device loop0): disabling free space tree [ 70.650263][ T8495] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.652378][ T8495] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.661584][ T8502] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 70.664132][ T8495] BTRFS info (device loop0): enabling ssd optimizations [ 70.666309][ T8495] BTRFS info (device loop0): enabling disk space caching [ 70.669287][ T8495] BTRFS info (device loop0): force clearing of disk cache [ 70.670680][ T8495] BTRFS info (device loop0): enabling auto defrag [ 70.672417][ T8495] BTRFS info (device loop0): force zlib compression, level 3 [ 70.674142][ T8495] BTRFS info (device loop0): max_inline set to 0 [ 70.724475][ T8502] XFS (loop2): Ending clean mount [ 70.731928][ T8502] XFS (loop2): Quotacheck needed: Please wait. [ 70.751642][ T8528] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 70.751677][ T8528] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 70.752978][ T8528] tipc: Enabling of bearer rejected, already enabled [ 70.763943][ T8502] XFS (loop2): Quotacheck: Done. [ 70.786762][ T31] audit: type=1326 audit(70.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8500 comm="syz.2.505" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb595b3a8 code=0x0 [ 70.879150][ T8535] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 70.881206][ T8535] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 70.964731][ T6542] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.182169][ T8560] capability: warning: `syz.4.518' uses deprecated v2 capabilities in a way that may be insecure [ 71.194734][ T8560] mkiss: ax0: crc mode is auto. [ 71.206299][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.206370][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.225324][ T8552] loop0: detected capacity change from 0 to 40427 [ 71.231801][ T8552] F2FS-fs (loop0): build fault injection rate: 18 [ 71.231835][ T8552] F2FS-fs (loop0): build fault injection type: 0x77fd1 [ 71.234735][ T8552] F2FS-fs (loop0): invalid crc value [ 71.236615][ T8552] F2FS-fs (loop0): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x24c8/0x39c0 [ 71.238335][ T8552] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12) [ 71.264054][ T6550] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 71.325624][ T8562] loop3: detected capacity change from 0 to 32768 [ 71.330845][ T8562] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.519 (8562) [ 71.338594][ T8562] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.340277][ T8562] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 71.341621][ T8562] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 71.355367][ T8576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.522'. [ 71.368081][ T8576] netlink: 9 bytes leftover after parsing attributes in process `syz.0.522'. [ 71.368123][ T8576] netlink: 9 bytes leftover after parsing attributes in process `syz.0.522'. [ 71.377554][ T8576] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 71.409659][ T8562] BTRFS info (device loop3): rebuilding free space tree [ 71.425625][ T8562] BTRFS info (device loop3): disabling free space tree [ 71.425674][ T8562] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.425684][ T8562] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.430172][ T8562] BTRFS info (device loop3): enabling ssd optimizations [ 71.430200][ T8562] BTRFS info (device loop3): enabling disk space caching [ 71.430217][ T8562] BTRFS info (device loop3): force clearing of disk cache [ 71.430224][ T8562] BTRFS info (device loop3): enabling auto defrag [ 71.430232][ T8562] BTRFS info (device loop3): force zlib compression, level 3 [ 71.430240][ T8562] BTRFS info (device loop3): max_inline set to 0 [ 71.488816][ T8576] loop0: detected capacity change from 0 to 32768 [ 71.492360][ T8576] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.522 (8576) [ 71.504793][ T8576] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 71.504848][ T8576] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 71.539261][ T8576] BTRFS info (device loop0): enabling ssd optimizations [ 71.539298][ T8576] BTRFS info (device loop0): enabling free space tree [ 71.685889][ T8587] loop4: detected capacity change from 0 to 40427 [ 71.694893][ T8587] F2FS-fs (loop4): Image doesn't support compression [ 71.696168][ T8587] F2FS-fs (loop4): build fault injection rate: 690 [ 71.698100][ T8587] F2FS-fs (loop4): build fault injection type: 0x35f7 [ 71.702665][ T8587] F2FS-fs (loop4): invalid crc value [ 71.745177][ T8587] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 71.745579][ T8587] F2FS-fs (loop4): Start checkpoint disabled! [ 71.746141][ T8587] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 71.753556][ T6543] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.761549][ T6557] Bluetooth: hci4: unexpected event for opcode 0x202f [ 71.775122][ T8587] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 71.792180][ T6552] F2FS-fs (loop4): access invalid blkaddr:4043309056 [ 71.792218][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 71.792228][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 71.792233][ T6552] Call trace: [ 71.792236][ T6552] show_stack+0x2c/0x3c (C) [ 71.792250][ T6552] __dump_stack+0x30/0x40 [ 71.792257][ T6552] dump_stack_lvl+0xd8/0x12c [ 71.792263][ T6552] dump_stack+0x1c/0x28 [ 71.792268][ T6552] __f2fs_is_valid_blkaddr+0xae0/0x107c [ 71.792283][ T6552] f2fs_is_valid_blkaddr+0x12c/0x294 [ 71.792288][ T6552] f2fs_map_blocks+0x918/0x31a8 [ 71.792296][ T6552] f2fs_mpage_readpages+0xa40/0x15d8 [ 71.792301][ T6552] f2fs_readahead+0x184/0x388 [ 71.792308][ T6552] read_pages+0x13c/0x4c4 [ 71.792316][ T6552] page_cache_ra_unbounded+0x628/0x71c [ 71.792323][ T6552] page_cache_ra_order+0x930/0xb7c [ 71.792330][ T6552] page_cache_sync_ra+0x580/0x73c [ 71.792337][ T6552] f2fs_readdir+0x358/0x8d4 [ 71.792342][ T6552] iterate_dir+0x2dc/0x478 [ 71.792349][ T6552] __arm64_sys_getdents64+0x110/0x2fc [ 71.792356][ T6552] invoke_syscall+0x98/0x254 [ 71.792362][ T6552] el0_svc_common+0x130/0x23c [ 71.792367][ T6552] do_el0_svc+0x48/0x58 [ 71.792373][ T6552] el0_svc+0x5c/0x254 [ 71.792379][ T6552] el0t_64_sync_handler+0x84/0x12c [ 71.792384][ T6552] el0t_64_sync+0x198/0x19c [ 71.796732][ T6552] syz-executor: attempt to access beyond end of device [ 71.796732][ T6552] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 71.800834][ T6552] syz-executor: attempt to access beyond end of device [ 71.800834][ T6552] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 71.885616][ T41] smc: removing ib device syz1 [ 71.891343][ T9] syz1: Port: 1 Link DOWN [ 72.210955][ T6542] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 72.305867][ C1] vcan0: j1939_tp_rxtimer: 0x000000006e88d43a: rx timeout, send abort [ 72.308396][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006e88d43a: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 72.309119][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000005675d2cb: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 72.467549][ T8643] netlink: 14 bytes leftover after parsing attributes in process `syz.0.538'. [ 72.673040][ T41] ------------[ cut here ]------------ [ 72.673074][ T41] GID entry ref leak for dev syz1 index 2 ref=1 [ 72.675938][ T41] WARNING: CPU: 0 PID: 41 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x284/0x3cc [ 72.677628][ T41] Modules linked in: [ 72.678145][ T41] CPU: 0 UID: 0 PID: 41 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT [ 72.679531][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 72.681095][ T41] Workqueue: ib-unreg-wq ib_unregister_work [ 72.681923][ T41] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 72.683109][ T41] pc : gid_table_release_one+0x284/0x3cc [ 72.683953][ T41] lr : gid_table_release_one+0x284/0x3cc [ 72.684802][ T41] sp : ffff8000993a7880 [ 72.685419][ T41] x29: ffff8000993a78d0 x28: ffff0000d4e85500 x27: ffff0000db92cad8 [ 72.686665][ T41] x26: ffff0000db92ca00 x25: 0000000000000010 x24: 0000000000000001 [ 72.687820][ T41] x23: ffff800092ef3000 x22: dfff800000000000 x21: 0000000000000003 [ 72.689075][ T41] x20: 1fffe0001b72595b x19: 1fffe0001b725940 x18: 1fffe00033771c88 [ 72.690293][ T41] x17: ffff80008f85e000 x16: ffff80008b065bd0 x15: 0000000000000001 [ 72.691478][ T41] x14: 1fffe00033774708 x13: 0000000000000000 x12: 0000000000000000 [ 72.692790][ T41] x11: ffff800093404c28 x10: 0000000000000003 x9 : e8cca512853df800 [ 72.694041][ T41] x8 : e8cca512853df800 x7 : ffff800080493890 x6 : 0000000000000000 [ 72.695227][ T41] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 72.696405][ T41] x2 : 0000000000000006 x1 : ffff80008b6b38c0 x0 : 0000000000000001 [ 72.697542][ T41] Call trace: [ 72.698001][ T41] gid_table_release_one+0x284/0x3cc (P) [ 72.698823][ T41] ib_cache_release_one+0x144/0x174 [ 72.699666][ T41] ib_device_release+0xc4/0x194 [ 72.700394][ T41] device_release+0x8c/0x1ac [ 72.701063][ T41] kobject_put+0x2b0/0x438 [ 72.701738][ T41] put_device+0x28/0x40 [ 72.702301][ T41] ib_unregister_work+0x28/0x38 [ 72.702963][ T41] process_one_work+0x7e8/0x155c [ 72.703725][ T41] worker_thread+0x958/0xed8 [ 72.704427][ T41] kthread+0x5fc/0x75c [ 72.705016][ T41] ret_from_fork+0x10/0x20 [ 72.705782][ T41] irq event stamp: 1149602 [ 72.706403][ T41] hardirqs last enabled at (1149601): [] finish_lock_switch+0xb0/0x1c0 [ 72.707964][ T41] hardirqs last disabled at (1149602): [] el1_brk64+0x20/0x54 [ 72.709353][ T41] softirqs last enabled at (1143260): [] handle_softirqs+0xaf8/0xc88 [ 72.710925][ T41] softirqs last disabled at (1143247): [] __do_softirq+0x14/0x20 [ 72.712336][ T41] ---[ end trace 0000000000000000 ]--- [ 72.721828][ T8643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 72.785192][ T8643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.789005][ T4863] kworker/u8:8: attempt to access beyond end of device [ 72.789005][ T4863] loop4: rw=2049, sector=45096, nr_sectors = 40 limit=40427 [ 72.789880][ T4863] CPU: 0 UID: 0 PID: 4863 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT [ 72.789892][ T4863] Tainted: [W]=WARN [ 72.789895][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 72.789899][ T4863] Workqueue: writeback wb_workfn (flush-7:4) [ 72.789917][ T4863] Call trace: [ 72.789920][ T4863] show_stack+0x2c/0x3c (C) [ 72.789932][ T4863] __dump_stack+0x30/0x40 [ 72.789940][ T4863] dump_stack_lvl+0xd8/0x12c [ 72.789945][ T4863] dump_stack+0x1c/0x28 [ 72.789951][ T4863] f2fs_handle_critical_error+0x34c/0x4b8 [ 72.789959][ T4863] f2fs_stop_checkpoint+0x5c/0x70 [ 72.789966][ T4863] f2fs_write_end_io+0x768/0xa70 [ 72.789971][ T4863] bio_endio+0x858/0x894 [ 72.789977][ T4863] submit_bio_noacct+0x158/0x177c [ 72.789983][ T4863] submit_bio+0x3b4/0x550 [ 72.789989][ T4863] f2fs_submit_write_bio+0x13c/0x324 [ 72.789996][ T4863] __submit_merged_bio+0x254/0x704 [ 72.790002][ T4863] __submit_merged_write_cond+0x23c/0x4ac [ 72.790009][ T4863] f2fs_write_data_pages+0x1d28/0x2634 [ 72.790016][ T4863] do_writepages+0x270/0x468 [ 72.790024][ T4863] __writeback_single_inode+0x15c/0x13e8 [ 72.790029][ T4863] writeback_sb_inodes+0x55c/0xe40 [ 72.790034][ T4863] wb_writeback+0x3cc/0xd70 [ 72.790039][ T4863] wb_workfn+0x338/0xdc0 [ 72.790045][ T4863] process_one_work+0x7e8/0x155c [ 72.790052][ T4863] worker_thread+0x958/0xed8 [ 72.790058][ T4863] kthread+0x5fc/0x75c [ 72.790063][ T4863] ret_from_fork+0x10/0x20 [ 72.790071][ T4863] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 72.790696][ T4863] CPU: 0 UID: 0 PID: 4863 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT [ 72.790705][ T4863] Tainted: [W]=WARN [ 72.790707][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 72.790710][ T4863] Workqueue: writeback wb_workfn (flush-7:4) [ 72.790721][ T4863] Call trace: [ 72.790722][ T4863] show_stack+0x2c/0x3c (C) [ 72.790729][ T4863] __dump_stack+0x30/0x40 [ 72.790734][ T4863] dump_stack_lvl+0xd8/0x12c [ 72.790740][ T4863] dump_stack+0x1c/0x28 [ 72.790745][ T4863] f2fs_handle_critical_error+0x34c/0x4b8 [ 72.790752][ T4863] f2fs_stop_checkpoint+0x5c/0x70 [ 72.790758][ T4863] f2fs_write_end_io+0x768/0xa70 [ 72.790762][ T4863] bio_endio+0x858/0x894 [ 72.790767][ T4863] submit_bio_noacct+0x158/0x177c [ 72.790773][ T4863] submit_bio+0x3b4/0x550 [ 72.790778][ T4863] f2fs_submit_write_bio+0x13c/0x324 [ 72.790785][ T4863] __submit_merged_bio+0x254/0x704 [ 72.790791][ T4863] __submit_merged_write_cond+0x23c/0x4ac [ 72.790798][ T4863] f2fs_write_data_pages+0x1d28/0x2634 [ 72.790804][ T4863] do_writepages+0x270/0x468 [ 72.790811][ T4863] __writeback_single_inode+0x15c/0x13e8 [ 72.790816][ T4863] writeback_sb_inodes+0x55c/0xe40 [ 72.790821][ T4863] wb_writeback+0x3cc/0xd70 [ 72.790825][ T4863] wb_workfn+0x338/0xdc0 [ 72.790831][ T4863] process_one_work+0x7e8/0x155c [ 72.790837][ T4863] worker_thread+0x958/0xed8 [ 72.790843][ T4863] kthread+0x5fc/0x75c [ 72.790847][ T4863] ret_from_fork+0x10/0x20 [ 72.790855][ T4863] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 72.790866][ T4863] CPU: 0 UID: 0 PID: 4863 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT [ 72.790872][ T4863] Tainted: [W]=WARN [ 72.790874][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 72.790877][ T4863] Workqueue: writeback wb_workfn (flush-7:4) [ 72.790886][ T4863] Call trace: [ 72.790887][ T4863] show_stack+0x2c/0x3c (C) [ 72.790893][ T4863] __dump_stack+0x30/0x40 [ 72.790898][ T4863] dump_stack_lvl+0xd8/0x12c [ 72.790904][ T4863] dump_stack+0x1c/0x28 [ 72.790909][ T4863] f2fs_handle_critical_error+0x34c/0x4b8 [ 72.790915][ T4863] f2fs_stop_checkpoint+0x5c/0x70 [ 72.790921][ T4863] f2fs_write_end_io+0x768/0xa70 [ 72.790925][ T4863] bio_endio+0x858/0x894 [ 72.790929][ T4863] submit_bio_noacct+0x158/0x177c [ 72.790935][ T4863] submit_bio+0x3b4/0x550 [ 72.790941][ T4863] f2fs_submit_write_bio+0x13c/0x324 [ 72.790947][ T4863] __submit_merged_bio+0x254/0x704 [ 72.790953][ T4863] __submit_merged_write_cond+0x23c/0x4ac [ 72.790960][ T4863] f2fs_write_data_pages+0x1d28/0x2634 [ 72.790967][ T4863] do_writepages+0x270/0x468 [ 72.790973][ T4863] __writeback_single_inode+0x15c/0x13e8 [ 72.790978][ T4863] writeback_sb_inodes+0x55c/0xe40 [ 72.790983][ T4863] wb_writeback+0x3cc/0xd70 [ 72.790987][ T4863] wb_workfn+0x338/0xdc0 [ 72.790994][ T4863] process_one_work+0x7e8/0x155c [ 72.790999][ T4863] worker_thread+0x958/0xed8 [ 72.791005][ T4863] kthread+0x5fc/0x75c [ 72.791009][ T4863] ret_from_fork+0x10/0x20 [ 72.791016][ T4863] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 72.791027][ T4863] CPU: 0 UID: 0 PID: 4863 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT [ 72.791033][ T4863] Tainted: [W]=WARN [ 72.791035][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 72.791038][ T4863] Workqueue: writeback wb_workfn (flush-7:4) [ 72.791046][ T4863] Call trace: [ 72.791047][ T4863] show_stack+0x2c/0x3c (C) [ 72.791053][ T4863] __dump_stack+0x30/0x40 [ 72.791058][ T4863] dump_stack_lvl+0xd8/0x12c [ 72.791064][ T4863] dump_stack+0x1c/0x28 [ 72.791069][ T4863] f2fs_handle_critical_error+0x34c/0x4b8 [ 72.791075][ T4863] f2fs_stop_checkpoint+0x5c/0x70 [ 72.791080][ T4863] f2fs_write_end_io+0x768/0xa70 [ 72.791085][ T4863] bio_endio+0x858/0x894 [ 72.791089][ T4863] submit_bio_noacct+0x158/0x177c [ 72.791095][ T4863] submit_bio+0x3b4/0x550 [ 72.791101][ T4863] f2fs_submit_write_bio+0x13c/0x324 [ 72.791107][ T4863] __submit_merged_bio+0x254/0x704 [ 72.791113][ T4863] __submit_merged_write_cond+0x23c/0x4ac [ 72.791120][ T4863] f2fs_write_data_pages+0x1d28/0x2634 [ 72.791126][ T4863] do_writepages+0x270/0x468 [ 72.791133][ T4863] __writeback_single_inode+0x15c/0x13e8 [ 72.791138][ T4863] writeback_sb_inodes+0x55c/0xe40 [ 72.791143][ T4863] wb_writeback+0x3cc/0xd70 [ 72.791148][ T4863] wb_workfn+0x338/0xdc0 [ 72.791154][ T4863] process_one_work+0x7e8/0x155c [ 72.791159][ T4863] worker_thread+0x958/0xed8 [ 72.791165][ T4863] kthread+0x5fc/0x75c [ 72.791170][ T4863] ret_from_fork+0x10/0x20 [ 72.791177][ T4863] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 72.791187][ T4863] CPU: 0 UID: 0 PID: 4863 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT [ 72.791194][ T4863] Tainted: [W]=WARN [ 72.791196][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 72.791199][ T4863] Workqueue: writeback wb_workfn (flush-7:4) [ 72.791207][ T4863] Call trace: [ 72.791208][ T4863] show_stack+0x2c/0x3c (C) [ 72.791214][ T4863] __dump_stack+0x30/0x40 [ 72.791220][ T4863] dump_stack_lvl+0xd8/0x12c [ 72.791225][ T4863] dump_stack+0x1c/0x28 [ 72.791230][ T4863] f2fs_handle_critical_error+0x34c/0x4b8 [ 72.791237][ T4863] f2fs_stop_checkpoint+0x5c/0x70 [ 72.791242][ T4863] f2fs_write_end_io+0x768/0xa70 [ 72.791246][ T4863] bio_endio+0x858/0x894 [ 72.791251][ T4863] submit_bio_noacct+0x158/0x177c [ 72.791257][ T4863] submit_bio+0x3b4/0x550 [ 72.791262][ T4863] f2fs_submit_write_bio+0x13c/0x324 [ 72.791273][ T4863] __submit_merged_bio+0x254/0x704 [ 72.791280][ T4863] __submit_merged_write_cond+0x23c/0x4ac [ 72.791287][ T4863] f2fs_write_data_pages+0x1d28/0x2634 [ 72.791294][ T4863] do_writepages+0x270/0x468 [ 72.791301][ T4863] __writeback_single_inode+0x15c/0x13e8 [ 72.791306][ T4863] writeback_sb_inodes+0x55c/0xe40 [ 72.791310][ T4863] wb_writeback+0x3cc/0xd70 [ 72.791315][ T4863] wb_workfn+0x338/0xdc0 [ 72.791322][ T4863] process_one_work+0x7e8/0x155c [ 72.791327][ T4863] worker_thread+0x958/0xed8 [ 72.791333][ T4863] kthread+0x5fc/0x75c [ 72.791337][ T4863] ret_from_fork+0x10/0x20 [ 72.791345][ T4863] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 72.870750][ T8643] bond0 (unregistering): Released all slaves [ 73.102205][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.148810][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.298781][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.356671][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.508355][ T12] bridge_slave_1: left allmulticast mode [ 73.508410][ T12] bridge_slave_1: left promiscuous mode [ 73.509267][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.517743][ T12] bridge_slave_0: left allmulticast mode [ 73.519146][ T12] bridge_slave_0: left promiscuous mode [ 73.520480][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.720124][ T12] tipc: Disabling bearer [ 73.721468][ T12] tipc: Left network mode [ 74.083721][ T12] hsr_slave_0: left promiscuous mode [ 74.085551][ T12] hsr_slave_1: left promiscuous mode [ 74.086210][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.086228][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.087833][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.087845][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.096475][ T12] veth1_macvtap: left promiscuous mode [ 74.099984][ T12] veth0_macvtap: left promiscuous mode [ 74.101075][ T12] veth1_vlan: left promiscuous mode [ 74.102003][ T12] veth0_vlan: left promiscuous mode [ 74.271687][ T12] team0 (unregistering): Port device team_slave_1 removed [ 74.282604][ T12] team0 (unregistering): Port device team_slave_0 removed [ 75.350735][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.400083][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.446456][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.483909][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.672630][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.717816][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.768842][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.829970][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.971392][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.010003][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.058587][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.103733][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.210416][ T12] bridge_slave_1: left allmulticast mode [ 76.211518][ T12] bridge_slave_1: left promiscuous mode [ 76.212629][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.217907][ T12] bridge_slave_0: left allmulticast mode [ 76.218910][ T12] bridge_slave_0: left promiscuous mode [ 76.219971][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.223343][ T12] bridge_slave_1: left allmulticast mode [ 76.224304][ T12] bridge_slave_1: left promiscuous mode [ 76.225351][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.227685][ T12] bridge_slave_0: left allmulticast mode [ 76.228611][ T12] bridge_slave_0: left promiscuous mode [ 76.230310][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.233053][ T12] bridge_slave_1: left allmulticast mode [ 76.234020][ T12] bridge_slave_1: left promiscuous mode [ 76.234975][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.237027][ T12] bridge_slave_0: left allmulticast mode [ 76.240346][ T12] bridge_slave_0: left promiscuous mode [ 76.241361][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.561114][ T12] smc: removing net device bond0 with user defined pnetid SYZ2 [ 76.562649][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.580494][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.598399][ T12] bond0 (unregistering): Released all slaves [ 76.633309][ T12] bond1 (unregistering): Released all slaves [ 76.896207][ T12] tipc: Disabling bearer [ 76.896385][ T12] tipc: Left network mode [ 76.901018][ T12] tipc: Disabling bearer [ 76.903869][ T12] tipc: Left network mode [ 76.908818][ T12] tipc: Disabling bearer [ 76.910894][ T12] tipc: Left network mode [ 78.119925][ T12] hsr_slave_0: left promiscuous mode [ 78.121072][ T12] hsr_slave_1: left promiscuous mode [ 78.121585][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.121596][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.122512][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.122522][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.134124][ T12] hsr_slave_0: left promiscuous mode [ 78.134434][ T12] hsr_slave_1: left promiscuous mode [ 78.134639][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.134655][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.144185][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.144210][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.148045][ T12] hsr_slave_0: left promiscuous mode [ 78.148933][ T12] hsr_slave_1: left promiscuous mode [ 78.149148][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.149157][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.150074][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.150084][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.167543][ T12] veth1_macvtap: left promiscuous mode [ 78.167587][ T12] veth0_macvtap: left promiscuous mode [ 78.168564][ T12] veth1_vlan: left promiscuous mode [ 78.168603][ T12] veth0_vlan: left promiscuous mode [ 78.171461][ T12] veth1_macvtap: left promiscuous mode [ 78.171512][ T12] veth0_macvtap: left promiscuous mode [ 78.171555][ T12] veth1_vlan: left promiscuous mode [ 78.171586][ T12] veth0_vlan: left promiscuous mode [ 78.174632][ T12] veth1_macvtap: left promiscuous mode [ 78.174663][ T12] veth0_macvtap: left promiscuous mode [ 78.174713][ T12] veth1_vlan: left promiscuous mode [ 78.175366][ T12] veth0_vlan: left promiscuous mode [ 78.413556][ T12] team0 (unregistering): Port device team_slave_1 removed [ 78.429580][ T12] team0 (unregistering): Port device team_slave_0 removed [ 78.714759][ T12] team0 (unregistering): Port device team_slave_1 removed [ 78.729021][ T12] team0 (unregistering): Port device team_slave_0 removed [ 79.000290][ T12] team0 (unregistering): Port device team_slave_1 removed [ 79.012864][ T12] team0 (unregistering): Port device team_slave_0 removed [ 79.154097][ T14] smc: removing ib device sz1 [ 79.155655][ T26] lo speed is unknown, defaulting to 1000 [ 79.155679][ T26] sz1: Port: 1 Link DOWN [ 80.098362][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.168772][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.214240][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.254776][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.377305][ T12] bridge_slave_1: left allmulticast mode [ 80.377339][ T12] bridge_slave_1: left promiscuous mode [ 80.377421][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.379624][ T12] bridge_slave_0: left allmulticast mode [ 80.379638][ T12] bridge_slave_0: left promiscuous mode [ 80.379707][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.654593][ T12] tipc: Disabling bearer [ 80.658568][ T12] tipc: Left network mode [ 81.073431][ T12] hsr_slave_0: left promiscuous mode [ 81.074642][ T12] hsr_slave_1: left promiscuous mode [ 81.074898][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.074909][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.079611][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.079639][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.085179][ T12] veth1_macvtap: left promiscuous mode [ 81.085570][ T12] veth0_macvtap: left promiscuous mode [ 81.085629][ T12] veth1_vlan: left promiscuous mode [ 81.085656][ T12] veth0_vlan: left promiscuous mode [ 81.249972][ T12] team0 (unregistering): Port device team_slave_1 removed [ 81.261760][ T12] team0 (unregistering): Port device team_slave_0 removed