folio_alloc+0x1c/0x48 [ 469.953775][ T4061] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 469.954870][ T4081] vma_alloc_folio+0x598/0x9a0 [ 469.954885][ T4081] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 469.954896][ T4081] shmem_get_folio_gfp+0xb54/0x1a00 [ 469.962712][ T4061] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 469.963172][ T4081] shmem_write_begin+0x8c/0x350 [ 469.963185][ T4081] generic_perform_write+0xf0/0x2cc [ 469.965053][ T4061] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 469.966114][ T4081] __generic_file_write_iter+0xd8/0x21c [ 469.966128][ T4081] generic_file_write_iter+0x6c/0x168 [ 469.966137][ T4081] vfs_write+0x2dc/0x46c [ 469.966149][ T4081] ksys_write+0xb4/0x160 [ 469.966159][ T4081] __arm64_sys_write+0x24/0x34 [ 469.966169][ T4081] el0_svc_common+0x138/0x220 [ 469.966177][ T4081] do_el0_svc+0x48/0x104 [ 469.966183][ T4081] el0_svc+0x58/0x150 [ 469.971231][ T4061] EXT4-fs (loop1): 1 truncate cleaned up [ 469.971824][ T4081] el0t_64_sync_handler+0x84/0xf0 [ 469.971837][ T4081] el0t_64_sync+0x190/0x194 [ 470.029788][ T4044] BTRFS info (device loop2): enabling ssd optimizations [ 470.031767][ T4044] BTRFS info (device loop2): auto enabling async discard 00:07:50 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$eJzs3UGIVVUcB+DzZhydFGaezMY2YriRFjIFLSKi0Y1TTvBKEKLM0UUhthhkpFYhtHQzEAbu1CAUwZ4QmgvBjUVRtLAgsUULCwIXQhsDF/HevefNfef67nuOY2P6fTFz77n/e84973EX83t57gsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQQlh/66vTVfUtk5v3XT88s+3yzNUd53fOnwyh1j5ey+t7t0+/+d6uva+Pxg6zb2Tber3XkFnX37PG6q6DrX7dP/tCCCPJAMP59upwadTi7qHygJVGr93duOfC9LHTWy/tnpi9c6v80mkZXekJrJT8vrq5eC9NtX8PJWd02oVbr9Z1i2b90xvuP3kRAMB9mWy0N50/R/M/cTvtI2k9aU8l7YWkHf9CWCg2liIbd3WveW5K6ys0z6ksKqzpOc+knr//nXYj7Z+0k6hxH/PsPjWPNKO95jmX1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPkubNpy5V1bdMbt53/fDMtsszV3ec3zl/MoR6+3gtK9c+PnX2bPPc9MSZz8MLB7f/8udw3i9uVxVODr/GnRfHQ9hfqNyMw/41FkKju9BuhuPlwoH2zquxAAAAwOPk6fbvoU47i4MjXe1aO03W2v9FWVgcvXZ3454L08dOb720e2L2zq2lj9foMd7UPcfrtOuLP7VCMI7xNx1vsR5PPVQap1o6Yprnzx1++YOq/qX8X6/O//Gdk/8BAAB4EPJ/Ok61fvn/1NH9c1X9S/l/U9clS/k/zjjm/6GwtPwPAAAAj7KHnf+nSuNU65f/f774z8Wq/qX8PzlY/l9VnHY8+EOc8MHxECb7TR0AAADoIf5/98WPFmJezz45SPP6Hwd+e6dqvFL+nxos/48s66sCAAAAHsRHN9Z+UVUv5f/GYPl/zUOdNQAAAHA/vvz+7bVV9VL+nx0s/8dB85UPWadv4r9C+HQ8hNHWzlxW+DYsvNIpAAAAAMsk5vTnPvx6vuq8Uv6fq37+f3zSQVz/3/X8v9L6/0Ihe+rfSx4MAAAAwJOovJ4/Ph4/++aCXt+/P+j6/7H3X3u36vql/H9ksPw/XNwu5/f/AQAAwBL8377/763SONX6Pf//x++ena7qX8r/C4Pl/7hdV3x5V+L788l4CBtaO/nTBM/Eyx1MCs2RQqGtkfTYFXvkheaaQqFtLunx/HgIz7R2jiSF9bGwkBRuj+WFE0nhp1jI74dO4VxSuBLvtM/G8ummhYuxkC+waMYVFOs6SyKSHn/36tEq3LPHjc7FAQAAnigxPOdZdqS7GdIo26z1O2FtvxOG+p0w3O+EVckJ6Ym9jofZ7kI8Pn18fiJUKOX/E4Pl//hWrM42vdb/h7j+P/9ew876/9lYqCeFZiw00icGNOI1srB7NF6j3sh73N7QKQAAAMBjLX4uMLzC8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ze9+YOu66sOBn+fYfrbj2C5FaukPgaE/mnZTHDslqNqykWSa6Gg03CnVQIiRkLiZG5eExNlIV1Vpw9BQlC0TlaimCRIYg6qoC0xb+Nc1qmgYWmClE4huagUbtJo0+kdMnVC7dXq+9zzfd67fnzR2GnefjxS/8973/L3vT965975zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/4Y7vnP0f1rFrx6/cvtjB7ZsemDLw+/44g2zJ0KYnHu8koUrd3z6vvtO3n/9pfd+Jqzfvfl7T/bm5fJ4WFn705Xf+Uis9cerQjhVCaE7DawZzAI9+f3BWN/rB0O4JMwH6iWmBrISacPh4f4Qjof5QL2qr/SHMFgIbH30oQeP1hJ394fwlhBCNW3j8WrWRn8auKo3CwykgT3dWeC/XsrUA1/uygJw3uKbof6iPznZmGFk4XJNXn89i9axV1Y6vBUxMdI83083LXGnCnrTBybP62krVceSKL09Tnu3LYN3W2k7H/O0Fb9I5d9QXpoPVUPXzqmbtx+YmY2PdIWxsRXNalqi5/mx527fcS7pZfM6jB0YWZTX4YZnP/ri7bu29H3h6LEzn7zna7ecbzd/UNikxfRSq4b8Nbdsnsdoo8+TZfD2K31LGvWlK4Twd7/4+99uFS/N/0daz//jyznedjXkjrW+MJTNzeMjgzHxzFA2NwcAAIBlYznsNT1169NfbVVfaf4/2tnx/3jIP5/MZ6M9HcLGucTh4RAun3s8C9wbm/vAcAhvmktNNgY2JYHTIbxuLnFNvaqkRF8sMZoEnhrKAxuTwJkYmEwCn42BY0ngIzFwMgnsiIHTSWBzDITpxnH8wlA+jo4D/TGwLduIJ+NZCD8biq0l2+pf6lUBAAAsknx22NN4t3Cuw/lmiNPLk/3tMsQzsJtmqCY1pDPY+rSqaQ3d7WroaldDfdyHWg+/VHOlXc2l0zAqjRl+/dRbvhtaKM3/x1vP/6sLdKRSOv4fwo1zf2PurjwyU49vm2zIAAAAAJyHrb93dnereGn+v7Gz8//jPpEVhczhbNwNsXs4hPHGQFbtL5cD2VHvlXkAAAAAloP68fj6sfDp/DY7RTudT5fzT55j/njgf+OC+Z84/My/tupvaf4/2dn5/wONt1knzsRefHw4hL5C4Juxl7XAnNEY+OHbGwP5+M/EDXAkVpWfmFCv6kgssS0GxpPA8WYlHqmXuLwxkD9Z9cYP18cxnZcoBAAAAOCCi7sD4nH5eP7/tx/YM9mqXGn+v+3czv+fmweXTu+fWRnC2u4QVqQ/DDg7kC0MGAODlTzxwEBW14q0qjsHQthQG1ha1Y/y9f+70zUGH+3PqoqBy9/8+eeuqiU+0x/C2mLg++89sb6WmE0C9cZv6g/hjbXRpo3/TV/WeE/a+Cf6QnhDIVCv6gN9IdQa602reqiaX8cgreqvqiFcWgjUq3pbNYSDAYBlKv5XurP44P6Dt+3ePjMztW8JE3Effn+4eXpmamzHnpmd1SZ92pn0uWEZozvLY+rucOxxiaKbZjav7iRd/53geLEv+X780omD442d6Zkb57qehrvXpkO++spyE6HwTeqVGvJAsZL5J7FUf8zfG1aGvgP7p/aNfXj77Oy+iexvp9nXZX/jYaZsW02k22pgob5dBC+P1cVK1s7eunft/oO3rZm+dfuuqV1TH5yYeNu668Ynrnvr+rW1UY1nf9sMdfVCVSdDfelEh+NaxKFeUdyWF+JTQ0JCYrklTl0/e7jVx09p/r+39fw/furET/58fYZmx/9H4mH+7PH5w/zbYuB4p8f/R5odza+fGDCaBA7FwCGH+QEAAHh1iLsj497MuNd64pYn0334DUrz/0Od/f5/kdb/ry9d/85my/xfE0uMN1v/P13mv77+/6Fm6/+ny/zX1/8//gqs/3+gHkg2yc+s/w8AALwaXLj1/9su759eIKCUoe3y/ukFAkoZ2i7j3+kFAs55/f+eEwPzi+4voDT/P9bZ/N/C/QAAAHDx+Mvh//+JVvHS/P94Z/P/C7/+X2h2/v9os8Bks4UBrf8HAADAMtVs/b+//8Z7Hm9VrjT/P9nZ/D+edtHVkDvW+sJQtqZdSNe0e2ao/pMBAAAAWB66wthYT4d5G1ZG3fTy24xLgbZKFx195xWfalVfaf5/urP5f8PvMjY8+9EXb9+1pe+FLxw9duaT93ztlvnj/wAAAMDS6XS/BAAAAAAAAAAAAAAA8Mp7z5HBp1vFS7//DzfOPd7s9//xun/x9wWvbcgda22//l9+f+sN9x+cW7Lw7FAIVxYDu+/afUnIr82/uhh48H3XXFZL3JWW+PoTm39SS7w/DVy/5jXP1xIbksC2uEji69JAvKri86uSQFxe8Z/SQNweJ9NAbx742KpsHJV0W/37YLatKum2+ufBEIYLgfq2OjWYtVFJB3h3EqgP8ENpIA7wN/NAV9qr+1dmvYqBwVj0UyuzXgEAcNGqXws83Dw9MzUev8LH2yu6G2+jhiXL7ixXW+mw+bg02U0zm1d3kl6Rfhedv9Z4T6jWhjBR+rpazFKZG+Xi1NJm0722yZDbrfbW1aRc6lw3XW/zEfVnIxrbsWdmZ0/bgV/bPsu67rZZJkqTnWKWrrlN2kEtHfSlgxF1uG066HK83xXGxlYkuX4pBkdCg3aviE5/r7/Qmn/NXhE1f/u5Rw60qq80/x/pbP5fLY7r+fxiAIfilfX+ZNgy/wAAALC0Prbp5/fEf0e+8WdbW+Utzf9HO5v/xz1Y+aHgbG/H6Xj9/8PDIcxdWn8kC9wbm/vAcAhvmktNxhLZBfXfGUuMZ4F74w6Ta2KJbZONVfXFwMkk8NRQHjidBM7EQL6X4vMh35Xzp0MhrJ9L3dhYYm8sMZIE3hUDo0lgLAbGk8CqGNiYBP5jVR6YTAL/EANhunFb/fWqfFsBAACci3ye1dN4N6TzvJPd7TJU2mUYaJehq12GarsMzUYR738pZuhJTl6pFDL1pLX2J7WUMsSL4Z9zv0oZwiONOdOCpabj+Qf18w0qjRl2/MFv/2FooTT/H+9s/j/QeJu1fibO/+ev/5cFvhm79/F46vhoDPzw7Y2BfMfAmTjZPVKvajIvkU/aj8QSG2NgNAnsjYGNSWDbjXng+GWNgXymXW/8cL3x6bxEIQAAAAAXXNxBEHfTxPn/c4/veqpVudL8f2Nn8//Y3spiYx+Jtf54VQinKvO9qQfWDGaBuB9jMP48/vWDIVxS2MFRLzE1kJXoTRoOD/dnv1DvTav6Sn/244N4f+ujDz14tJa4uz+EtxT2vtTbeLyatdGfBq7qzQIDaWBPdxaIe37qgS93ZQE4b/W9gvEFlZ/qUjeycLkmr79XyzVB0+GV9oEukG+h31wtlWr6QL5Pte7cnrZSdSyJ0tvjtHfbcny3jXi3Fb9I5d9QXpoPVUPXzqmbtx+YmY2PFH/JWrJEz/NCv2RtlV6E1+Ghl9/b9qppB8aTj4/xhcst/DqsxOo2PPvRF2/ftaXvC0ePnfnkPV+7peNuNBE36V/8zmOrf1DYvEutGvLX3LL7PJn0ebIc/xsY9bSFEP7oN/77u63ipfn/ZGfz/+7kds7P48bcPxzC1YWNezZu/l8bzj4HC4HsU/LSciA75P5vQ00/OQEAAGCx1Xd31PcXTOe32Qnh6Ty5nH/yHPPH/RUbF8zfab93Pvvgt1rFS/P/ba3n/31JNx3/d/yfJeL4/4Iu9l3RfekDh85rV3SpOpaE4/8LutjfbY7/L8jxf8f/F+L4fxuO/y/oYn/aSt+S9vrSFUL41TuefnereGn+v7ez+b/1/xZetK++/t+2Zuv/7W22/t8h6/8BAABLqslCc+k8r7R6XylDunpfKUPbBQLbLjFo/b9zXv/vV97zxx8OLZTm/4c6m//Hl8PKYuvLZf2/0RubVHUsBvZaGBAAAICLUbMdBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyyLvvOu9/VKn71+JXbHzuwZdMDWx5+xxdvmD0RwvTc45UsXLnj0/fdd/L+6y+99zNh/e7N33uympfryW//X0PuWOsLQyEcLzwyGBPPDNXuzAe23nD/we5a4uxQCFcWA7vv2n1JLfHZoRBWFwMPvu+ay2qJu9ISX39i809qifengevXvOb5WmJDHqik3f3zVVl3K2l3j64KYbgQqHf3llWNVdXbeEce6Erb+Nxg1kYMDMai9wxmbcTATCwx3RfC2u4QVqRVfauaVbUireqr1ayqFWlVd1RD2BBC6E6reqI3q6o7Hfk/9mZVxcDlb/78c1fVEsd7Q1hbDHz/vSfW1xIfSgL1xn+rN4Q31l4yaeNf6ska70kbv7snhDeEEHrTEv/ZnZXoTUv8qDuESwuBeuO/2x3CwcCrQvzw2Vl8cP/B23Zvn5mZ2reEid68rf5w8/TM1NiOPTM7q0mfmqkU0i/dWY6v6HDsjz13+47a7U0zm1d3ku7Oy/XMdXldT8Pdaxer911L1PvYr4FiJfPPR6n+mL83rAx9B/ZP7Rv78PbZ2X0T2d9Os6/L/sanJNtWE4u1rSptykcvd1utLlaydvbWvWv3H7xtzfSt23dN7Zr64MTE29ZdNz5x3VvXr62Najz7uxhDPdHhuBZxqFd0Fyq5EB8AEhISyy3R1fDpNr5YH+RL9elW+qI/39GeUJ37gC5NK4pZKnOjXIxBb3qZI34531PajmiiNHEoZVnXPsu1pcnEfJb+LMvc97rS5LBYU9fcJo33u8LYWNOvbyONd4ub96eLsHk7TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rMHo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//+l99CO") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:07:50 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:50 executing program 0: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100), 0x4) r1 = semget$private(0x0, 0x3, 0x498) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/243) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) 00:07:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 48) 00:07:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:50 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) dup(r0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x1, 0xff81, 0x1000}, {0x2, 0x3, 0x800}, {0x4, 0x100}], 0x3, &(0x7f0000000040)={0x77359400}) [ 470.080731][ T4102] FAULT_INJECTION: forcing a failure. [ 470.080731][ T4102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.084403][ T4102] CPU: 1 PID: 4102 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 470.087114][ T4102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 470.089865][ T4102] Call trace: [ 470.090825][ T4102] dump_backtrace+0x1c4/0x1f0 [ 470.091413][ T4101] loop1: detected capacity change from 0 to 512 [ 470.092155][ T4102] show_stack+0x2c/0x3c [ 470.094959][ T4102] dump_stack_lvl+0x104/0x16c [ 470.096205][ T4102] dump_stack+0x1c/0x58 [ 470.097321][ T4102] should_fail_ex+0x1e8/0x20c [ 470.098604][ T4102] should_fail+0x14/0x24 [ 470.099768][ T4102] should_fail_usercopy+0x20/0x30 [ 470.101126][ T4102] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 470.102672][ T4102] generic_perform_write+0x144/0x2cc [ 470.104067][ T4102] __generic_file_write_iter+0xd8/0x21c [ 470.105535][ T4102] generic_file_write_iter+0x6c/0x168 [ 470.106994][ T4102] vfs_write+0x2dc/0x46c [ 470.108130][ T4102] ksys_write+0xb4/0x160 [ 470.109279][ T4102] __arm64_sys_write+0x24/0x34 [ 470.110555][ T4102] el0_svc_common+0x138/0x220 [ 470.111780][ T4102] do_el0_svc+0x48/0x104 [ 470.112883][ T4102] el0_svc+0x58/0x150 [ 470.113956][ T4102] el0t_64_sync_handler+0x84/0xf0 [ 470.115357][ T4102] el0t_64_sync+0x190/0x194 [ 470.119225][ T4102] loop3: detected capacity change from 0 to 512 [ 470.156778][ T4102] EXT4-fs (loop3): orphan cleanup on readonly fs [ 470.166272][ T4102] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 470.170948][ T4102] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 470.182110][ T4102] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 470.188857][ T4102] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 470.195751][ T4102] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 470.203154][ T4102] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents 00:07:50 executing program 0: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100), 0x4) r1 = semget$private(0x0, 0x3, 0x498) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/243) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 00:07:50 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 470.228735][ T4102] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 470.237513][ T4102] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 470.244366][ T4102] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error 00:07:50 executing program 0: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100), 0x4) r1 = semget$private(0x0, 0x3, 0x498) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/243) [ 470.264253][ T4102] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 470.267224][ T4102] EXT4-fs (loop3): 1 truncate cleaned up [ 470.283819][ T4101] EXT4-fs (loop1): orphan cleanup on readonly fs [ 470.287075][ T4101] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters 00:07:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 49) 00:07:50 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x9625}, {0x3, 0x3, 0x1000}], 0x2, &(0x7f0000000100)={0x0, 0x989680}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = semget$private(0x0, 0x3, 0x205) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semget$private(0x0, 0x2, 0x99f85fecbd509930) r4 = semget$private(0x0, 0x4, 0x0) semtimedop(r4, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$GETNCNT(r4, 0x1, 0xe, &(0x7f0000000140)=""/209) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x8dd4, 0x1000}, {0x3, 0xe6, 0x800}, {0x4, 0x1f}, {0x4, 0x3}, {0x4, 0x9}, {0x1, 0x8000}, {0x4}], 0x7, &(0x7f0000000080)={r2, r3+10000000}) [ 470.327319][ T4101] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:50 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 470.365794][ T4101] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 470.369352][ T4101] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 470.372853][ T4101] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 470.381473][ T4119] FAULT_INJECTION: forcing a failure. [ 470.381473][ T4119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 470.381724][ T4101] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 470.388821][ T4101] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 470.388947][ T4119] CPU: 1 PID: 4119 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 470.391392][ T4101] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 470.393913][ T4119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 470.399822][ T4119] Call trace: [ 470.400683][ T4119] dump_backtrace+0x1c4/0x1f0 [ 470.401927][ T4119] show_stack+0x2c/0x3c [ 470.403028][ T4119] dump_stack_lvl+0x104/0x16c [ 470.404273][ T4119] dump_stack+0x1c/0x58 [ 470.405393][ T4119] should_fail_ex+0x1e8/0x20c [ 470.406613][ T4119] should_fail_alloc_page+0x68/0x7c [ 470.407978][ T4119] prepare_alloc_pages+0x128/0x244 [ 470.409338][ T4119] __alloc_pages+0xa4/0x1fc [ 470.410530][ T4119] __folio_alloc+0x1c/0x48 [ 470.411694][ T4119] vma_alloc_folio+0x598/0x9a0 [ 470.412949][ T4119] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 470.414520][ T4119] shmem_get_folio_gfp+0xb54/0x1a00 [ 470.415919][ T4119] shmem_write_begin+0x8c/0x350 [ 470.417228][ T4119] generic_perform_write+0xf0/0x2cc [ 470.418732][ T4119] __generic_file_write_iter+0xd8/0x21c [ 470.420371][ T4119] generic_file_write_iter+0x6c/0x168 [ 470.421843][ T4119] vfs_write+0x2dc/0x46c [ 470.422962][ T4119] ksys_write+0xb4/0x160 [ 470.424130][ T4119] __arm64_sys_write+0x24/0x34 [ 470.424432][ T4101] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 470.425397][ T4119] el0_svc_common+0x138/0x220 [ 470.425409][ T4119] do_el0_svc+0x48/0x104 [ 470.425415][ T4119] el0_svc+0x58/0x150 [ 470.425423][ T4119] el0t_64_sync_handler+0x84/0xf0 [ 470.433358][ T4119] el0t_64_sync+0x190/0x194 [ 470.452941][ T4101] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 470.457782][ T4101] EXT4-fs (loop1): 1 truncate cleaned up [ 470.560492][ T4111] loop2: detected capacity change from 0 to 32768 [ 470.565041][ T4111] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 470.568673][ T4111] BTRFS info (device loop2): using free space tree [ 470.576341][ T4111] BTRFS info (device loop2): enabling ssd optimizations [ 470.578227][ T4111] BTRFS info (device loop2): auto enabling async discard 00:07:50 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:07:50 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x9625}, {0x3, 0x3, 0x1000}], 0x2, &(0x7f0000000100)={0x0, 0x989680}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) (async) r0 = semget$private(0x0, 0x3, 0x205) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) semget$private(0x0, 0x2, 0x99f85fecbd509930) (async) r4 = semget$private(0x0, 0x4, 0x0) semtimedop(r4, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semctl$GETNCNT(r4, 0x1, 0xe, &(0x7f0000000140)=""/209) (async) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x8dd4, 0x1000}, {0x3, 0xe6, 0x800}, {0x4, 0x1f}, {0x4, 0x3}, {0x4, 0x9}, {0x1, 0x8000}, {0x4}], 0x7, &(0x7f0000000080)={r2, r3+10000000}) 00:07:50 executing program 0: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100), 0x4) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) 00:07:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 50) 00:07:50 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:50 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x9625}, {0x3, 0x3, 0x1000}], 0x2, &(0x7f0000000100)={0x0, 0x989680}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) (async) r0 = semget$private(0x0, 0x3, 0x205) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semget$private(0x0, 0x2, 0x99f85fecbd509930) (async) r4 = semget$private(0x0, 0x4, 0x0) semtimedop(r4, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$GETNCNT(r4, 0x1, 0xe, &(0x7f0000000140)=""/209) (async) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x8dd4, 0x1000}, {0x3, 0xe6, 0x800}, {0x4, 0x1f}, {0x4, 0x3}, {0x4, 0x9}, {0x1, 0x8000}, {0x4}], 0x7, &(0x7f0000000080)={r2, r3+10000000}) [ 470.625614][ T4154] loop1: detected capacity change from 0 to 512 [ 470.634637][ T4159] FAULT_INJECTION: forcing a failure. [ 470.634637][ T4159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.638386][ T4159] CPU: 0 PID: 4159 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 470.641132][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 470.643842][ T4159] Call trace: [ 470.644733][ T4159] dump_backtrace+0x1c4/0x1f0 [ 470.645927][ T4159] show_stack+0x2c/0x3c [ 470.647079][ T4159] dump_stack_lvl+0x104/0x16c [ 470.648351][ T4159] dump_stack+0x1c/0x58 [ 470.649452][ T4159] should_fail_ex+0x1e8/0x20c [ 470.650788][ T4159] should_fail+0x14/0x24 [ 470.651963][ T4159] should_fail_usercopy+0x20/0x30 [ 470.653320][ T4159] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 470.654871][ T4159] generic_perform_write+0x144/0x2cc [ 470.656282][ T4159] __generic_file_write_iter+0xd8/0x21c [ 470.657775][ T4159] generic_file_write_iter+0x6c/0x168 [ 470.659223][ T4159] vfs_write+0x2dc/0x46c [ 470.660341][ T4159] ksys_write+0xb4/0x160 [ 470.661507][ T4159] __arm64_sys_write+0x24/0x34 [ 470.662771][ T4159] el0_svc_common+0x138/0x220 [ 470.664073][ T4159] do_el0_svc+0x48/0x104 [ 470.665221][ T4159] el0_svc+0x58/0x150 [ 470.666282][ T4159] el0t_64_sync_handler+0x84/0xf0 [ 470.667619][ T4159] el0t_64_sync+0x190/0x194 [ 470.683063][ T4159] loop3: detected capacity change from 0 to 512 [ 470.691359][ T4159] EXT4-fs (loop3): orphan cleanup on readonly fs [ 470.693986][ T4159] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 470.697687][ T4154] EXT4-fs (loop1): orphan cleanup on readonly fs [ 470.701779][ T4159] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 470.703731][ T4154] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters 00:07:50 executing program 0: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) [ 470.710172][ T4154] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 470.734345][ T4159] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error 00:07:50 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 470.751458][ T4159] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 470.767138][ T4159] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 470.775157][ T4159] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 470.782343][ T4154] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:50 executing program 0: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) [ 470.801283][ T4159] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 470.804881][ T4154] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:50 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x6, 0x800}, {0x2, 0xffff, 0x800}, {0x3, 0x1f, 0x800}, {0x1, 0x5, 0x1800}, {0x0, 0xffbe, 0x1000}], 0x5, &(0x7f0000000040)={0x0, 0x3938700}) r1 = semget(0x3, 0x0, 0x80) semop(r1, &(0x7f0000000080)=[{0x4, 0x6, 0x400}], 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) [ 470.811763][ T4159] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 470.823025][ T4154] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:50 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x6, 0x800}, {0x2, 0xffff, 0x800}, {0x3, 0x1f, 0x800}, {0x1, 0x5, 0x1800}, {0x0, 0xffbe, 0x1000}], 0x5, &(0x7f0000000040)={0x0, 0x3938700}) (async) r1 = semget(0x3, 0x0, 0x80) semop(r1, &(0x7f0000000080)=[{0x4, 0x6, 0x400}], 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) [ 470.829772][ T4159] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 470.835148][ T4154] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 470.852311][ T4159] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 470.853344][ T4154] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 470.863984][ T4159] EXT4-fs (loop3): 1 truncate cleaned up [ 470.869663][ T4154] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 470.902988][ T4154] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 470.912899][ T4154] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 470.921853][ T4154] EXT4-fs (loop1): 1 truncate cleaned up [ 471.089417][ T4180] loop2: detected capacity change from 0 to 32768 [ 471.093702][ T4180] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 471.096350][ T4180] BTRFS info (device loop2): using free space tree [ 471.104357][ T4180] BTRFS info (device loop2): enabling ssd optimizations [ 471.106409][ T4180] BTRFS info (device loop2): auto enabling async discard 00:07:51 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x6, 0x800}, {0x2, 0xffff, 0x800}, {0x3, 0x1f, 0x800}, {0x1, 0x5, 0x1800}, {0x0, 0xffbe, 0x1000}], 0x5, &(0x7f0000000040)={0x0, 0x3938700}) r1 = semget(0x3, 0x0, 0x80) semop(r1, &(0x7f0000000080)=[{0x4, 0x6, 0x400}], 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semget$private(0x0, 0x4, 0x0) (async) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x6, 0x800}, {0x2, 0xffff, 0x800}, {0x3, 0x1f, 0x800}, {0x1, 0x5, 0x1800}, {0x0, 0xffbe, 0x1000}], 0x5, &(0x7f0000000040)={0x0, 0x3938700}) (async) semget(0x3, 0x0, 0x80) (async) semop(r1, &(0x7f0000000080)=[{0x4, 0x6, 0x400}], 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) 00:07:51 executing program 0: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) 00:07:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 51) 00:07:51 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:51 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:07:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3c9vG1kdAPDvOHGatilJVQ5QiRLRorSC2klD24hDKRI/TpWAci9R4kRRnDiKnbaJKpSKPwAJIUBw4sQFiT8ACfVPQEiV4I4AsVrtttvDXna9Gnu8TVI7SbtOvE0+H+nZ741n/H1vEr+Z5zfyBHBsjUbE7Yjoi4grETGcLc9l6Vz6sNlc7/mzRzNpSqJev/teEkm2LF3/+xGNcup0c5MYjIif/DCiv03c6vrG4nS5XFrNysXa0kqxur5xdWFper40X1qenJy4MXVz6vrUeFfaORQRt773v9/88k8/uPW3bz749713Lv88yZbHlnZ0Q3lLvrlP8o190ZLuj9VuBeuxvqw9+V5XBACAfenLzvO/1jj/H46+tmfrAAAAwNus/p2hxtxNHQAAADiyco1rYJNcIbsOYChyuUKheQ3vF+NUrlyp1r4xV1lbnm1eKzsS+dzcQrk0nl0rPBL5JC1PNPIvy9d2lCcHIs5GxK+HTzbKhZlKebbXX34AAADAMXF6x/j/xXBz/A8AAAAcMSO9rgAAAABw4Iz/AQAA4Ogz/gcAAIAj7Ud37qSp3rr/9ez99bXFyv2rs6XqYmFpbaYwU1ldKcxXKvON3+xb2uv9ypXKyrdiee1hsVaq1orV9Y17S5W15dq9hW23wAYAAAAO0dmvPvlXEhGb3z7ZSKmB7LV8T2sGHLTc66z834OrB3D4+npdAaBn+ntdAaBnjPGBZI/XO1688/fu1wUAADgYY182/w/H1W7z/4O/P2N+AI4w8/9wfLU5vjvkwzGRdwYAx97Bz//X669VIQAAoOuGGinJFbK5wKHI5QqFiDON2wLkk7mFcmk8Ir4QEf8czp9IyxONLZM9xwwAAAAAAAAAAAAAAAAAAAAAAAAAQFO9nkT9Dbx4k40AAACAnojI/T/J7v81NnxpaOf3AwPJh8ON54h48Ie7v304XautTqTL3/90ee132fJre3zZsNvNxgEAAICuaY3TW+N4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOim588ezbTSYcZ997sRMdIufn8MNp4HIx8Rpz5Ion/LdklE9HUh/ubjiPhSu/hJWq0YyWqxM34uIk72OP7pLsSH4+xJ2v/cbvf5y8Vo47n9568/S5/V1v4v7Q62xm/1f31t4g9ExJl9xjj/9C/FjvEfR5zvb9//tOInHfrfix0jnthW+tlPNzY6rVn/Y8RY2+NPsi1Wsba0Uqyub1xdWJqeL82XlicnJ25M3Zy6PjVenFsol7LHtjF+9ZW/frxb+091iD+yR/svdXjPnf8XHz19+OxcM5tvF//yxe3xR2PrHng1fi479n09y6evj7Xym838Vhf+/I8LWfaVQ1Yaf7ZD+/f6+1/u0P6drvz4F//Z56oAwCGorm8sTpfLpdUDz4wefAgZmd0y6Wnr56Aab0em1z0TAADQbS9P+vexcjcm3AEAAAAAAAAAAAAAAAAAAIBXHMbPie2MudmbpgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7OqTAAAA//+6O9Ck") [ 471.153695][ T4202] FAULT_INJECTION: forcing a failure. [ 471.153695][ T4202] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 471.193519][ T4202] CPU: 1 PID: 4202 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 471.196432][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 471.199193][ T4202] Call trace: [ 471.200090][ T4202] dump_backtrace+0x1c4/0x1f0 [ 471.201395][ T4202] show_stack+0x2c/0x3c [ 471.202511][ T4202] dump_stack_lvl+0x104/0x16c [ 471.203809][ T4202] dump_stack+0x1c/0x58 [ 471.204960][ T4202] should_fail_ex+0x1e8/0x20c [ 471.206300][ T4202] should_fail_alloc_page+0x68/0x7c [ 471.207710][ T4202] prepare_alloc_pages+0x128/0x244 [ 471.209140][ T4202] __alloc_pages+0xa4/0x1fc [ 471.210387][ T4202] __folio_alloc+0x1c/0x48 [ 471.211596][ T4202] vma_alloc_folio+0x598/0x9a0 [ 471.212910][ T4202] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 471.214465][ T4202] shmem_get_folio_gfp+0xb54/0x1a00 [ 471.215894][ T4202] shmem_write_begin+0x8c/0x350 [ 471.217212][ T4202] generic_perform_write+0xf0/0x2cc [ 471.218610][ T4202] __generic_file_write_iter+0xd8/0x21c [ 471.220160][ T4202] generic_file_write_iter+0x6c/0x168 [ 471.221635][ T4202] vfs_write+0x2dc/0x46c [ 471.222784][ T4202] ksys_write+0xb4/0x160 [ 471.223925][ T4202] __arm64_sys_write+0x24/0x34 [ 471.225240][ T4202] el0_svc_common+0x138/0x220 [ 471.226517][ T4202] do_el0_svc+0x48/0x104 [ 471.227665][ T4202] el0_svc+0x58/0x150 [ 471.228744][ T4202] el0t_64_sync_handler+0x84/0xf0 [ 471.230121][ T4202] el0t_64_sync+0x190/0x194 00:07:51 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) 00:07:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 471.274983][ T4213] loop1: detected capacity change from 0 to 512 00:07:51 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x3cae, 0x800}], 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x3, 0x1800}], 0x1) r1 = semget$private(0x0, 0x6, 0xa) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semtimedop(r2, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(r2, &(0x7f00000001c0)=[{0x4, 0x4, 0x1000}], 0x1, &(0x7f0000000200)) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f00000000c0)=""/210) semtimedop(r0, &(0x7f00000004c0)=[{0x1, 0x3, 0x1c00}], 0x1, 0x0) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000040)=""/48) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) 00:07:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 52) 00:07:51 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x3cae, 0x800}], 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x3, 0x1800}], 0x1) r1 = semget$private(0x0, 0x6, 0xa) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semtimedop(r2, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(r2, &(0x7f00000001c0)=[{0x4, 0x4, 0x1000}], 0x1, &(0x7f0000000200)) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f00000000c0)=""/210) semtimedop(r0, &(0x7f00000004c0)=[{0x1, 0x3, 0x1c00}], 0x1, 0x0) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000040)=""/48) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x3cae, 0x800}], 0x1, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semget$private(0x0, 0x4, 0x0) (async) semop(r0, &(0x7f0000000080)=[{0x4, 0x3, 0x1800}], 0x1) (async) semget$private(0x0, 0x6, 0xa) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async) semget$private(0x0, 0x4, 0x0) (async) semtimedop(r2, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(r2, &(0x7f00000001c0)=[{0x4, 0x4, 0x1000}], 0x1, &(0x7f0000000200)) (async) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f00000000c0)=""/210) (async) semtimedop(r0, &(0x7f00000004c0)=[{0x1, 0x3, 0x1c00}], 0x1, 0x0) (async) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000040)=""/48) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) 00:07:51 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 471.335295][ T4213] EXT4-fs (loop1): orphan cleanup on readonly fs [ 471.338661][ T4213] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters 00:07:51 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 471.359723][ T4220] FAULT_INJECTION: forcing a failure. [ 471.359723][ T4220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.363724][ T4220] CPU: 0 PID: 4220 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 471.366520][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 471.369305][ T4220] Call trace: [ 471.370206][ T4220] dump_backtrace+0x1c4/0x1f0 [ 471.371478][ T4220] show_stack+0x2c/0x3c [ 471.372616][ T4220] dump_stack_lvl+0x104/0x16c [ 471.373857][ T4220] dump_stack+0x1c/0x58 [ 471.374982][ T4220] should_fail_ex+0x1e8/0x20c [ 471.376217][ T4220] should_fail+0x14/0x24 [ 471.377373][ T4220] should_fail_usercopy+0x20/0x30 [ 471.378713][ T4220] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 471.380252][ T4220] generic_perform_write+0x144/0x2cc [ 471.381704][ T4220] __generic_file_write_iter+0xd8/0x21c [ 471.383152][ T4220] generic_file_write_iter+0x6c/0x168 [ 471.384570][ T4220] vfs_write+0x2dc/0x46c [ 471.385725][ T4220] ksys_write+0xb4/0x160 [ 471.386882][ T4220] __arm64_sys_write+0x24/0x34 [ 471.388281][ T4220] el0_svc_common+0x138/0x220 [ 471.389558][ T4220] do_el0_svc+0x48/0x104 [ 471.390696][ T4220] el0_svc+0x58/0x150 [ 471.391742][ T4220] el0t_64_sync_handler+0x84/0xf0 [ 471.391761][ T4213] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 471.393085][ T4220] el0t_64_sync+0x190/0x194 [ 471.433269][ T4213] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:51 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 471.463322][ T4213] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 471.483238][ T4213] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:51 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 00:07:51 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x3cae, 0x800}], 0x1, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x3, 0x1800}], 0x1) r1 = semget$private(0x0, 0x6, 0xa) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semtimedop(r2, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(r2, &(0x7f00000001c0)=[{0x4, 0x4, 0x1000}], 0x1, &(0x7f0000000200)) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f00000000c0)=""/210) (async) semtimedop(r0, &(0x7f00000004c0)=[{0x1, 0x3, 0x1c00}], 0x1, 0x0) (async) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000040)=""/48) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) [ 471.504893][ T4213] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 471.520940][ T4213] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 471.523601][ T4213] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 471.534648][ T4213] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 471.543998][ T4220] loop3: detected capacity change from 0 to 512 [ 471.554642][ T4213] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 471.560521][ T4213] EXT4-fs (loop1): 1 truncate cleaned up [ 471.570789][ T4220] EXT4-fs (loop3): orphan cleanup on readonly fs [ 471.573074][ T4220] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 471.580250][ T4220] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 471.583813][ T4220] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 471.593589][ T4220] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 471.597590][ T4220] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 471.602550][ T4220] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 471.606715][ T4220] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 471.609182][ T4220] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 471.612632][ T4220] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 471.615866][ T4220] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 471.619230][ T4220] EXT4-fs (loop3): 1 truncate cleaned up [ 471.695440][ T4225] loop2: detected capacity change from 0 to 32768 [ 471.700464][ T4225] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 471.702820][ T4225] BTRFS info (device loop2): using free space tree [ 471.711688][ T4225] BTRFS info (device loop2): enabling ssd optimizations [ 471.713719][ T4225] BTRFS info (device loop2): auto enabling async discard 00:07:51 executing program 0: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$eJzs3UGIVVUcB+DzZhydFGaezMY2YriRFjIFLSKi0Y1TTvBKEKLM0UUhthhkpFYhtHQzEAbu1CAUwZ4QmgvBjUVRtLAgsUULCwIXQhsDF/HevefNfef67nuOY2P6fTFz77n/e84973EX83t57gsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQQlh/66vTVfUtk5v3XT88s+3yzNUd53fOnwyh1j5ey+t7t0+/+d6uva+Pxg6zb2Tber3XkFnX37PG6q6DrX7dP/tCCCPJAMP59upwadTi7qHygJVGr93duOfC9LHTWy/tnpi9c6v80mkZXekJrJT8vrq5eC9NtX8PJWd02oVbr9Z1i2b90xvuP3kRAMB9mWy0N50/R/M/cTvtI2k9aU8l7YWkHf9CWCg2liIbd3WveW5K6ys0z6ksKqzpOc+knr//nXYj7Z+0k6hxH/PsPjWPNKO95jmX1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPkubNpy5V1bdMbt53/fDMtsszV3ec3zl/MoR6+3gtK9c+PnX2bPPc9MSZz8MLB7f/8udw3i9uVxVODr/GnRfHQ9hfqNyMw/41FkKju9BuhuPlwoH2zquxAAAAwOPk6fbvoU47i4MjXe1aO03W2v9FWVgcvXZ3454L08dOb720e2L2zq2lj9foMd7UPcfrtOuLP7VCMI7xNx1vsR5PPVQap1o6Yprnzx1++YOq/qX8X6/O//Gdk/8BAAB4EPJ/Ok61fvn/1NH9c1X9S/l/U9clS/k/zjjm/6GwtPwPAAAAj7KHnf+nSuNU65f/f774z8Wq/qX8PzlY/l9VnHY8+EOc8MHxECb7TR0AAADoIf5/98WPFmJezz45SPP6Hwd+e6dqvFL+nxos/48s66sCAAAAHsRHN9Z+UVUv5f/GYPl/zUOdNQAAAHA/vvz+7bVV9VL+nx0s/8dB85UPWadv4r9C+HQ8hNHWzlxW+DYsvNIpAAAAAMsk5vTnPvx6vuq8Uv6fq37+f3zSQVz/3/X8v9L6/0Ihe+rfSx4MAAAAwJOovJ4/Ph4/++aCXt+/P+j6/7H3X3u36vql/H9ksPw/XNwu5/f/AQAAwBL8377/763SONX6Pf//x++ena7qX8r/C4Pl/7hdV3x5V+L788l4CBtaO/nTBM/Eyx1MCs2RQqGtkfTYFXvkheaaQqFtLunx/HgIz7R2jiSF9bGwkBRuj+WFE0nhp1jI74dO4VxSuBLvtM/G8ummhYuxkC+waMYVFOs6SyKSHn/36tEq3LPHjc7FAQAAnigxPOdZdqS7GdIo26z1O2FtvxOG+p0w3O+EVckJ6Ym9jofZ7kI8Pn18fiJUKOX/E4Pl//hWrM42vdb/h7j+P/9ew876/9lYqCeFZiw00icGNOI1srB7NF6j3sh73N7QKQAAAMBjLX4uMLzC8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ze9+YOu66sOBn+fYfrbj2C5FaukPgaE/mnZTHDslqNqykWSa6Gg03CnVQIiRkLiZG5eExNlIV1Vpw9BQlC0TlaimCRIYg6qoC0xb+Nc1qmgYWmClE4huagUbtJo0+kdMnVC7dXq+9zzfd67fnzR2GnefjxS/8973/L3vT965975zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/4Y7vnP0f1rFrx6/cvtjB7ZsemDLw+/44g2zJ0KYnHu8koUrd3z6vvtO3n/9pfd+Jqzfvfl7T/bm5fJ4WFn705Xf+Uis9cerQjhVCaE7DawZzAI9+f3BWN/rB0O4JMwH6iWmBrISacPh4f4Qjof5QL2qr/SHMFgIbH30oQeP1hJ394fwlhBCNW3j8WrWRn8auKo3CwykgT3dWeC/XsrUA1/uygJw3uKbof6iPznZmGFk4XJNXn89i9axV1Y6vBUxMdI83083LXGnCnrTBybP62krVceSKL09Tnu3LYN3W2k7H/O0Fb9I5d9QXpoPVUPXzqmbtx+YmY2PdIWxsRXNalqi5/mx527fcS7pZfM6jB0YWZTX4YZnP/ri7bu29H3h6LEzn7zna7ecbzd/UNikxfRSq4b8Nbdsnsdoo8+TZfD2K31LGvWlK4Twd7/4+99uFS/N/0daz//jyznedjXkjrW+MJTNzeMjgzHxzFA2NwcAAIBlYznsNT1169NfbVVfaf4/2tnx/3jIP5/MZ6M9HcLGucTh4RAun3s8C9wbm/vAcAhvmktNNgY2JYHTIbxuLnFNvaqkRF8sMZoEnhrKAxuTwJkYmEwCn42BY0ngIzFwMgnsiIHTSWBzDITpxnH8wlA+jo4D/TGwLduIJ+NZCD8biq0l2+pf6lUBAAAsknx22NN4t3Cuw/lmiNPLk/3tMsQzsJtmqCY1pDPY+rSqaQ3d7WroaldDfdyHWg+/VHOlXc2l0zAqjRl+/dRbvhtaKM3/x1vP/6sLdKRSOv4fwo1zf2PurjwyU49vm2zIAAAAAJyHrb93dnereGn+v7Gz8//jPpEVhczhbNwNsXs4hPHGQFbtL5cD2VHvlXkAAAAAloP68fj6sfDp/DY7RTudT5fzT55j/njgf+OC+Z84/My/tupvaf4/2dn5/wONt1knzsRefHw4hL5C4Juxl7XAnNEY+OHbGwP5+M/EDXAkVpWfmFCv6kgssS0GxpPA8WYlHqmXuLwxkD9Z9cYP18cxnZcoBAAAAOCCi7sD4nH5eP7/tx/YM9mqXGn+v+3czv+fmweXTu+fWRnC2u4QVqQ/DDg7kC0MGAODlTzxwEBW14q0qjsHQthQG1ha1Y/y9f+70zUGH+3PqoqBy9/8+eeuqiU+0x/C2mLg++89sb6WmE0C9cZv6g/hjbXRpo3/TV/WeE/a+Cf6QnhDIVCv6gN9IdQa602reqiaX8cgreqvqiFcWgjUq3pbNYSDAYBlKv5XurP44P6Dt+3ePjMztW8JE3Effn+4eXpmamzHnpmd1SZ92pn0uWEZozvLY+rucOxxiaKbZjav7iRd/53geLEv+X780omD442d6Zkb57qehrvXpkO++spyE6HwTeqVGvJAsZL5J7FUf8zfG1aGvgP7p/aNfXj77Oy+iexvp9nXZX/jYaZsW02k22pgob5dBC+P1cVK1s7eunft/oO3rZm+dfuuqV1TH5yYeNu668Ynrnvr+rW1UY1nf9sMdfVCVSdDfelEh+NaxKFeUdyWF+JTQ0JCYrklTl0/e7jVx09p/r+39fw/furET/58fYZmx/9H4mH+7PH5w/zbYuB4p8f/R5odza+fGDCaBA7FwCGH+QEAAHh1iLsj497MuNd64pYn0334DUrz/0Od/f5/kdb/ry9d/85my/xfE0uMN1v/P13mv77+/6Fm6/+ny/zX1/8//gqs/3+gHkg2yc+s/w8AALwaXLj1/9su759eIKCUoe3y/ukFAkoZ2i7j3+kFAs55/f+eEwPzi+4voDT/P9bZ/N/C/QAAAHDx+Mvh//+JVvHS/P94Z/P/C7/+X2h2/v9os8Bks4UBrf8HAADAMtVs/b+//8Z7Hm9VrjT/P9nZ/D+edtHVkDvW+sJQtqZdSNe0e2ao/pMBAAAAWB66wthYT4d5G1ZG3fTy24xLgbZKFx195xWfalVfaf5/urP5f8PvMjY8+9EXb9+1pe+FLxw9duaT93ztlvnj/wAAAMDS6XS/BAAAAAAAAAAAAAAA8Mp7z5HBp1vFS7//DzfOPd7s9//xun/x9wWvbcgda22//l9+f+sN9x+cW7Lw7FAIVxYDu+/afUnIr82/uhh48H3XXFZL3JWW+PoTm39SS7w/DVy/5jXP1xIbksC2uEji69JAvKri86uSQFxe8Z/SQNweJ9NAbx742KpsHJV0W/37YLatKum2+ufBEIYLgfq2OjWYtVFJB3h3EqgP8ENpIA7wN/NAV9qr+1dmvYqBwVj0UyuzXgEAcNGqXws83Dw9MzUev8LH2yu6G2+jhiXL7ixXW+mw+bg02U0zm1d3kl6Rfhedv9Z4T6jWhjBR+rpazFKZG+Xi1NJm0722yZDbrfbW1aRc6lw3XW/zEfVnIxrbsWdmZ0/bgV/bPsu67rZZJkqTnWKWrrlN2kEtHfSlgxF1uG066HK83xXGxlYkuX4pBkdCg3aviE5/r7/Qmn/NXhE1f/u5Rw60qq80/x/pbP5fLY7r+fxiAIfilfX+ZNgy/wAAALC0Prbp5/fEf0e+8WdbW+Utzf9HO5v/xz1Y+aHgbG/H6Xj9/8PDIcxdWn8kC9wbm/vAcAhvmktNxhLZBfXfGUuMZ4F74w6Ta2KJbZONVfXFwMkk8NRQHjidBM7EQL6X4vMh35Xzp0MhrJ9L3dhYYm8sMZIE3hUDo0lgLAbGk8CqGNiYBP5jVR6YTAL/EANhunFb/fWqfFsBAACci3ye1dN4N6TzvJPd7TJU2mUYaJehq12GarsMzUYR738pZuhJTl6pFDL1pLX2J7WUMsSL4Z9zv0oZwiONOdOCpabj+Qf18w0qjRl2/MFv/2FooTT/H+9s/j/QeJu1fibO/+ev/5cFvhm79/F46vhoDPzw7Y2BfMfAmTjZPVKvajIvkU/aj8QSG2NgNAnsjYGNSWDbjXng+GWNgXymXW/8cL3x6bxEIQAAAAAXXNxBEHfTxPn/c4/veqpVudL8f2Nn8//Y3spiYx+Jtf54VQinKvO9qQfWDGaBuB9jMP48/vWDIVxS2MFRLzE1kJXoTRoOD/dnv1DvTav6Sn/244N4f+ujDz14tJa4uz+EtxT2vtTbeLyatdGfBq7qzQIDaWBPdxaIe37qgS93ZQE4b/W9gvEFlZ/qUjeycLkmr79XyzVB0+GV9oEukG+h31wtlWr6QL5Pte7cnrZSdSyJ0tvjtHfbcny3jXi3Fb9I5d9QXpoPVUPXzqmbtx+YmY2PFH/JWrJEz/NCv2RtlV6E1+Ghl9/b9qppB8aTj4/xhcst/DqsxOo2PPvRF2/ftaXvC0ePnfnkPV+7peNuNBE36V/8zmOrf1DYvEutGvLX3LL7PJn0ebIc/xsY9bSFEP7oN/77u63ipfn/ZGfz/+7kds7P48bcPxzC1YWNezZu/l8bzj4HC4HsU/LSciA75P5vQ00/OQEAAGCx1Xd31PcXTOe32Qnh6Ty5nH/yHPPH/RUbF8zfab93Pvvgt1rFS/P/ba3n/31JNx3/d/yfJeL4/4Iu9l3RfekDh85rV3SpOpaE4/8LutjfbY7/L8jxf8f/F+L4fxuO/y/oYn/aSt+S9vrSFUL41TuefnereGn+v7ez+b/1/xZetK++/t+2Zuv/7W22/t8h6/8BAABLqslCc+k8r7R6XylDunpfKUPbBQLbLjFo/b9zXv/vV97zxx8OLZTm/4c6m//Hl8PKYuvLZf2/0RubVHUsBvZaGBAAAICLUbMdBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyyLvvOu9/VKn71+JXbHzuwZdMDWx5+xxdvmD0RwvTc45UsXLnj0/fdd/L+6y+99zNh/e7N33uympfryW//X0PuWOsLQyEcLzwyGBPPDNXuzAe23nD/we5a4uxQCFcWA7vv2n1JLfHZoRBWFwMPvu+ay2qJu9ISX39i809qifengevXvOb5WmJDHqik3f3zVVl3K2l3j64KYbgQqHf3llWNVdXbeEce6Erb+Nxg1kYMDMai9wxmbcTATCwx3RfC2u4QVqRVfauaVbUireqr1ayqFWlVd1RD2BBC6E6reqI3q6o7Hfk/9mZVxcDlb/78c1fVEsd7Q1hbDHz/vSfW1xIfSgL1xn+rN4Q31l4yaeNf6ska70kbv7snhDeEEHrTEv/ZnZXoTUv8qDuESwuBeuO/2x3CwcCrQvzw2Vl8cP/B23Zvn5mZ2reEid68rf5w8/TM1NiOPTM7q0mfmqkU0i/dWY6v6HDsjz13+47a7U0zm1d3ku7Oy/XMdXldT8Pdaxer911L1PvYr4FiJfPPR6n+mL83rAx9B/ZP7Rv78PbZ2X0T2d9Os6/L/sanJNtWE4u1rSptykcvd1utLlaydvbWvWv3H7xtzfSt23dN7Zr64MTE29ZdNz5x3VvXr62Najz7uxhDPdHhuBZxqFd0Fyq5EB8AEhISyy3R1fDpNr5YH+RL9elW+qI/39GeUJ37gC5NK4pZKnOjXIxBb3qZI34531PajmiiNHEoZVnXPsu1pcnEfJb+LMvc97rS5LBYU9fcJo33u8LYWNOvbyONd4ub96eLsHk7TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rMHo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//+l99CO") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:07:51 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:51 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{0x4, 0x0, 0x1800}], 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x111000, 0x10, 0x1}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendto$inet6(r0, &(0x7f0000000000)="cbcbd1dc76c5cffe7c87daf1480b1a4326004f2e8b6be8a54984a32b956c0a6cf76dff65459bef58634239fb0f1bedea54f287c296e7cdbf56d6d99bf62ac7d150c0f18c515d380fe51d4b359c30c58affa12e544b677c3804d6b3220000000000000000", 0x64, 0x44004, &(0x7f0000000080)={0xa, 0x4e23, 0x60, @private0, 0x20002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff004000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000024005f870b0e0000000011dfff000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100000, {0x1000, 0x40, 0x20, 0x3f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040005) 00:07:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:51 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) 00:07:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 53) [ 471.762509][ T4275] FAULT_INJECTION: forcing a failure. [ 471.762509][ T4275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 471.787036][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 471.797237][ T4274] loop1: detected capacity change from 0 to 512 [ 471.807254][ T4275] CPU: 1 PID: 4275 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 471.810158][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 471.812873][ T4275] Call trace: [ 471.813769][ T4275] dump_backtrace+0x1c4/0x1f0 [ 471.815059][ T4275] show_stack+0x2c/0x3c [ 471.816199][ T4275] dump_stack_lvl+0x104/0x16c [ 471.817460][ T4275] dump_stack+0x1c/0x58 [ 471.818573][ T4275] should_fail_ex+0x1e8/0x20c [ 471.819817][ T4275] should_fail_alloc_page+0x68/0x7c [ 471.821247][ T4275] prepare_alloc_pages+0x128/0x244 [ 471.822616][ T4275] __alloc_pages+0xa4/0x1fc [ 471.823877][ T4275] __folio_alloc+0x1c/0x48 [ 471.825089][ T4275] vma_alloc_folio+0x598/0x9a0 [ 471.826415][ T4275] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 471.827946][ T4275] shmem_get_folio_gfp+0xb54/0x1a00 [ 471.829355][ T4275] shmem_write_begin+0x8c/0x350 [ 471.830681][ T4275] generic_perform_write+0xf0/0x2cc [ 471.832090][ T4275] __generic_file_write_iter+0xd8/0x21c [ 471.833603][ T4275] generic_file_write_iter+0x6c/0x168 [ 471.835063][ T4275] vfs_write+0x2dc/0x46c [ 471.836251][ T4275] ksys_write+0xb4/0x160 [ 471.837371][ T4275] __arm64_sys_write+0x24/0x34 [ 471.838680][ T4275] el0_svc_common+0x138/0x220 [ 471.839936][ T4275] do_el0_svc+0x48/0x104 [ 471.841100][ T4275] el0_svc+0x58/0x150 [ 471.842168][ T4275] el0t_64_sync_handler+0x84/0xf0 [ 471.843546][ T4275] el0t_64_sync+0x190/0x194 00:07:51 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:51 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{0x4, 0x0, 0x1800}], 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x111000, 0x10, 0x1}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendto$inet6(r0, &(0x7f0000000000)="cbcbd1dc76c5cffe7c87daf1480b1a4326004f2e8b6be8a54984a32b956c0a6cf76dff65459bef58634239fb0f1bedea54f287c296e7cdbf56d6d99bf62ac7d150c0f18c515d380fe51d4b359c30c58affa12e544b677c3804d6b3220000000000000000", 0x64, 0x44004, &(0x7f0000000080)={0xa, 0x4e23, 0x60, @private0, 0x20002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff004000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000024005f870b0e0000000011dfff000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100000, {0x1000, 0x40, 0x20, 0x3f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040005) semtimedop(0x0, &(0x7f00000004c0)=[{0x4, 0x0, 0x1800}], 0x1, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x111000, 0x10, 0x1}, 0x18) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) sendto$inet6(r0, &(0x7f0000000000)="cbcbd1dc76c5cffe7c87daf1480b1a4326004f2e8b6be8a54984a32b956c0a6cf76dff65459bef58634239fb0f1bedea54f287c296e7cdbf56d6d99bf62ac7d150c0f18c515d380fe51d4b359c30c58affa12e544b677c3804d6b3220000000000000000", 0x64, 0x44004, &(0x7f0000000080)={0xa, 0x4e23, 0x60, @private0, 0x20002}, 0x1c) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff004000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000024005f870b0e0000000011dfff000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100000, {0x1000, 0x40, 0x20, 0x3f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040005) (async) [ 471.877325][ T4280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:07:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 54) [ 471.932714][ T4283] FAULT_INJECTION: forcing a failure. [ 471.932714][ T4283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.936687][ T4283] CPU: 0 PID: 4283 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 471.939428][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 471.942074][ T4283] Call trace: [ 471.942946][ T4283] dump_backtrace+0x1c4/0x1f0 [ 471.944220][ T4283] show_stack+0x2c/0x3c [ 471.945276][ T4283] dump_stack_lvl+0x104/0x16c [ 471.946499][ T4283] dump_stack+0x1c/0x58 [ 471.947648][ T4283] should_fail_ex+0x1e8/0x20c [ 471.948890][ T4283] should_fail+0x14/0x24 [ 471.950061][ T4283] should_fail_usercopy+0x20/0x30 [ 471.951415][ T4283] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 471.952962][ T4283] generic_perform_write+0x144/0x2cc [ 471.954376][ T4283] __generic_file_write_iter+0xd8/0x21c [ 471.955829][ T4283] generic_file_write_iter+0x6c/0x168 [ 471.957293][ T4283] vfs_write+0x2dc/0x46c [ 471.958432][ T4283] ksys_write+0xb4/0x160 [ 471.959557][ T4283] __arm64_sys_write+0x24/0x34 [ 471.960847][ T4283] el0_svc_common+0x138/0x220 [ 471.962097][ T4283] do_el0_svc+0x48/0x104 [ 471.963224][ T4283] el0_svc+0x58/0x150 [ 471.964298][ T4283] el0t_64_sync_handler+0x84/0xf0 [ 471.965641][ T4283] el0t_64_sync+0x190/0x194 [ 471.973383][ T4274] EXT4-fs (loop1): orphan cleanup on readonly fs [ 471.988405][ T4274] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 472.010021][ T4274] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.028880][ T4274] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 472.036657][ T4272] loop0: detected capacity change from 0 to 32768 [ 472.040435][ T4272] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 472.043301][ T4272] BTRFS info (device loop0): using free space tree 00:07:52 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 472.058513][ T4274] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.075937][ T4274] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:52 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{0x4, 0x0, 0x1800}], 0x1, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x111000, 0x10, 0x1}, 0x18) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) sendto$inet6(r0, &(0x7f0000000000)="cbcbd1dc76c5cffe7c87daf1480b1a4326004f2e8b6be8a54984a32b956c0a6cf76dff65459bef58634239fb0f1bedea54f287c296e7cdbf56d6d99bf62ac7d150c0f18c515d380fe51d4b359c30c58affa12e544b677c3804d6b3220000000000000000", 0x64, 0x44004, &(0x7f0000000080)={0xa, 0x4e23, 0x60, @private0, 0x20002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff004000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000024005f870b0e0000000011dfff000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100000, {0x1000, 0x40, 0x20, 0x3f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040005) [ 472.103217][ T4274] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.130154][ T4274] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 472.140611][ T4274] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:52 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{0x3}], 0x1, 0x0) r0 = semget$private(0x0, 0x1, 0x24) r1 = semget(0x3, 0x4, 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x80, 0x1400}], 0x1, &(0x7f00000000c0)={r2, r3+10000000}) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x2, 0xffff, 0x1800}, {0x2, 0x8}, {0x4, 0x81, 0x800}, {0x0, 0xfc01, 0x800}], 0x4, &(0x7f0000000140)={0x0, 0x3938700}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0), 0x31, 0x0) semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x1, 0x14dc, 0x1000}, {0x0, 0xfc29}, {0x2, 0x100, 0x1800}], 0x3) [ 472.162207][ T4274] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 472.179778][ T4274] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 472.187959][ T4274] EXT4-fs (loop1): 1 truncate cleaned up [ 472.232990][ T4305] loop2: detected capacity change from 0 to 32768 [ 472.239518][ T4305] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (4305) [ 472.245666][ T4272] BTRFS info (device loop0): enabling ssd optimizations [ 472.246090][ T4283] loop3: detected capacity change from 0 to 512 [ 472.247742][ T4272] BTRFS info (device loop0): auto enabling async discard [ 472.266655][ T4283] EXT4-fs (loop3): orphan cleanup on readonly fs [ 472.280724][ T4283] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 472.285313][ T4283] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 472.289396][ T4283] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 472.296883][ T4283] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 472.300512][ T4283] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error 00:07:52 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:52 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:52 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{0x3}], 0x1, 0x0) r0 = semget$private(0x0, 0x1, 0x24) r1 = semget(0x3, 0x4, 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x80, 0x1400}], 0x1, &(0x7f00000000c0)={r2, r3+10000000}) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x2, 0xffff, 0x1800}, {0x2, 0x8}, {0x4, 0x81, 0x800}, {0x0, 0xfc01, 0x800}], 0x4, &(0x7f0000000140)={0x0, 0x3938700}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0), 0x31, 0x0) semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x1, 0x14dc, 0x1000}, {0x0, 0xfc29}, {0x2, 0x100, 0x1800}], 0x3) semtimedop(0x0, &(0x7f00000004c0)=[{0x3}], 0x1, 0x0) (async) semget$private(0x0, 0x1, 0x24) (async) semget(0x3, 0x4, 0x2) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x80, 0x1400}], 0x1, &(0x7f00000000c0)={r2, r3+10000000}) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x2, 0xffff, 0x1800}, {0x2, 0x8}, {0x4, 0x81, 0x800}, {0x0, 0xfc01, 0x800}], 0x4, &(0x7f0000000140)={0x0, 0x3938700}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0), 0x31, 0x0) (async) semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x1, 0x14dc, 0x1000}, {0x0, 0xfc29}, {0x2, 0x100, 0x1800}], 0x3) (async) [ 472.367632][ T4333] loop1: detected capacity change from 0 to 512 [ 472.378059][ T4283] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 472.383743][ T4283] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem 00:07:52 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) [ 472.412881][ T4333] EXT4-fs (loop1): orphan cleanup on readonly fs [ 472.415373][ T4333] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 472.417817][ T4283] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents 00:07:52 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{0x3}], 0x1, 0x0) (async) r0 = semget$private(0x0, 0x1, 0x24) (async) r1 = semget(0x3, 0x4, 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x80, 0x1400}], 0x1, &(0x7f00000000c0)={r2, r3+10000000}) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x2, 0xffff, 0x1800}, {0x2, 0x8}, {0x4, 0x81, 0x800}, {0x0, 0xfc01, 0x800}], 0x4, &(0x7f0000000140)={0x0, 0x3938700}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0), 0x31, 0x0) (async, rerun: 32) semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x1, 0x14dc, 0x1000}, {0x0, 0xfc29}, {0x2, 0x100, 0x1800}], 0x3) (rerun: 32) [ 472.435681][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.443504][ T4333] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:52 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 472.453702][ T4283] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 472.461453][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.465165][ T4283] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 472.469035][ T4333] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 472.475752][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.482886][ T4333] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 472.486644][ T4333] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.488718][ T4283] EXT4-fs (loop3): 1 truncate cleaned up [ 472.490429][ T4333] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 472.502335][ T4333] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem 00:07:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3VFrW9cdAPD/lS3HSZzZYXvYAsvMkuGELZIdL4nZQ5bB2J4C27L3zNiyMZYtY8lJbMJw2AcYjNGW9qlPfSn0AxRKPkIpBNr30paW0ibNQ19aFUlXje1ItpPKVmP/fnCic67u1f+cG+vce+656AZwaA1HxLWI6ImI8xExmC7PpCnWG6m23qOHd6dqKYlq9cYXSSTpsub6Sbrt8XSz/oj4x18jelvELa+uzU8Wi4XltJyvLCzly6trF+YWJmcLs4XF8fGxyxNXJi5NjHaknQMRcfXPn7z03zf+cvWd393+8OZn5/6dpMtjQzs6obgh39gn2fq+aKrtj+VOBeuynrQ92W5XBACAXelJz91/XT//H4yelmfrAAAAwIus+seB+txNFQAAADiwMvV7YJNMLr0PYCAymVyucQ/vz+JYplgqV347U1pZnG7cKzsU2czMXLEwmt4rPBTZpFYeq+eflC9uKY/3RZyMiP8PHq2Xc1Ol4nS3L34AAADAIXF8y/j/8WBj/A8AAAAcMEPdrgAAAACw54z/AQAA4OAz/gcAAIAD7W/Xr9dStfn86+lbqyvzpVsXpgvl+dzCylRuqrS8lJstlWbrv9m3sNPnFUulpd/H4sqdfKVQruTLq2s3F0ori5Wbc5segQ0AAADso5O/uv9BEhHrfzhaTzV96XvZrtYM2GuZZ1n5472rB7D/erpdAaBrertdAaBrjPGBZIf32968827n6wIAAOyNkV+Y/4fDarv5//5XT5gfgAPM/D8cXi2O7w75cEhknQHAobf38//V6jNVCAAA6LiBekoyuXQucCAymVwu4kT9sQDZZGauWBiNiJ9ExPuD2SO18lh9y2THMQMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlF9Do+fZyMAAACgKyIynybp879GBs8ObL0+0Jd8PVh/jYjbr914+c5kpbI8Vlv+5ffLK6+kyy/ucLFhu4eNAwAAAB3THKc3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EmPHt6daqb9jPv5nyJiqFX83uivv/ZHNiKOfZVE74btkojo6UD89XsR8fNW8ZNatWIorcXW+JmIONrl+Mc7EB8Os/u1/udaq+9fJobrr62/f71p+qE29n+17mBj/Gb/19Mifl9EnNhljFMP3sq3jX8v4lRv6/6nGT9p0/+eaRvxyKbSv/65ttZuzerrESMtjz/Jplj5ysJSvry6dmFuYXK2MFtYHB8fuzxxZeLSxGh+Zq5YSP9tGeN/v3z72+3af6xN/KEd2n+2zWdu/bv45sGdhz9tZLOt4p87szn+cGzcA0/Hz6THvt+k+dr7I838eiO/0ek33zudZp86ZNXiT7dp/07//+fatH+r83//z0e7XBUA2Afl1bX5yWKxsLznmeG9DyEjs12mdtr6I6jGi5Hpds8EAAB02pOT/l2s3IkJdwAAAAAAAAAAAAAAAAAAAOAp+/FzYltjrnenqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/ouAAD//yiV0Mw=") (fail_nth: 55) 00:07:52 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{}, {0x1, 0x49, 0x1000}, {0x4, 0x6c, 0x800}], 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget$private(0x0, 0x3, 0x401) semtimedop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x1000}, {0x0, 0x5, 0x1800}, {0x2, 0x5, 0x800}], 0x3, &(0x7f0000000080)) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) [ 472.519801][ T4333] EXT4-fs (loop1): 1 truncate cleaned up [ 472.530805][ T4356] FAULT_INJECTION: forcing a failure. [ 472.530805][ T4356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 472.534645][ T4356] CPU: 0 PID: 4356 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 472.537440][ T4356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 472.540261][ T4356] Call trace: [ 472.541154][ T4356] dump_backtrace+0x1c4/0x1f0 [ 472.542465][ T4356] show_stack+0x2c/0x3c [ 472.543623][ T4356] dump_stack_lvl+0x104/0x16c [ 472.544917][ T4356] dump_stack+0x1c/0x58 [ 472.546068][ T4356] should_fail_ex+0x1e8/0x20c [ 472.547387][ T4356] should_fail_alloc_page+0x68/0x7c [ 472.548842][ T4356] prepare_alloc_pages+0x128/0x244 [ 472.550299][ T4356] __alloc_pages+0xa4/0x1fc [ 472.551595][ T4356] __folio_alloc+0x1c/0x48 [ 472.552850][ T4356] vma_alloc_folio+0x598/0x9a0 [ 472.554166][ T4356] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 472.555790][ T4356] shmem_get_folio_gfp+0xb54/0x1a00 [ 472.557265][ T4356] shmem_write_begin+0x8c/0x350 [ 472.558648][ T4356] generic_perform_write+0xf0/0x2cc [ 472.560138][ T4356] __generic_file_write_iter+0xd8/0x21c [ 472.561677][ T4356] generic_file_write_iter+0x6c/0x168 [ 472.563157][ T4356] vfs_write+0x2dc/0x46c [ 472.564338][ T4356] ksys_write+0xb4/0x160 [ 472.565539][ T4356] __arm64_sys_write+0x24/0x34 [ 472.566879][ T4356] el0_svc_common+0x138/0x220 [ 472.568175][ T4356] do_el0_svc+0x48/0x104 [ 472.569385][ T4356] el0_svc+0x58/0x150 [ 472.570511][ T4356] el0t_64_sync_handler+0x84/0xf0 00:07:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:52 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{}, {0x1, 0x49, 0x1000}, {0x4, 0x6c, 0x800}], 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget$private(0x0, 0x3, 0x401) semtimedop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x1000}, {0x0, 0x5, 0x1800}, {0x2, 0x5, 0x800}], 0x3, &(0x7f0000000080)) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}, {0x1, 0x49, 0x1000}, {0x4, 0x6c, 0x800}], 0x3, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semget$private(0x0, 0x3, 0x401) (async) semtimedop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x1000}, {0x0, 0x5, 0x1800}, {0x2, 0x5, 0x800}], 0x3, &(0x7f0000000080)) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) [ 472.571886][ T4356] el0t_64_sync+0x190/0x194 00:07:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3VFrW9cdAPD/lS3HSZzZYXvYAsvMkuGELZIdL4nZQ5bB2J4C27L3zNiyMZYtY8lJbMJw2AcYjNGW9qlPfSn0AxRKPkIpBNr30paW0ibNQ19aFUlXje1ItpPKVmP/fnCic67u1f+cG+vce+656AZwaA1HxLWI6ImI8xExmC7PpCnWG6m23qOHd6dqKYlq9cYXSSTpsub6Sbrt8XSz/oj4x18jelvELa+uzU8Wi4XltJyvLCzly6trF+YWJmcLs4XF8fGxyxNXJi5NjHaknQMRcfXPn7z03zf+cvWd393+8OZn5/6dpMtjQzs6obgh39gn2fq+aKrtj+VOBeuynrQ92W5XBACAXelJz91/XT//H4yelmfrAAAAwIus+seB+txNFQAAADiwMvV7YJNMLr0PYCAymVyucQ/vz+JYplgqV347U1pZnG7cKzsU2czMXLEwmt4rPBTZpFYeq+eflC9uKY/3RZyMiP8PHq2Xc1Ol4nS3L34AAADAIXF8y/j/8WBj/A8AAAAcMEPdrgAAAACw54z/AQAA4OAz/gcAAIAD7W/Xr9dStfn86+lbqyvzpVsXpgvl+dzCylRuqrS8lJstlWbrv9m3sNPnFUulpd/H4sqdfKVQruTLq2s3F0ori5Wbc5segQ0AAADso5O/uv9BEhHrfzhaTzV96XvZrtYM2GuZZ1n5472rB7D/erpdAaBrertdAaBrjPGBZIf32968827n6wIAAOyNkV+Y/4fDarv5//5XT5gfgAPM/D8cXi2O7w75cEhknQHAobf38//V6jNVCAAA6LiBekoyuXQucCAymVwu4kT9sQDZZGauWBiNiJ9ExPuD2SO18lh9y2THMQMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlF9Do+fZyMAAACgKyIynybp879GBs8ObL0+0Jd8PVh/jYjbr914+c5kpbI8Vlv+5ffLK6+kyy/ucLFhu4eNAwAAAB3THKc3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EmPHt6daqb9jPv5nyJiqFX83uivv/ZHNiKOfZVE74btkojo6UD89XsR8fNW8ZNatWIorcXW+JmIONrl+Mc7EB8Os/u1/udaq+9fJobrr62/f71p+qE29n+17mBj/Gb/19Mifl9EnNhljFMP3sq3jX8v4lRv6/6nGT9p0/+eaRvxyKbSv/65ttZuzerrESMtjz/Jplj5ysJSvry6dmFuYXK2MFtYHB8fuzxxZeLSxGh+Zq5YSP9tGeN/v3z72+3af6xN/KEd2n+2zWdu/bv45sGdhz9tZLOt4p87szn+cGzcA0/Hz6THvt+k+dr7I838eiO/0ek33zudZp86ZNXiT7dp/07//+fatH+r83//z0e7XBUA2Afl1bX5yWKxsLznmeG9DyEjs12mdtr6I6jGi5Hpds8EAAB02pOT/l2s3IkJdwAAAAAAAAAAAAAAAAAAAOAp+/FzYltjrnenqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/ouAAD//yiV0Mw=") (fail_nth: 56) [ 472.610937][ T4361] loop1: detected capacity change from 0 to 512 [ 472.615911][ T4363] FAULT_INJECTION: forcing a failure. [ 472.615911][ T4363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.619818][ T4363] CPU: 0 PID: 4363 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 472.622598][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 472.625255][ T4363] Call trace: [ 472.626188][ T4363] dump_backtrace+0x1c4/0x1f0 [ 472.627467][ T4363] show_stack+0x2c/0x3c [ 472.628614][ T4363] dump_stack_lvl+0x104/0x16c [ 472.629914][ T4363] dump_stack+0x1c/0x58 [ 472.631056][ T4363] should_fail_ex+0x1e8/0x20c [ 472.632353][ T4363] should_fail+0x14/0x24 [ 472.633582][ T4363] should_fail_usercopy+0x20/0x30 [ 472.634978][ T4363] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 472.636529][ T4363] generic_perform_write+0x144/0x2cc [ 472.637976][ T4363] __generic_file_write_iter+0xd8/0x21c [ 472.639517][ T4363] generic_file_write_iter+0x6c/0x168 [ 472.641019][ T4363] vfs_write+0x2dc/0x46c [ 472.642164][ T4363] ksys_write+0xb4/0x160 [ 472.643339][ T4363] __arm64_sys_write+0x24/0x34 [ 472.644678][ T4363] el0_svc_common+0x138/0x220 [ 472.645988][ T4363] do_el0_svc+0x48/0x104 [ 472.647137][ T4363] el0_svc+0x58/0x150 [ 472.648216][ T4363] el0t_64_sync_handler+0x84/0xf0 [ 472.649595][ T4363] el0t_64_sync+0x190/0x194 [ 472.681704][ T4361] EXT4-fs (loop1): orphan cleanup on readonly fs [ 472.683918][ T4361] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters 00:07:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3UFvG1kdAPD/OHGatilJVQ5QiRLRorSC2klD24hDWyQEp0pAuZcocaIoThzFTttEFUrFB0BCCBCcOHFB4gMgoX4EhFQJ7ggQCO2228Nedr0ae7xNUjtJu068TX4/6dnvjWf8f28Sv5nnN/IEcGyNRsSdiOiLiCsRMZwtz2XpXPqw2VzvxfPHM2lKol6/914SSbYsXf92RKOcOt3cJAYj4kffj+hvE7e6vrE4XS6XVrNysba0Uqyub1xdWJqeL82XlicnJ25M3Zy6PjXelXYORcSt7/7nVz//w/du/eWbD/95/3+Xf5pky2NLO7qhvCXf3Cf5xr5oSffHareC9Vhf1p58rysCAMC+9GXn+V9rnP8PR1/bs3UAAADgXVa/PdSYu6kDAAAAR1aucQ1skitk1wEMRS5XKDSv4f1inMqVK9XaN+Yqa8uzzWtlRyKfm1sol8aza4VHIp+k5YlG/lX52o7y5EDE2Yj45fDJRrkwUynP9vrLDwAAADgmTu8Y/78cbo7/AQAAgCNmpNcVAAAAAA6c8T8AAAAcfcb/AAAAcKT94O7dNNVb97+efbC+tlh5cHW2VF0sLK3NFGYqqyuF+UplvvGbfUt7vV+5Uln5ViyvPSrWStVasbq+cX+psrZcu7+w7RbYAAAAwCE6+9Wn/0giYvPbJxspNZC9lu9pzYCDlnuTlf99cPUADl9frysA9Ex/rysA9IwxPpDs8XrHi3f+2v26AAAAB2Psy+b/4bjabf5/8LdnzA/AEWb+H46vNsd3h3w4JvLOAODYO/j5/3r9jSoEAAB03VAjJblCNhc4FLlcoRBxpnFbgHwyt1AujUfEFyLi78P5E2l5orFlsueYAQAAAAAAAAAAAAAAAAAAAAAAAABoqteTqL+Fl2+zEQAAANATEbn/Jtn9v8aGLw3t/H5gIPlwuPEcEQ9/d+/Xj6ZrtdWJdPn7ny6v/SZbfm2PLxt2u9k4AAAA0DWtcXprHA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fTi+eOZVjrMuP//TkSMtIvfH4ON58HIR8SpD5Lo37JdEhF9XYi/+SQivtQufpJWK0ayWuyMn4uIkz2Of7oL8eE4e5r2P3faff5yMdp4bv/568/SZ7W1/0u7g63xW/1fX5v4AxFxZp8xzj/7U7Fj/CcR5/vb9z+t+EmH/vdix4gntpV+8uONjU5r1n8fMdb2+JNsi1WsLa0Uq+sbVxeWpudL86XlycmJG1M3p65PjRfnFsql7LFtjF985c8f79b+Ux3ij+zR/ksd3nPn/8VHzx49P9fM5tvFv3xxe/zR2LoHXo+fy459X8/y6etjrfxmM7/VhT/+7UKWfe2Qlcaf7dD+vf7+lzu0f6crP/zZv/a5KgBwCKrrG4vT5XJp9cAzowcfQkZmt0x62vo5qMa7kel1zwQAAHTbq5P+fazcjQl3AAAAAAAAAAAAAAAAAAAA4DWH8XNiO2Nu9qapAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7+iQAAP//0oPQng==") 00:07:52 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:52 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{}, {0x1, 0x49, 0x1000}, {0x4, 0x6c, 0x800}], 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = semget$private(0x0, 0x3, 0x401) semtimedop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x1000}, {0x0, 0x5, 0x1800}, {0x2, 0x5, 0x800}], 0x3, &(0x7f0000000080)) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) [ 472.698739][ T4361] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 472.754456][ T4361] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 472.764591][ T4363] loop3: detected capacity change from 0 to 512 [ 472.774236][ T4361] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.802413][ T4361] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 472.807037][ T4363] EXT4-fs (loop3): orphan cleanup on readonly fs [ 472.809206][ T4363] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 472.826381][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 472.831147][ T4361] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.841956][ T4363] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 472.849154][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 472.852510][ T4361] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 472.863240][ T4361] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 472.873146][ T4363] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 472.874883][ T4361] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 472.877371][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 472.883039][ T4361] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 472.883265][ T4363] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 472.886635][ T4361] EXT4-fs (loop1): 1 truncate cleaned up [ 472.889559][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 472.909148][ T4363] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 472.922883][ T4363] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 472.922922][ T4347] loop2: detected capacity change from 0 to 32768 [ 472.933045][ T4363] EXT4-fs (loop3): 1 truncate cleaned up [ 472.962232][ T4347] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 472.964718][ T4347] BTRFS info (device loop2): using free space tree [ 472.985537][ T4347] BTRFS info (device loop2): enabling ssd optimizations [ 472.987739][ T4347] BTRFS info (device loop2): auto enabling async discard 00:07:52 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$eJzs3UGIVVUcB+DzZhydFGaezMY2YriRFjIFLSKi0Y1TTvBKEKLM0UUhthhkpFYhtHQzEAbu1CAUwZ4QmgvBjUVRtLAgsUULCwIXQhsDF/HevefNfef67nuOY2P6fTFz77n/e84973EX83t57gsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQQlh/66vTVfUtk5v3XT88s+3yzNUd53fOnwyh1j5ey+t7t0+/+d6uva+Pxg6zb2Tber3XkFnX37PG6q6DrX7dP/tCCCPJAMP59upwadTi7qHygJVGr93duOfC9LHTWy/tnpi9c6v80mkZXekJrJT8vrq5eC9NtX8PJWd02oVbr9Z1i2b90xvuP3kRAMB9mWy0N50/R/M/cTvtI2k9aU8l7YWkHf9CWCg2liIbd3WveW5K6ys0z6ksKqzpOc+knr//nXYj7Z+0k6hxH/PsPjWPNKO95jmX1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPkubNpy5V1bdMbt53/fDMtsszV3ec3zl/MoR6+3gtK9c+PnX2bPPc9MSZz8MLB7f/8udw3i9uVxVODr/GnRfHQ9hfqNyMw/41FkKju9BuhuPlwoH2zquxAAAAwOPk6fbvoU47i4MjXe1aO03W2v9FWVgcvXZ3454L08dOb720e2L2zq2lj9foMd7UPcfrtOuLP7VCMI7xNx1vsR5PPVQap1o6Yprnzx1++YOq/qX8X6/O//Gdk/8BAAB4EPJ/Ok61fvn/1NH9c1X9S/l/U9clS/k/zjjm/6GwtPwPAAAAj7KHnf+nSuNU65f/f774z8Wq/qX8PzlY/l9VnHY8+EOc8MHxECb7TR0AAADoIf5/98WPFmJezz45SPP6Hwd+e6dqvFL+nxos/48s66sCAAAAHsRHN9Z+UVUv5f/GYPl/zUOdNQAAAHA/vvz+7bVV9VL+nx0s/8dB85UPWadv4r9C+HQ8hNHWzlxW+DYsvNIpAAAAAMsk5vTnPvx6vuq8Uv6fq37+f3zSQVz/3/X8v9L6/0Ihe+rfSx4MAAAAwJOovJ4/Ph4/++aCXt+/P+j6/7H3X3u36vql/H9ksPw/XNwu5/f/AQAAwBL8377/763SONX6Pf//x++ena7qX8r/C4Pl/7hdV3x5V+L788l4CBtaO/nTBM/Eyx1MCs2RQqGtkfTYFXvkheaaQqFtLunx/HgIz7R2jiSF9bGwkBRuj+WFE0nhp1jI74dO4VxSuBLvtM/G8ummhYuxkC+waMYVFOs6SyKSHn/36tEq3LPHjc7FAQAAnigxPOdZdqS7GdIo26z1O2FtvxOG+p0w3O+EVckJ6Ym9jofZ7kI8Pn18fiJUKOX/E4Pl//hWrM42vdb/h7j+P/9ew876/9lYqCeFZiw00icGNOI1srB7NF6j3sh73N7QKQAAAMBjLX4uMLzC8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ze9+YOu66sOBn+fYfrbj2C5FaukPgaE/mnZTHDslqNqykWSa6Gg03CnVQIiRkLiZG5eExNlIV1Vpw9BQlC0TlaimCRIYg6qoC0xb+Nc1qmgYWmClE4huagUbtJo0+kdMnVC7dXq+9zzfd67fnzR2GnefjxS/8973/L3vT965975zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/4Y7vnP0f1rFrx6/cvtjB7ZsemDLw+/44g2zJ0KYnHu8koUrd3z6vvtO3n/9pfd+Jqzfvfl7T/bm5fJ4WFn705Xf+Uis9cerQjhVCaE7DawZzAI9+f3BWN/rB0O4JMwH6iWmBrISacPh4f4Qjof5QL2qr/SHMFgIbH30oQeP1hJ394fwlhBCNW3j8WrWRn8auKo3CwykgT3dWeC/XsrUA1/uygJw3uKbof6iPznZmGFk4XJNXn89i9axV1Y6vBUxMdI83083LXGnCnrTBybP62krVceSKL09Tnu3LYN3W2k7H/O0Fb9I5d9QXpoPVUPXzqmbtx+YmY2PdIWxsRXNalqi5/mx527fcS7pZfM6jB0YWZTX4YZnP/ri7bu29H3h6LEzn7zna7ecbzd/UNikxfRSq4b8Nbdsnsdoo8+TZfD2K31LGvWlK4Twd7/4+99uFS/N/0daz//jyznedjXkjrW+MJTNzeMjgzHxzFA2NwcAAIBlYznsNT1169NfbVVfaf4/2tnx/3jIP5/MZ6M9HcLGucTh4RAun3s8C9wbm/vAcAhvmktNNgY2JYHTIbxuLnFNvaqkRF8sMZoEnhrKAxuTwJkYmEwCn42BY0ngIzFwMgnsiIHTSWBzDITpxnH8wlA+jo4D/TGwLduIJ+NZCD8biq0l2+pf6lUBAAAsknx22NN4t3Cuw/lmiNPLk/3tMsQzsJtmqCY1pDPY+rSqaQ3d7WroaldDfdyHWg+/VHOlXc2l0zAqjRl+/dRbvhtaKM3/x1vP/6sLdKRSOv4fwo1zf2PurjwyU49vm2zIAAAAAJyHrb93dnereGn+v7Gz8//jPpEVhczhbNwNsXs4hPHGQFbtL5cD2VHvlXkAAAAAloP68fj6sfDp/DY7RTudT5fzT55j/njgf+OC+Z84/My/tupvaf4/2dn5/wONt1knzsRefHw4hL5C4Juxl7XAnNEY+OHbGwP5+M/EDXAkVpWfmFCv6kgssS0GxpPA8WYlHqmXuLwxkD9Z9cYP18cxnZcoBAAAAOCCi7sD4nH5eP7/tx/YM9mqXGn+v+3czv+fmweXTu+fWRnC2u4QVqQ/DDg7kC0MGAODlTzxwEBW14q0qjsHQthQG1ha1Y/y9f+70zUGH+3PqoqBy9/8+eeuqiU+0x/C2mLg++89sb6WmE0C9cZv6g/hjbXRpo3/TV/WeE/a+Cf6QnhDIVCv6gN9IdQa602reqiaX8cgreqvqiFcWgjUq3pbNYSDAYBlKv5XurP44P6Dt+3ePjMztW8JE3Effn+4eXpmamzHnpmd1SZ92pn0uWEZozvLY+rucOxxiaKbZjav7iRd/53geLEv+X780omD442d6Zkb57qehrvXpkO++spyE6HwTeqVGvJAsZL5J7FUf8zfG1aGvgP7p/aNfXj77Oy+iexvp9nXZX/jYaZsW02k22pgob5dBC+P1cVK1s7eunft/oO3rZm+dfuuqV1TH5yYeNu668Ynrnvr+rW1UY1nf9sMdfVCVSdDfelEh+NaxKFeUdyWF+JTQ0JCYrklTl0/e7jVx09p/r+39fw/furET/58fYZmx/9H4mH+7PH5w/zbYuB4p8f/R5odza+fGDCaBA7FwCGH+QEAAHh1iLsj497MuNd64pYn0334DUrz/0Od/f5/kdb/ry9d/85my/xfE0uMN1v/P13mv77+/6Fm6/+ny/zX1/8//gqs/3+gHkg2yc+s/w8AALwaXLj1/9su759eIKCUoe3y/ukFAkoZ2i7j3+kFAs55/f+eEwPzi+4voDT/P9bZ/N/C/QAAAHDx+Mvh//+JVvHS/P94Z/P/C7/+X2h2/v9os8Bks4UBrf8HAADAMtVs/b+//8Z7Hm9VrjT/P9nZ/D+edtHVkDvW+sJQtqZdSNe0e2ao/pMBAAAAWB66wthYT4d5G1ZG3fTy24xLgbZKFx195xWfalVfaf5/urP5f8PvMjY8+9EXb9+1pe+FLxw9duaT93ztlvnj/wAAAMDS6XS/BAAAAAAAAAAAAAAA8Mp7z5HBp1vFS7//DzfOPd7s9//xun/x9wWvbcgda22//l9+f+sN9x+cW7Lw7FAIVxYDu+/afUnIr82/uhh48H3XXFZL3JWW+PoTm39SS7w/DVy/5jXP1xIbksC2uEji69JAvKri86uSQFxe8Z/SQNweJ9NAbx742KpsHJV0W/37YLatKum2+ufBEIYLgfq2OjWYtVFJB3h3EqgP8ENpIA7wN/NAV9qr+1dmvYqBwVj0UyuzXgEAcNGqXws83Dw9MzUev8LH2yu6G2+jhiXL7ixXW+mw+bg02U0zm1d3kl6Rfhedv9Z4T6jWhjBR+rpazFKZG+Xi1NJm0722yZDbrfbW1aRc6lw3XW/zEfVnIxrbsWdmZ0/bgV/bPsu67rZZJkqTnWKWrrlN2kEtHfSlgxF1uG066HK83xXGxlYkuX4pBkdCg3aviE5/r7/Qmn/NXhE1f/u5Rw60qq80/x/pbP5fLY7r+fxiAIfilfX+ZNgy/wAAALC0Prbp5/fEf0e+8WdbW+Utzf9HO5v/xz1Y+aHgbG/H6Xj9/8PDIcxdWn8kC9wbm/vAcAhvmktNxhLZBfXfGUuMZ4F74w6Ta2KJbZONVfXFwMkk8NRQHjidBM7EQL6X4vMh35Xzp0MhrJ9L3dhYYm8sMZIE3hUDo0lgLAbGk8CqGNiYBP5jVR6YTAL/EANhunFb/fWqfFsBAACci3ye1dN4N6TzvJPd7TJU2mUYaJehq12GarsMzUYR738pZuhJTl6pFDL1pLX2J7WUMsSL4Z9zv0oZwiONOdOCpabj+Qf18w0qjRl2/MFv/2FooTT/H+9s/j/QeJu1fibO/+ev/5cFvhm79/F46vhoDPzw7Y2BfMfAmTjZPVKvajIvkU/aj8QSG2NgNAnsjYGNSWDbjXng+GWNgXymXW/8cL3x6bxEIQAAAAAXXNxBEHfTxPn/c4/veqpVudL8f2Nn8//Y3spiYx+Jtf54VQinKvO9qQfWDGaBuB9jMP48/vWDIVxS2MFRLzE1kJXoTRoOD/dnv1DvTav6Sn/244N4f+ujDz14tJa4uz+EtxT2vtTbeLyatdGfBq7qzQIDaWBPdxaIe37qgS93ZQE4b/W9gvEFlZ/qUjeycLkmr79XyzVB0+GV9oEukG+h31wtlWr6QL5Pte7cnrZSdSyJ0tvjtHfbcny3jXi3Fb9I5d9QXpoPVUPXzqmbtx+YmY2PFH/JWrJEz/NCv2RtlV6E1+Ghl9/b9qppB8aTj4/xhcst/DqsxOo2PPvRF2/ftaXvC0ePnfnkPV+7peNuNBE36V/8zmOrf1DYvEutGvLX3LL7PJn0ebIc/xsY9bSFEP7oN/77u63ipfn/ZGfz/+7kds7P48bcPxzC1YWNezZu/l8bzj4HC4HsU/LSciA75P5vQ00/OQEAAGCx1Xd31PcXTOe32Qnh6Ty5nH/yHPPH/RUbF8zfab93Pvvgt1rFS/P/ba3n/31JNx3/d/yfJeL4/4Iu9l3RfekDh85rV3SpOpaE4/8LutjfbY7/L8jxf8f/F+L4fxuO/y/oYn/aSt+S9vrSFUL41TuefnereGn+v7ez+b/1/xZetK++/t+2Zuv/7W22/t8h6/8BAABLqslCc+k8r7R6XylDunpfKUPbBQLbLjFo/b9zXv/vV97zxx8OLZTm/4c6m//Hl8PKYuvLZf2/0RubVHUsBvZaGBAAAICLUbMdBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyyLvvOu9/VKn71+JXbHzuwZdMDWx5+xxdvmD0RwvTc45UsXLnj0/fdd/L+6y+99zNh/e7N33uympfryW//X0PuWOsLQyEcLzwyGBPPDNXuzAe23nD/we5a4uxQCFcWA7vv2n1JLfHZoRBWFwMPvu+ay2qJu9ISX39i809qifengevXvOb5WmJDHqik3f3zVVl3K2l3j64KYbgQqHf3llWNVdXbeEce6Erb+Nxg1kYMDMai9wxmbcTATCwx3RfC2u4QVqRVfauaVbUireqr1ayqFWlVd1RD2BBC6E6reqI3q6o7Hfk/9mZVxcDlb/78c1fVEsd7Q1hbDHz/vSfW1xIfSgL1xn+rN4Q31l4yaeNf6ska70kbv7snhDeEEHrTEv/ZnZXoTUv8qDuESwuBeuO/2x3CwcCrQvzw2Vl8cP/B23Zvn5mZ2reEid68rf5w8/TM1NiOPTM7q0mfmqkU0i/dWY6v6HDsjz13+47a7U0zm1d3ku7Oy/XMdXldT8Pdaxer911L1PvYr4FiJfPPR6n+mL83rAx9B/ZP7Rv78PbZ2X0T2d9Os6/L/sanJNtWE4u1rSptykcvd1utLlaydvbWvWv3H7xtzfSt23dN7Zr64MTE29ZdNz5x3VvXr62Najz7uxhDPdHhuBZxqFd0Fyq5EB8AEhISyy3R1fDpNr5YH+RL9elW+qI/39GeUJ37gC5NK4pZKnOjXIxBb3qZI34531PajmiiNHEoZVnXPsu1pcnEfJb+LMvc97rS5LBYU9fcJo33u8LYWNOvbyONd4ub96eLsHk7TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rMHo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//+l99CO") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) 00:07:52 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x8, 0x0, [0x3ff, 0x5, 0x8, 0x4, 0x5, 0x6, 0x5, 0x8, 0x37a, 0xff, 0x401, 0x3, 0x5, 0xfffffffc, 0x40, 0x800]}, {0x2, 0x0, [0x7, 0xbf0, 0x2, 0x7, 0xffff, 0x7, 0x4, 0x100, 0xff, 0x6, 0x9, 0x8001, 0xfffffff9, 0x3, 0x0, 0xfffffffa]}, {0x4, 0x0, [0x5, 0x20, 0x0, 0x3, 0x7, 0x80000001, 0x5000000, 0x80000000, 0x10000, 0x2, 0xffff, 0x1, 0xf11, 0xffffffff, 0xfffeffff, 0x8000]}, {0x20, 0x0, [0x4, 0x8669, 0x5e4, 0xffffff52, 0xff, 0x10001, 0x4, 0x7, 0x9, 0xfffffff7, 0x40, 0x80000000, 0x1175, 0x80, 0x0, 0xd503]}, {0x4, 0x0, [0x1, 0xc945, 0x2, 0x20, 0x2, 0x80000001, 0x7fff, 0x7, 0xc8b, 0x8, 0x7fff, 0xab, 0x2, 0x8, 0x0, 0x401]}], r5, 0x1, 0x1, 0x168}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r5, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x6511b000) semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x20, 0x800}, {0x0, 0x80, 0x1000}, {0x4, 0x8, 0x1800}, {0x3, 0x8}, {0x3, 0x20, 0x1800}, {0x4, 0x1, 0x800}, {0x1, 0x6, 0x1800}, {0x0, 0x7}, {0x3, 0x1f, 0x1000}], 0x9, &(0x7f0000000040)) 00:07:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:52 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 57) [ 473.023793][ T4409] loop0: detected capacity change from 0 to 512 [ 473.032287][ T4412] FAULT_INJECTION: forcing a failure. [ 473.032287][ T4412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 473.034200][ T4415] loop1: detected capacity change from 0 to 512 [ 473.049226][ T4409] EXT4-fs (loop0): orphan cleanup on readonly fs 00:07:53 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 473.053204][ T4415] EXT4-fs (loop1): orphan cleanup on readonly fs [ 473.063845][ T4409] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 473.070869][ T4415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 473.074855][ T4412] CPU: 1 PID: 4412 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 473.077715][ T4412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 473.080509][ T4412] Call trace: [ 473.081389][ T4412] dump_backtrace+0x1c4/0x1f0 [ 473.082631][ T4412] show_stack+0x2c/0x3c [ 473.083712][ T4412] dump_stack_lvl+0x104/0x16c [ 473.084985][ T4412] dump_stack+0x1c/0x58 [ 473.086076][ T4412] should_fail_ex+0x1e8/0x20c [ 473.086438][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.087349][ T4412] should_fail_alloc_page+0x68/0x7c [ 473.087366][ T4412] prepare_alloc_pages+0x128/0x244 [ 473.087377][ T4412] __alloc_pages+0xa4/0x1fc [ 473.090880][ T4409] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz-executor.0: corrupted inode contents [ 473.092120][ T4412] __folio_alloc+0x1c/0x48 [ 473.092136][ T4412] vma_alloc_folio+0x598/0x9a0 [ 473.092148][ T4412] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 473.101951][ T4412] shmem_get_folio_gfp+0xb54/0x1a00 [ 473.103338][ T4412] shmem_write_begin+0x8c/0x350 [ 473.104637][ T4412] generic_perform_write+0xf0/0x2cc [ 473.106021][ T4412] __generic_file_write_iter+0xd8/0x21c [ 473.107510][ T4412] generic_file_write_iter+0x6c/0x168 [ 473.108954][ T4412] vfs_write+0x2dc/0x46c [ 473.110086][ T4412] ksys_write+0xb4/0x160 [ 473.111239][ T4412] __arm64_sys_write+0x24/0x34 [ 473.112503][ T4412] el0_svc_common+0x138/0x220 [ 473.113796][ T4412] do_el0_svc+0x48/0x104 [ 473.114955][ T4412] el0_svc+0x58/0x150 [ 473.116036][ T4412] el0t_64_sync_handler+0x84/0xf0 [ 473.117405][ T4412] el0t_64_sync+0x190/0x194 [ 473.120381][ T4409] EXT4-fs error (device loop0): ext4_dirty_inode:6110: inode #12: comm syz-executor.0: mark_inode_dirty error [ 473.121400][ T4415] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:53 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 473.145626][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.146077][ T4409] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz-executor.0: corrupted inode contents [ 473.158854][ T4415] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 473.162394][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.166001][ T4415] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 473.192681][ T4409] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz-executor.0: mark_inode_dirty error [ 473.200634][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.212019][ T4409] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz-executor.0: corrupted inode contents [ 473.219055][ T4415] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:53 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x8, 0x0, [0x3ff, 0x5, 0x8, 0x4, 0x5, 0x6, 0x5, 0x8, 0x37a, 0xff, 0x401, 0x3, 0x5, 0xfffffffc, 0x40, 0x800]}, {0x2, 0x0, [0x7, 0xbf0, 0x2, 0x7, 0xffff, 0x7, 0x4, 0x100, 0xff, 0x6, 0x9, 0x8001, 0xfffffff9, 0x3, 0x0, 0xfffffffa]}, {0x4, 0x0, [0x5, 0x20, 0x0, 0x3, 0x7, 0x80000001, 0x5000000, 0x80000000, 0x10000, 0x2, 0xffff, 0x1, 0xf11, 0xffffffff, 0xfffeffff, 0x8000]}, {0x20, 0x0, [0x4, 0x8669, 0x5e4, 0xffffff52, 0xff, 0x10001, 0x4, 0x7, 0x9, 0xfffffff7, 0x40, 0x80000000, 0x1175, 0x80, 0x0, 0xd503]}, {0x4, 0x0, [0x1, 0xc945, 0x2, 0x20, 0x2, 0x80000001, 0x7fff, 0x7, 0xc8b, 0x8, 0x7fff, 0xab, 0x2, 0x8, 0x0, 0x401]}], r5, 0x1, 0x1, 0x168}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r5, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x6511b000) semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x20, 0x800}, {0x0, 0x80, 0x1000}, {0x4, 0x8, 0x1800}, {0x3, 0x8}, {0x3, 0x20, 0x1800}, {0x4, 0x1, 0x800}, {0x1, 0x6, 0x1800}, {0x0, 0x7}, {0x3, 0x1f, 0x1000}], 0x9, &(0x7f0000000040)) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r5}}, 0x48) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x8, 0x0, [0x3ff, 0x5, 0x8, 0x4, 0x5, 0x6, 0x5, 0x8, 0x37a, 0xff, 0x401, 0x3, 0x5, 0xfffffffc, 0x40, 0x800]}, {0x2, 0x0, [0x7, 0xbf0, 0x2, 0x7, 0xffff, 0x7, 0x4, 0x100, 0xff, 0x6, 0x9, 0x8001, 0xfffffff9, 0x3, 0x0, 0xfffffffa]}, {0x4, 0x0, [0x5, 0x20, 0x0, 0x3, 0x7, 0x80000001, 0x5000000, 0x80000000, 0x10000, 0x2, 0xffff, 0x1, 0xf11, 0xffffffff, 0xfffeffff, 0x8000]}, {0x20, 0x0, [0x4, 0x8669, 0x5e4, 0xffffff52, 0xff, 0x10001, 0x4, 0x7, 0x9, 0xfffffff7, 0x40, 0x80000000, 0x1175, 0x80, 0x0, 0xd503]}, {0x4, 0x0, [0x1, 0xc945, 0x2, 0x20, 0x2, 0x80000001, 0x7fff, 0x7, 0xc8b, 0x8, 0x7fff, 0xab, 0x2, 0x8, 0x0, 0x401]}], r5, 0x1, 0x1, 0x168}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r5, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x6511b000) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x20, 0x800}, {0x0, 0x80, 0x1000}, {0x4, 0x8, 0x1800}, {0x3, 0x8}, {0x3, 0x20, 0x1800}, {0x4, 0x1, 0x800}, {0x1, 0x6, 0x1800}, {0x0, 0x7}, {0x3, 0x1f, 0x1000}], 0x9, &(0x7f0000000040)) (async) [ 473.225314][ T4415] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem 00:07:53 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4a000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 473.236404][ T4409] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 473.243688][ T4409] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz-executor.0: corrupted inode contents [ 473.247827][ T4415] EXT4-fs (loop1): 1 truncate cleaned up [ 473.265131][ T4409] EXT4-fs error (device loop0): ext4_truncate:4365: inode #12: comm syz-executor.0: mark_inode_dirty error 00:07:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 473.291377][ T4409] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 473.302394][ T4461] loop1: detected capacity change from 0 to 512 00:07:53 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 473.315739][ T5434] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 473.327159][ T4409] EXT4-fs (loop0): 1 truncate cleaned up [ 473.335741][ T4461] EXT4-fs (loop1): orphan cleanup on readonly fs [ 473.363469][ T4461] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 473.392370][ T4461] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.424695][ T4461] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 473.452449][ T4461] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.471173][ T4461] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 473.477793][ T4443] loop2: detected capacity change from 0 to 32768 [ 473.480575][ T4461] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.489696][ T4461] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 473.489980][ T4443] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 473.494667][ T4443] BTRFS info (device loop2): using free space tree [ 473.498917][ T4461] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.502641][ T4461] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 473.511406][ T4461] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 473.514822][ T4461] EXT4-fs (loop1): 1 truncate cleaned up [ 473.552347][ T4443] BTRFS info (device loop2): enabling ssd optimizations [ 473.554383][ T4443] BTRFS info (device loop2): auto enabling async discard 00:07:53 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$eJzs3UGIVVUcB+DzZhydFGaezMY2YriRFjIFLSKi0Y1TTvBKEKLM0UUhthhkpFYhtHQzEAbu1CAUwZ4QmgvBjUVRtLAgsUULCwIXQhsDF/HevefNfef67nuOY2P6fTFz77n/e84973EX83t57gsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQQlh/66vTVfUtk5v3XT88s+3yzNUd53fOnwyh1j5ey+t7t0+/+d6uva+Pxg6zb2Tber3XkFnX37PG6q6DrX7dP/tCCCPJAMP59upwadTi7qHygJVGr93duOfC9LHTWy/tnpi9c6v80mkZXekJrJT8vrq5eC9NtX8PJWd02oVbr9Z1i2b90xvuP3kRAMB9mWy0N50/R/M/cTvtI2k9aU8l7YWkHf9CWCg2liIbd3WveW5K6ys0z6ksKqzpOc+knr//nXYj7Z+0k6hxH/PsPjWPNKO95jmX1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPkubNpy5V1bdMbt53/fDMtsszV3ec3zl/MoR6+3gtK9c+PnX2bPPc9MSZz8MLB7f/8udw3i9uVxVODr/GnRfHQ9hfqNyMw/41FkKju9BuhuPlwoH2zquxAAAAwOPk6fbvoU47i4MjXe1aO03W2v9FWVgcvXZ3454L08dOb720e2L2zq2lj9foMd7UPcfrtOuLP7VCMI7xNx1vsR5PPVQap1o6Yprnzx1++YOq/qX8X6/O//Gdk/8BAAB4EPJ/Ok61fvn/1NH9c1X9S/l/U9clS/k/zjjm/6GwtPwPAAAAj7KHnf+nSuNU65f/f774z8Wq/qX8PzlY/l9VnHY8+EOc8MHxECb7TR0AAADoIf5/98WPFmJezz45SPP6Hwd+e6dqvFL+nxos/48s66sCAAAAHsRHN9Z+UVUv5f/GYPl/zUOdNQAAAHA/vvz+7bVV9VL+nx0s/8dB85UPWadv4r9C+HQ8hNHWzlxW+DYsvNIpAAAAAMsk5vTnPvx6vuq8Uv6fq37+f3zSQVz/3/X8v9L6/0Ihe+rfSx4MAAAAwJOovJ4/Ph4/++aCXt+/P+j6/7H3X3u36vql/H9ksPw/XNwu5/f/AQAAwBL8377/763SONX6Pf//x++ena7qX8r/C4Pl/7hdV3x5V+L788l4CBtaO/nTBM/Eyx1MCs2RQqGtkfTYFXvkheaaQqFtLunx/HgIz7R2jiSF9bGwkBRuj+WFE0nhp1jI74dO4VxSuBLvtM/G8ummhYuxkC+waMYVFOs6SyKSHn/36tEq3LPHjc7FAQAAnigxPOdZdqS7GdIo26z1O2FtvxOG+p0w3O+EVckJ6Ym9jofZ7kI8Pn18fiJUKOX/E4Pl//hWrM42vdb/h7j+P/9ew876/9lYqCeFZiw00icGNOI1srB7NF6j3sh73N7QKQAAAMBjLX4uMLzC8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ze9+YOu66sOBn+fYfrbj2C5FaukPgaE/mnZTHDslqNqykWSa6Gg03CnVQIiRkLiZG5eExNlIV1Vpw9BQlC0TlaimCRIYg6qoC0xb+Nc1qmgYWmClE4huagUbtJo0+kdMnVC7dXq+9zzfd67fnzR2GnefjxS/8973/L3vT965975zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/4Y7vnP0f1rFrx6/cvtjB7ZsemDLw+/44g2zJ0KYnHu8koUrd3z6vvtO3n/9pfd+Jqzfvfl7T/bm5fJ4WFn705Xf+Uis9cerQjhVCaE7DawZzAI9+f3BWN/rB0O4JMwH6iWmBrISacPh4f4Qjof5QL2qr/SHMFgIbH30oQeP1hJ394fwlhBCNW3j8WrWRn8auKo3CwykgT3dWeC/XsrUA1/uygJw3uKbof6iPznZmGFk4XJNXn89i9axV1Y6vBUxMdI83083LXGnCnrTBybP62krVceSKL09Tnu3LYN3W2k7H/O0Fb9I5d9QXpoPVUPXzqmbtx+YmY2PdIWxsRXNalqi5/mx527fcS7pZfM6jB0YWZTX4YZnP/ri7bu29H3h6LEzn7zna7ecbzd/UNikxfRSq4b8Nbdsnsdoo8+TZfD2K31LGvWlK4Twd7/4+99uFS/N/0daz//jyznedjXkjrW+MJTNzeMjgzHxzFA2NwcAAIBlYznsNT1169NfbVVfaf4/2tnx/3jIP5/MZ6M9HcLGucTh4RAun3s8C9wbm/vAcAhvmktNNgY2JYHTIbxuLnFNvaqkRF8sMZoEnhrKAxuTwJkYmEwCn42BY0ngIzFwMgnsiIHTSWBzDITpxnH8wlA+jo4D/TGwLduIJ+NZCD8biq0l2+pf6lUBAAAsknx22NN4t3Cuw/lmiNPLk/3tMsQzsJtmqCY1pDPY+rSqaQ3d7WroaldDfdyHWg+/VHOlXc2l0zAqjRl+/dRbvhtaKM3/x1vP/6sLdKRSOv4fwo1zf2PurjwyU49vm2zIAAAAAJyHrb93dnereGn+v7Gz8//jPpEVhczhbNwNsXs4hPHGQFbtL5cD2VHvlXkAAAAAloP68fj6sfDp/DY7RTudT5fzT55j/njgf+OC+Z84/My/tupvaf4/2dn5/wONt1knzsRefHw4hL5C4Juxl7XAnNEY+OHbGwP5+M/EDXAkVpWfmFCv6kgssS0GxpPA8WYlHqmXuLwxkD9Z9cYP18cxnZcoBAAAAOCCi7sD4nH5eP7/tx/YM9mqXGn+v+3czv+fmweXTu+fWRnC2u4QVqQ/DDg7kC0MGAODlTzxwEBW14q0qjsHQthQG1ha1Y/y9f+70zUGH+3PqoqBy9/8+eeuqiU+0x/C2mLg++89sb6WmE0C9cZv6g/hjbXRpo3/TV/WeE/a+Cf6QnhDIVCv6gN9IdQa602reqiaX8cgreqvqiFcWgjUq3pbNYSDAYBlKv5XurP44P6Dt+3ePjMztW8JE3Effn+4eXpmamzHnpmd1SZ92pn0uWEZozvLY+rucOxxiaKbZjav7iRd/53geLEv+X780omD442d6Zkb57qehrvXpkO++spyE6HwTeqVGvJAsZL5J7FUf8zfG1aGvgP7p/aNfXj77Oy+iexvp9nXZX/jYaZsW02k22pgob5dBC+P1cVK1s7eunft/oO3rZm+dfuuqV1TH5yYeNu668Ynrnvr+rW1UY1nf9sMdfVCVSdDfelEh+NaxKFeUdyWF+JTQ0JCYrklTl0/e7jVx09p/r+39fw/furET/58fYZmx/9H4mH+7PH5w/zbYuB4p8f/R5odza+fGDCaBA7FwCGH+QEAAHh1iLsj497MuNd64pYn0334DUrz/0Od/f5/kdb/ry9d/85my/xfE0uMN1v/P13mv77+/6Fm6/+ny/zX1/8//gqs/3+gHkg2yc+s/w8AALwaXLj1/9su759eIKCUoe3y/ukFAkoZ2i7j3+kFAs55/f+eEwPzi+4voDT/P9bZ/N/C/QAAAHDx+Mvh//+JVvHS/P94Z/P/C7/+X2h2/v9os8Bks4UBrf8HAADAMtVs/b+//8Z7Hm9VrjT/P9nZ/D+edtHVkDvW+sJQtqZdSNe0e2ao/pMBAAAAWB66wthYT4d5G1ZG3fTy24xLgbZKFx195xWfalVfaf5/urP5f8PvMjY8+9EXb9+1pe+FLxw9duaT93ztlvnj/wAAAMDS6XS/BAAAAAAAAAAAAAAA8Mp7z5HBp1vFS7//DzfOPd7s9//xun/x9wWvbcgda22//l9+f+sN9x+cW7Lw7FAIVxYDu+/afUnIr82/uhh48H3XXFZL3JWW+PoTm39SS7w/DVy/5jXP1xIbksC2uEji69JAvKri86uSQFxe8Z/SQNweJ9NAbx742KpsHJV0W/37YLatKum2+ufBEIYLgfq2OjWYtVFJB3h3EqgP8ENpIA7wN/NAV9qr+1dmvYqBwVj0UyuzXgEAcNGqXws83Dw9MzUev8LH2yu6G2+jhiXL7ixXW+mw+bg02U0zm1d3kl6Rfhedv9Z4T6jWhjBR+rpazFKZG+Xi1NJm0722yZDbrfbW1aRc6lw3XW/zEfVnIxrbsWdmZ0/bgV/bPsu67rZZJkqTnWKWrrlN2kEtHfSlgxF1uG066HK83xXGxlYkuX4pBkdCg3aviE5/r7/Qmn/NXhE1f/u5Rw60qq80/x/pbP5fLY7r+fxiAIfilfX+ZNgy/wAAALC0Prbp5/fEf0e+8WdbW+Utzf9HO5v/xz1Y+aHgbG/H6Xj9/8PDIcxdWn8kC9wbm/vAcAhvmktNxhLZBfXfGUuMZ4F74w6Ta2KJbZONVfXFwMkk8NRQHjidBM7EQL6X4vMh35Xzp0MhrJ9L3dhYYm8sMZIE3hUDo0lgLAbGk8CqGNiYBP5jVR6YTAL/EANhunFb/fWqfFsBAACci3ye1dN4N6TzvJPd7TJU2mUYaJehq12GarsMzUYR738pZuhJTl6pFDL1pLX2J7WUMsSL4Z9zv0oZwiONOdOCpabj+Qf18w0qjRl2/MFv/2FooTT/H+9s/j/QeJu1fibO/+ev/5cFvhm79/F46vhoDPzw7Y2BfMfAmTjZPVKvajIvkU/aj8QSG2NgNAnsjYGNSWDbjXng+GWNgXymXW/8cL3x6bxEIQAAAAAXXNxBEHfTxPn/c4/veqpVudL8f2Nn8//Y3spiYx+Jtf54VQinKvO9qQfWDGaBuB9jMP48/vWDIVxS2MFRLzE1kJXoTRoOD/dnv1DvTav6Sn/244N4f+ujDz14tJa4uz+EtxT2vtTbeLyatdGfBq7qzQIDaWBPdxaIe37qgS93ZQE4b/W9gvEFlZ/qUjeycLkmr79XyzVB0+GV9oEukG+h31wtlWr6QL5Pte7cnrZSdSyJ0tvjtHfbcny3jXi3Fb9I5d9QXpoPVUPXzqmbtx+YmY2PFH/JWrJEz/NCv2RtlV6E1+Ghl9/b9qppB8aTj4/xhcst/DqsxOo2PPvRF2/ftaXvC0ePnfnkPV+7peNuNBE36V/8zmOrf1DYvEutGvLX3LL7PJn0ebIc/xsY9bSFEP7oN/77u63ipfn/ZGfz/+7kds7P48bcPxzC1YWNezZu/l8bzj4HC4HsU/LSciA75P5vQ00/OQEAAGCx1Xd31PcXTOe32Qnh6Ty5nH/yHPPH/RUbF8zfab93Pvvgt1rFS/P/ba3n/31JNx3/d/yfJeL4/4Iu9l3RfekDh85rV3SpOpaE4/8LutjfbY7/L8jxf8f/F+L4fxuO/y/oYn/aSt+S9vrSFUL41TuefnereGn+v7ez+b/1/xZetK++/t+2Zuv/7W22/t8h6/8BAABLqslCc+k8r7R6XylDunpfKUPbBQLbLjFo/b9zXv/vV97zxx8OLZTm/4c6m//Hl8PKYuvLZf2/0RubVHUsBvZaGBAAAICLUbMdBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyyLvvOu9/VKn71+JXbHzuwZdMDWx5+xxdvmD0RwvTc45UsXLnj0/fdd/L+6y+99zNh/e7N33uympfryW//X0PuWOsLQyEcLzwyGBPPDNXuzAe23nD/we5a4uxQCFcWA7vv2n1JLfHZoRBWFwMPvu+ay2qJu9ISX39i809qifengevXvOb5WmJDHqik3f3zVVl3K2l3j64KYbgQqHf3llWNVdXbeEce6Erb+Nxg1kYMDMai9wxmbcTATCwx3RfC2u4QVqRVfauaVbUireqr1ayqFWlVd1RD2BBC6E6reqI3q6o7Hfk/9mZVxcDlb/78c1fVEsd7Q1hbDHz/vSfW1xIfSgL1xn+rN4Q31l4yaeNf6ska70kbv7snhDeEEHrTEv/ZnZXoTUv8qDuESwuBeuO/2x3CwcCrQvzw2Vl8cP/B23Zvn5mZ2reEid68rf5w8/TM1NiOPTM7q0mfmqkU0i/dWY6v6HDsjz13+47a7U0zm1d3ku7Oy/XMdXldT8Pdaxer911L1PvYr4FiJfPPR6n+mL83rAx9B/ZP7Rv78PbZ2X0T2d9Os6/L/sanJNtWE4u1rSptykcvd1utLlaydvbWvWv3H7xtzfSt23dN7Zr64MTE29ZdNz5x3VvXr62Najz7uxhDPdHhuBZxqFd0Fyq5EB8AEhISyy3R1fDpNr5YH+RL9elW+qI/39GeUJ37gC5NK4pZKnOjXIxBb3qZI34531PajmiiNHEoZVnXPsu1pcnEfJb+LMvc97rS5LBYU9fcJo33u8LYWNOvbyONd4ub96eLsHk7TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rMHo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//+l99CO") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 00:07:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 58) 00:07:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:53 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r5}}, 0x48) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x8, 0x0, [0x3ff, 0x5, 0x8, 0x4, 0x5, 0x6, 0x5, 0x8, 0x37a, 0xff, 0x401, 0x3, 0x5, 0xfffffffc, 0x40, 0x800]}, {0x2, 0x0, [0x7, 0xbf0, 0x2, 0x7, 0xffff, 0x7, 0x4, 0x100, 0xff, 0x6, 0x9, 0x8001, 0xfffffff9, 0x3, 0x0, 0xfffffffa]}, {0x4, 0x0, [0x5, 0x20, 0x0, 0x3, 0x7, 0x80000001, 0x5000000, 0x80000000, 0x10000, 0x2, 0xffff, 0x1, 0xf11, 0xffffffff, 0xfffeffff, 0x8000]}, {0x20, 0x0, [0x4, 0x8669, 0x5e4, 0xffffff52, 0xff, 0x10001, 0x4, 0x7, 0x9, 0xfffffff7, 0x40, 0x80000000, 0x1175, 0x80, 0x0, 0xd503]}, {0x4, 0x0, [0x1, 0xc945, 0x2, 0x20, 0x2, 0x80000001, 0x7fff, 0x7, 0xc8b, 0x8, 0x7fff, 0xab, 0x2, 0x8, 0x0, 0x401]}], r5, 0x1, 0x1, 0x168}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r5, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x6511b000) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x20, 0x800}, {0x0, 0x80, 0x1000}, {0x4, 0x8, 0x1800}, {0x3, 0x8}, {0x3, 0x20, 0x1800}, {0x4, 0x1, 0x800}, {0x1, 0x6, 0x1800}, {0x0, 0x7}, {0x3, 0x1f, 0x1000}], 0x9, &(0x7f0000000040)) 00:07:53 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 473.617752][ T4530] FAULT_INJECTION: forcing a failure. [ 473.617752][ T4530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.621423][ T4530] CPU: 0 PID: 4530 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 473.624142][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 473.626859][ T4530] Call trace: [ 473.627735][ T4530] dump_backtrace+0x1c4/0x1f0 [ 473.629030][ T4530] show_stack+0x2c/0x3c [ 473.630126][ T4530] dump_stack_lvl+0x104/0x16c [ 473.631350][ T4530] dump_stack+0x1c/0x58 [ 473.632478][ T4530] should_fail_ex+0x1e8/0x20c [ 473.633758][ T4530] should_fail+0x14/0x24 [ 473.634896][ T4530] should_fail_usercopy+0x20/0x30 [ 473.636252][ T4530] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 473.637812][ T4530] generic_perform_write+0x144/0x2cc [ 473.639275][ T4530] __generic_file_write_iter+0xd8/0x21c [ 473.640818][ T4530] generic_file_write_iter+0x6c/0x168 [ 473.642280][ T4530] vfs_write+0x2dc/0x46c [ 473.643409][ T4530] ksys_write+0xb4/0x160 [ 473.644563][ T4530] __arm64_sys_write+0x24/0x34 [ 473.645886][ T4530] el0_svc_common+0x138/0x220 [ 473.647147][ T4530] do_el0_svc+0x48/0x104 [ 473.648334][ T4530] el0_svc+0x58/0x150 [ 473.649414][ T4530] el0t_64_sync_handler+0x84/0xf0 [ 473.650752][ T4530] el0t_64_sync+0x190/0x194 00:07:53 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) (fail_nth: 1) [ 473.658897][ T4534] loop1: detected capacity change from 0 to 512 00:07:53 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x550f0000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 473.681391][ T4540] FAULT_INJECTION: forcing a failure. [ 473.681391][ T4540] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:07:53 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget(0x1, 0x3, 0x88) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x1, 0x1800}, {0x3, 0xc69a, 0x800}, {0x1, 0xd99, 0x3800}], 0x3, &(0x7f0000000040)={0x77359400}) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semget(0x2, 0x3, 0x100) [ 473.695741][ T4534] EXT4-fs (loop1): orphan cleanup on readonly fs [ 473.699425][ T4530] loop3: detected capacity change from 0 to 512 [ 473.702569][ T4540] CPU: 1 PID: 4540 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 473.703785][ T4534] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, [ 473.705479][ T4540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 473.705487][ T4540] Call trace: [ 473.705490][ T4540] dump_backtrace+0x1c4/0x1f0 [ 473.705501][ T4540] show_stack+0x2c/0x3c [ 473.707786][ T4534] block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 473.710424][ T4540] dump_stack_lvl+0x104/0x16c [ 473.717157][ T4540] dump_stack+0x1c/0x58 [ 473.718266][ T4540] should_fail_ex+0x1e8/0x20c [ 473.719507][ T4540] should_fail+0x14/0x24 [ 473.720637][ T4540] should_fail_usercopy+0x20/0x30 [ 473.721994][ T4540] __arm64_sys_semctl+0x21c/0x3b4 [ 473.722525][ T4534] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.723339][ T4540] el0_svc_common+0x138/0x220 [ 473.727866][ T4540] do_el0_svc+0x48/0x104 [ 473.729003][ T4540] el0_svc+0x58/0x150 [ 473.730036][ T4540] el0t_64_sync_handler+0x84/0xf0 [ 473.731411][ T4540] el0t_64_sync+0x190/0x194 00:07:53 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = semget(0x1, 0x3, 0x88) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x1, 0x1800}, {0x3, 0xc69a, 0x800}, {0x1, 0xd99, 0x3800}], 0x3, &(0x7f0000000040)={0x77359400}) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semget(0x2, 0x3, 0x100) [ 473.739939][ T4534] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 473.756016][ T4534] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.761063][ T4530] EXT4-fs (loop3): orphan cleanup on readonly fs [ 473.766914][ T4530] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters 00:07:53 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) (fail_nth: 2) [ 473.784570][ T4534] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 473.805231][ T4534] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.812902][ T4551] FAULT_INJECTION: forcing a failure. [ 473.812902][ T4551] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:07:53 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget(0x1, 0x3, 0x88) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x1, 0x1800}, {0x3, 0xc69a, 0x800}, {0x1, 0xd99, 0x3800}], 0x3, &(0x7f0000000040)={0x77359400}) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semget(0x2, 0x3, 0x100) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semget(0x1, 0x3, 0x88) (async) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x1, 0x1800}, {0x3, 0xc69a, 0x800}, {0x1, 0xd99, 0x3800}], 0x3, &(0x7f0000000040)={0x77359400}) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semget(0x2, 0x3, 0x100) (async) [ 473.827013][ T4530] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 473.835305][ T4551] CPU: 0 PID: 4551 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 473.838161][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 473.840856][ T4551] Call trace: [ 473.841690][ T4551] dump_backtrace+0x1c4/0x1f0 [ 473.842986][ T4551] show_stack+0x2c/0x3c [ 473.844121][ T4551] dump_stack_lvl+0x104/0x16c [ 473.845371][ T4551] dump_stack+0x1c/0x58 [ 473.846527][ T4551] should_fail_ex+0x1e8/0x20c [ 473.847786][ T4551] should_fail_alloc_page+0x68/0x7c [ 473.849171][ T4551] prepare_alloc_pages+0x128/0x244 [ 473.850577][ T4551] __alloc_pages+0xa4/0x1fc [ 473.851774][ T4551] alloc_pages+0x374/0x484 [ 473.852935][ T4551] __pmd_alloc+0x4c/0x1b0 [ 473.854137][ T4551] handle_mm_fault+0xa30/0xb28 [ 473.855436][ T4551] do_page_fault+0x428/0x79c [ 473.855570][ T4530] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 473.856665][ T4551] do_translation_fault+0x78/0x194 [ 473.856677][ T4551] do_mem_abort+0x54/0x130 [ 473.856684][ T4551] el1_abort+0x3c/0x5c [ 473.856691][ T4551] el1h_64_sync_handler+0x60/0xac [ 473.856699][ T4551] el1h_64_sync+0x64/0x68 [ 473.856707][ T4551] __arch_copy_to_user+0x104/0x234 [ 473.856715][ T4551] el0_svc_common+0x138/0x220 [ 473.860037][ T4534] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 473.861121][ T4551] do_el0_svc+0x48/0x104 [ 473.861132][ T4551] el0_svc+0x58/0x150 [ 473.861140][ T4551] el0t_64_sync_handler+0x84/0xf0 [ 473.867983][ T4530] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 473.868462][ T4551] el0t_64_sync+0x190/0x194 [ 473.872177][ T4530] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 473.888613][ T4534] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 473.898825][ T4534] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 473.902129][ T4530] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 473.914211][ T4530] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 473.918650][ T4534] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 473.921696][ T4534] EXT4-fs (loop1): 1 truncate cleaned up [ 473.923963][ T4530] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 473.931492][ T4530] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 473.934900][ T4530] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 473.941645][ T4530] EXT4-fs (loop3): 1 truncate cleaned up [ 474.077387][ T4560] loop2: detected capacity change from 0 to 32768 [ 474.081838][ T4560] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 474.084154][ T4560] BTRFS info (device loop2): using free space tree [ 474.091280][ T4560] BTRFS info (device loop2): enabling ssd optimizations [ 474.093163][ T4560] BTRFS info (device loop2): auto enabling async discard 00:07:54 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 00:07:54 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:54 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0xff}, {0x0, 0x200, 0x1800}], 0x2, &(0x7f0000000080)={r0, r1+10000000}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xffffff73, 0x3ff, 0x4, 0x6, 0x55e4, 0xf5df}, {0xffff, 0x7fff, 0xffffffff, 0x100000001, 0x1, 0x8}], ['\x00']}) socket$can_raw(0x1d, 0x3, 0x1) 00:07:54 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) (fail_nth: 3) 00:07:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 59) [ 474.132667][ T4588] FAULT_INJECTION: forcing a failure. [ 474.132667][ T4588] name failslab, interval 1, probability 0, space 0, times 0 [ 474.143473][ T4583] FAULT_INJECTION: forcing a failure. [ 474.143473][ T4583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 474.151596][ T4585] loop1: detected capacity change from 0 to 512 [ 474.159438][ T4588] CPU: 1 PID: 4588 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 474.162254][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 474.164903][ T4588] Call trace: [ 474.165791][ T4588] dump_backtrace+0x1c4/0x1f0 [ 474.167051][ T4588] show_stack+0x2c/0x3c [ 474.168182][ T4588] dump_stack_lvl+0x104/0x16c [ 474.169456][ T4588] dump_stack+0x1c/0x58 [ 474.170622][ T4588] should_fail_ex+0x1e8/0x20c [ 474.171912][ T4588] __should_failslab+0x68/0x7c [ 474.173227][ T4588] should_failslab+0x10/0x28 [ 474.174454][ T4588] kmem_cache_alloc+0x8c/0x364 [ 474.175719][ T4588] pgtable_pmd_page_ctor+0x44/0x408 [ 474.177149][ T4588] __pmd_alloc+0x58/0x1b0 [ 474.178320][ T4588] handle_mm_fault+0xa30/0xb28 [ 474.179593][ T4588] do_page_fault+0x428/0x79c [ 474.180805][ T4588] do_translation_fault+0x78/0x194 [ 474.182228][ T4588] do_mem_abort+0x54/0x130 [ 474.183429][ T4588] el1_abort+0x3c/0x5c [ 474.184534][ T4588] el1h_64_sync_handler+0x60/0xac [ 474.185884][ T4588] el1h_64_sync+0x64/0x68 [ 474.187059][ T4588] __arch_copy_to_user+0x104/0x234 [ 474.188443][ T4588] el0_svc_common+0x138/0x220 [ 474.189709][ T4588] do_el0_svc+0x48/0x104 [ 474.190850][ T4588] el0_svc+0x58/0x150 [ 474.191921][ T4588] el0t_64_sync_handler+0x84/0xf0 [ 474.193285][ T4588] el0t_64_sync+0x190/0x194 [ 474.199303][ T4583] CPU: 0 PID: 4583 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 474.202159][ T4583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 474.204916][ T4583] Call trace: [ 474.205779][ T4583] dump_backtrace+0x1c4/0x1f0 [ 474.207038][ T4583] show_stack+0x2c/0x3c [ 474.208154][ T4583] dump_stack_lvl+0x104/0x16c [ 474.209438][ T4583] dump_stack+0x1c/0x58 [ 474.210598][ T4583] should_fail_ex+0x1e8/0x20c [ 474.211875][ T4583] should_fail_alloc_page+0x68/0x7c [ 474.213299][ T4583] prepare_alloc_pages+0x128/0x244 [ 474.214706][ T4583] __alloc_pages+0xa4/0x1fc [ 474.215904][ T4583] __folio_alloc+0x1c/0x48 [ 474.217074][ T4583] vma_alloc_folio+0x598/0x9a0 [ 474.218314][ T4583] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 474.219828][ T4583] shmem_get_folio_gfp+0xb54/0x1a00 [ 474.221205][ T4583] shmem_write_begin+0x8c/0x350 [ 474.222473][ T4583] generic_perform_write+0xf0/0x2cc [ 474.223889][ T4583] __generic_file_write_iter+0xd8/0x21c [ 474.225364][ T4583] generic_file_write_iter+0x6c/0x168 [ 474.226886][ T4583] vfs_write+0x2dc/0x46c [ 474.228073][ T4583] ksys_write+0xb4/0x160 [ 474.229260][ T4583] __arm64_sys_write+0x24/0x34 [ 474.230513][ T4583] el0_svc_common+0x138/0x220 [ 474.231808][ T4583] do_el0_svc+0x48/0x104 [ 474.232964][ T4583] el0_svc+0x58/0x150 [ 474.234048][ T4583] el0t_64_sync_handler+0x84/0xf0 [ 474.235425][ T4583] el0t_64_sync+0x190/0x194 00:07:54 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0xff}, {0x0, 0x200, 0x1800}], 0x2, &(0x7f0000000080)={r0, r1+10000000}) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xffffff73, 0x3ff, 0x4, 0x6, 0x55e4, 0xf5df}, {0xffff, 0x7fff, 0xffffffff, 0x100000001, 0x1, 0x8}], ['\x00']}) (async) socket$can_raw(0x1d, 0x3, 0x1) 00:07:54 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:54 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) (fail_nth: 4) 00:07:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3VFrW9cdAPD/lS3HSZzZYXvYAsvMkuGELZIdL4nZQ5bB2J4C27L3zNiyMZYtY8lJbMJw2AcYjNGW9qlPfSn0AxRKPkIpBNr30paW0ibNQ19aFUlXje1ItpPKVmP/fnCic67u1f+cG+vce+656AZwaA1HxLWI6ImI8xExmC7PpCnWG6m23qOHd6dqKYlq9cYXSSTpsub6Sbrt8XSz/oj4x18jelvELa+uzU8Wi4XltJyvLCzly6trF+YWJmcLs4XF8fGxyxNXJi5NjHaknQMRcfXPn7z03zf+cvWd393+8OZn5/6dpMtjQzs6obgh39gn2fq+aKrtj+VOBeuynrQ92W5XBACAXelJz91/XT//H4yelmfrAAAAwIus+seB+txNFQAAADiwMvV7YJNMLr0PYCAymVyucQ/vz+JYplgqV347U1pZnG7cKzsU2czMXLEwmt4rPBTZpFYeq+eflC9uKY/3RZyMiP8PHq2Xc1Ol4nS3L34AAADAIXF8y/j/8WBj/A8AAAAcMEPdrgAAAACw54z/AQAA4OAz/gcAAIAD7W/Xr9dStfn86+lbqyvzpVsXpgvl+dzCylRuqrS8lJstlWbrv9m3sNPnFUulpd/H4sqdfKVQruTLq2s3F0ori5Wbc5segQ0AAADso5O/uv9BEhHrfzhaTzV96XvZrtYM2GuZZ1n5472rB7D/erpdAaBrertdAaBrjPGBZIf32968827n6wIAAOyNkV+Y/4fDarv5//5XT5gfgAPM/D8cXi2O7w75cEhknQHAobf38//V6jNVCAAA6LiBekoyuXQucCAymVwu4kT9sQDZZGauWBiNiJ9ExPuD2SO18lh9y2THMQMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlF9Do+fZyMAAACgKyIynybp879GBs8ObL0+0Jd8PVh/jYjbr914+c5kpbI8Vlv+5ffLK6+kyy/ucLFhu4eNAwAAAB3THKc3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EmPHt6daqb9jPv5nyJiqFX83uivv/ZHNiKOfZVE74btkojo6UD89XsR8fNW8ZNatWIorcXW+JmIONrl+Mc7EB8Os/u1/udaq+9fJobrr62/f71p+qE29n+17mBj/Gb/19Mifl9EnNhljFMP3sq3jX8v4lRv6/6nGT9p0/+eaRvxyKbSv/65ttZuzerrESMtjz/Jplj5ysJSvry6dmFuYXK2MFtYHB8fuzxxZeLSxGh+Zq5YSP9tGeN/v3z72+3af6xN/KEd2n+2zWdu/bv45sGdhz9tZLOt4p87szn+cGzcA0/Hz6THvt+k+dr7I838eiO/0ek33zudZp86ZNXiT7dp/07//+fatH+r83//z0e7XBUA2Afl1bX5yWKxsLznmeG9DyEjs12mdtr6I6jGi5Hpds8EAAB02pOT/l2s3IkJdwAAAAAAAAAAAAAAAAAAAOAp+/FzYltjrnenqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/ouAAD//yiV0Mw=") (fail_nth: 60) [ 474.310373][ T4585] EXT4-fs (loop1): orphan cleanup on readonly fs [ 474.312623][ T4585] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters 00:07:54 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0xff}, {0x0, 0x200, 0x1800}], 0x2, &(0x7f0000000080)={r0, r1+10000000}) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xffffff73, 0x3ff, 0x4, 0x6, 0x55e4, 0xf5df}, {0xffff, 0x7fff, 0xffffffff, 0x100000001, 0x1, 0x8}], ['\x00']}) socket$can_raw(0x1d, 0x3, 0x1) [ 474.323008][ T4585] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 474.328886][ T4599] FAULT_INJECTION: forcing a failure. [ 474.328886][ T4599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.329069][ T4585] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 474.332467][ T4599] CPU: 1 PID: 4599 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 474.332480][ T4599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 474.332485][ T4599] Call trace: [ 474.332488][ T4599] dump_backtrace+0x1c4/0x1f0 [ 474.332499][ T4599] show_stack+0x2c/0x3c [ 474.336631][ T4585] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 474.338371][ T4599] dump_stack_lvl+0x104/0x16c [ 474.338383][ T4599] dump_stack+0x1c/0x58 [ 474.338390][ T4599] should_fail_ex+0x1e8/0x20c [ 474.341336][ T4585] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 474.341849][ T4599] should_fail+0x14/0x24 [ 474.343444][ T4585] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 474.344199][ T4599] should_fail_usercopy+0x20/0x30 [ 474.349412][ T4585] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 474.349698][ T4599] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 474.351261][ T4585] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 474.354032][ T4599] generic_perform_write+0x144/0x2cc [ 474.354047][ T4599] __generic_file_write_iter+0xd8/0x21c [ 474.354057][ T4599] generic_file_write_iter+0x6c/0x168 [ 474.355435][ T4585] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 474.358470][ T4599] vfs_write+0x2dc/0x46c 00:07:54 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 474.358485][ T4599] ksys_write+0xb4/0x160 [ 474.358495][ T4599] __arm64_sys_write+0x24/0x34 [ 474.358505][ T4599] el0_svc_common+0x138/0x220 [ 474.358513][ T4599] do_el0_svc+0x48/0x104 [ 474.358520][ T4599] el0_svc+0x58/0x150 [ 474.358527][ T4599] el0t_64_sync_handler+0x84/0xf0 [ 474.360118][ T4585] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 474.362156][ T4599] el0t_64_sync+0x190/0x194 [ 474.392159][ T4585] EXT4-fs (loop1): 1 truncate cleaned up [ 474.396843][ T4602] FAULT_INJECTION: forcing a failure. [ 474.396843][ T4602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 474.400531][ T4602] CPU: 0 PID: 4602 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 474.403203][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 474.405909][ T4602] Call trace: [ 474.406808][ T4602] dump_backtrace+0x1c4/0x1f0 [ 474.408092][ T4602] show_stack+0x2c/0x3c [ 474.409264][ T4602] dump_stack_lvl+0x104/0x16c [ 474.410517][ T4602] dump_stack+0x1c/0x58 [ 474.411613][ T4602] should_fail_ex+0x1e8/0x20c [ 474.412851][ T4602] should_fail_alloc_page+0x68/0x7c [ 474.414265][ T4602] prepare_alloc_pages+0x128/0x244 [ 474.415658][ T4602] __alloc_pages+0xa4/0x1fc [ 474.416884][ T4602] alloc_pages+0x374/0x484 [ 474.418069][ T4602] __pte_alloc+0x40/0x1ec [ 474.419244][ T4602] do_anonymous_page+0x514/0x880 [ 474.420528][ T4602] handle_mm_fault+0x838/0xb28 [ 474.421845][ T4602] do_page_fault+0x428/0x79c [ 474.423117][ T4602] do_translation_fault+0x78/0x194 [ 474.424480][ T4602] do_mem_abort+0x54/0x130 [ 474.425692][ T4602] el1_abort+0x3c/0x5c [ 474.426759][ T4602] el1h_64_sync_handler+0x60/0xac [ 474.428173][ T4602] el1h_64_sync+0x64/0x68 [ 474.429331][ T4602] __arch_copy_to_user+0x104/0x234 [ 474.430759][ T4602] el0_svc_common+0x138/0x220 [ 474.432023][ T4602] do_el0_svc+0x48/0x104 [ 474.433152][ T4602] el0_svc+0x58/0x150 [ 474.434215][ T4602] el0t_64_sync_handler+0x84/0xf0 [ 474.435627][ T4602] el0t_64_sync+0x190/0x194 [ 474.442612][ T4599] loop3: detected capacity change from 0 to 512 [ 474.547906][ T4599] EXT4-fs (loop3): orphan cleanup on readonly fs [ 474.550288][ T4599] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 474.554622][ T4599] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 474.562692][ T4599] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 474.566917][ T4599] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 474.570625][ T4599] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 474.574100][ T4599] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 474.578151][ T4599] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 474.583313][ T4599] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 474.587025][ T4599] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 474.590450][ T4599] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 474.593253][ T4599] EXT4-fs (loop3): 1 truncate cleaned up [ 474.655043][ T4608] loop2: detected capacity change from 0 to 32768 [ 474.659816][ T4608] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 474.662214][ T4608] BTRFS info (device loop2): using free space tree [ 474.669523][ T4608] BTRFS info (device loop2): enabling ssd optimizations [ 474.671449][ T4608] BTRFS info (device loop2): auto enabling async discard 00:07:54 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) (fail_nth: 5) [ 474.695414][ T4633] FAULT_INJECTION: forcing a failure. [ 474.695414][ T4633] name failslab, interval 1, probability 0, space 0, times 0 00:07:54 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x52401, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) 00:07:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:54 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:54 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 00:07:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3VFrW9cdAPD/lS3HSZzZYXvYAsvMkuGELZIdL4nZQ5bB2J4C27L3zNiyMZYtY8lJbMJw2AcYjNGW9qlPfSn0AxRKPkIpBNr30paW0ibNQ19aFUlXje1ItpPKVmP/fnCic67u1f+cG+vce+656AZwaA1HxLWI6ImI8xExmC7PpCnWG6m23qOHd6dqKYlq9cYXSSTpsub6Sbrt8XSz/oj4x18jelvELa+uzU8Wi4XltJyvLCzly6trF+YWJmcLs4XF8fGxyxNXJi5NjHaknQMRcfXPn7z03zf+cvWd393+8OZn5/6dpMtjQzs6obgh39gn2fq+aKrtj+VOBeuynrQ92W5XBACAXelJz91/XT//H4yelmfrAAAAwIus+seB+txNFQAAADiwMvV7YJNMLr0PYCAymVyucQ/vz+JYplgqV347U1pZnG7cKzsU2czMXLEwmt4rPBTZpFYeq+eflC9uKY/3RZyMiP8PHq2Xc1Ol4nS3L34AAADAIXF8y/j/8WBj/A8AAAAcMEPdrgAAAACw54z/AQAA4OAz/gcAAIAD7W/Xr9dStfn86+lbqyvzpVsXpgvl+dzCylRuqrS8lJstlWbrv9m3sNPnFUulpd/H4sqdfKVQruTLq2s3F0ori5Wbc5segQ0AAADso5O/uv9BEhHrfzhaTzV96XvZrtYM2GuZZ1n5472rB7D/erpdAaBrertdAaBrjPGBZIf32968827n6wIAAOyNkV+Y/4fDarv5//5XT5gfgAPM/D8cXi2O7w75cEhknQHAobf38//V6jNVCAAA6LiBekoyuXQucCAymVwu4kT9sQDZZGauWBiNiJ9ExPuD2SO18lh9y2THMQMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlF9Do+fZyMAAACgKyIynybp879GBs8ObL0+0Jd8PVh/jYjbr914+c5kpbI8Vlv+5ffLK6+kyy/ucLFhu4eNAwAAAB3THKc3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EmPHt6daqb9jPv5nyJiqFX83uivv/ZHNiKOfZVE74btkojo6UD89XsR8fNW8ZNatWIorcXW+JmIONrl+Mc7EB8Os/u1/udaq+9fJobrr62/f71p+qE29n+17mBj/Gb/19Mifl9EnNhljFMP3sq3jX8v4lRv6/6nGT9p0/+eaRvxyKbSv/65ttZuzerrESMtjz/Jplj5ysJSvry6dmFuYXK2MFtYHB8fuzxxZeLSxGh+Zq5YSP9tGeN/v3z72+3af6xN/KEd2n+2zWdu/bv45sGdhz9tZLOt4p87szn+cGzcA0/Hz6THvt+k+dr7I838eiO/0ek33zudZp86ZNXiT7dp/07//+fatH+r83//z0e7XBUA2Afl1bX5yWKxsLznmeG9DyEjs12mdtr6I6jGi5Hpds8EAAB02pOT/l2s3IkJdwAAAAAAAAAAAAAAAAAAAOAp+/FzYltjrnenqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/ouAAD//yiV0Mw=") (fail_nth: 61) [ 474.702461][ T4631] loop1: detected capacity change from 0 to 512 [ 474.707239][ T4633] CPU: 1 PID: 4633 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 474.710204][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 474.713018][ T4633] Call trace: [ 474.713920][ T4633] dump_backtrace+0x1c4/0x1f0 [ 474.715237][ T4633] show_stack+0x2c/0x3c [ 474.715666][ T4635] FAULT_INJECTION: forcing a failure. [ 474.715666][ T4635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 474.716424][ T4633] dump_stack_lvl+0x104/0x16c [ 474.716437][ T4633] dump_stack+0x1c/0x58 [ 474.716444][ T4633] should_fail_ex+0x1e8/0x20c [ 474.716460][ T4633] __should_failslab+0x68/0x7c [ 474.716473][ T4633] should_failslab+0x10/0x28 [ 474.716484][ T4633] kmem_cache_alloc+0x8c/0x364 [ 474.716493][ T4633] pgtable_pte_page_ctor+0x40/0x1a0 [ 474.716505][ T4633] __pte_alloc+0x4c/0x1ec [ 474.716515][ T4633] do_anonymous_page+0x514/0x880 [ 474.716522][ T4633] handle_mm_fault+0x838/0xb28 [ 474.716533][ T4633] do_page_fault+0x428/0x79c [ 474.716541][ T4633] do_translation_fault+0x78/0x194 [ 474.716548][ T4633] do_mem_abort+0x54/0x130 [ 474.716555][ T4633] el1_abort+0x3c/0x5c [ 474.716562][ T4633] el1h_64_sync_handler+0x60/0xac [ 474.739449][ T4633] el1h_64_sync+0x64/0x68 [ 474.740650][ T4633] __arch_copy_to_user+0x104/0x234 [ 474.742086][ T4633] el0_svc_common+0x138/0x220 [ 474.743416][ T4633] do_el0_svc+0x48/0x104 [ 474.744577][ T4633] el0_svc+0x58/0x150 [ 474.745709][ T4633] el0t_64_sync_handler+0x84/0xf0 [ 474.747152][ T4633] el0t_64_sync+0x190/0x194 [ 474.748468][ T4635] CPU: 0 PID: 4635 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 474.751319][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 474.754063][ T4635] Call trace: [ 474.754947][ T4635] dump_backtrace+0x1c4/0x1f0 [ 474.756260][ T4635] show_stack+0x2c/0x3c [ 474.757391][ T4635] dump_stack_lvl+0x104/0x16c [ 474.758674][ T4635] dump_stack+0x1c/0x58 [ 474.759833][ T4635] should_fail_ex+0x1e8/0x20c [ 474.761114][ T4635] should_fail_alloc_page+0x68/0x7c [ 474.762520][ T4635] prepare_alloc_pages+0x128/0x244 [ 474.763944][ T4635] __alloc_pages+0xa4/0x1fc [ 474.765187][ T4635] __folio_alloc+0x1c/0x48 [ 474.766371][ T4635] vma_alloc_folio+0x598/0x9a0 [ 474.767733][ T4635] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 474.769288][ T4635] shmem_get_folio_gfp+0xb54/0x1a00 [ 474.770723][ T4635] shmem_write_begin+0x8c/0x350 [ 474.772057][ T4635] generic_perform_write+0xf0/0x2cc [ 474.773468][ T4635] __generic_file_write_iter+0xd8/0x21c [ 474.774964][ T4635] generic_file_write_iter+0x6c/0x168 [ 474.776422][ T4635] vfs_write+0x2dc/0x46c [ 474.777554][ T4635] ksys_write+0xb4/0x160 [ 474.778699][ T4635] __arm64_sys_write+0x24/0x34 [ 474.780072][ T4635] el0_svc_common+0x138/0x220 [ 474.781336][ T4635] do_el0_svc+0x48/0x104 [ 474.782488][ T4635] el0_svc+0x58/0x150 [ 474.783541][ T4635] el0t_64_sync_handler+0x84/0xf0 [ 474.784914][ T4635] el0t_64_sync+0x190/0x194 00:07:54 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x52401, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x52401, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) (async) 00:07:54 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:54 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) (fail_nth: 6) 00:07:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 62) 00:07:54 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 474.874697][ T4641] FAULT_INJECTION: forcing a failure. [ 474.874697][ T4641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.878588][ T4641] CPU: 0 PID: 4641 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 474.881341][ T4641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 474.883970][ T4641] Call trace: [ 474.884802][ T4641] dump_backtrace+0x1c4/0x1f0 [ 474.886107][ T4641] show_stack+0x2c/0x3c [ 474.887219][ T4641] dump_stack_lvl+0x104/0x16c [ 474.888473][ T4641] dump_stack+0x1c/0x58 [ 474.889601][ T4641] should_fail_ex+0x1e8/0x20c [ 474.890857][ T4641] should_fail+0x14/0x24 [ 474.892052][ T4641] should_fail_usercopy+0x20/0x30 [ 474.893463][ T4641] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 474.895032][ T4641] generic_perform_write+0x144/0x2cc [ 474.896460][ T4641] __generic_file_write_iter+0xd8/0x21c [ 474.897983][ T4641] generic_file_write_iter+0x6c/0x168 [ 474.899465][ T4641] vfs_write+0x2dc/0x46c [ 474.900615][ T4641] ksys_write+0xb4/0x160 [ 474.901763][ T4641] __arm64_sys_write+0x24/0x34 [ 474.903033][ T4641] el0_svc_common+0x138/0x220 [ 474.904351][ T4641] do_el0_svc+0x48/0x104 [ 474.905495][ T4641] el0_svc+0x58/0x150 [ 474.906578][ T4641] el0t_64_sync_handler+0x84/0xf0 [ 474.907989][ T4641] el0t_64_sync+0x190/0x194 00:07:54 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x52401, 0x0) (rerun: 64) semtimedop(0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) [ 474.918762][ T4641] loop3: detected capacity change from 0 to 512 [ 474.922640][ T4631] EXT4-fs (loop1): orphan cleanup on readonly fs [ 474.924995][ T4631] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 474.929922][ T4631] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 474.937167][ T4655] FAULT_INJECTION: forcing a failure. [ 474.937167][ T4655] name failslab, interval 1, probability 0, space 0, times 0 [ 474.940699][ T4655] CPU: 0 PID: 4655 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 474.943446][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 474.946182][ T4655] Call trace: [ 474.947068][ T4655] dump_backtrace+0x1c4/0x1f0 [ 474.948312][ T4655] show_stack+0x2c/0x3c [ 474.949456][ T4655] dump_stack_lvl+0x104/0x16c [ 474.950695][ T4655] dump_stack+0x1c/0x58 [ 474.951803][ T4655] should_fail_ex+0x1e8/0x20c [ 474.953077][ T4655] __should_failslab+0x68/0x7c [ 474.954367][ T4655] should_failslab+0x10/0x28 [ 474.955635][ T4655] kmem_cache_alloc+0x8c/0x364 [ 474.956917][ T4655] __anon_vma_prepare+0x48/0x1ac [ 474.958286][ T4655] do_anonymous_page+0x558/0x880 [ 474.959650][ T4655] handle_mm_fault+0x838/0xb28 [ 474.960940][ T4655] do_page_fault+0x428/0x79c [ 474.962209][ T4655] do_translation_fault+0x78/0x194 [ 474.963598][ T4655] do_mem_abort+0x54/0x130 [ 474.964821][ T4655] el1_abort+0x3c/0x5c [ 474.965919][ T4655] el1h_64_sync_handler+0x60/0xac [ 474.967295][ T4655] el1h_64_sync+0x64/0x68 [ 474.968480][ T4655] __arch_copy_to_user+0x104/0x234 [ 474.969864][ T4655] el0_svc_common+0x138/0x220 [ 474.971145][ T4655] do_el0_svc+0x48/0x104 [ 474.972302][ T4655] el0_svc+0x58/0x150 [ 474.973382][ T4655] el0t_64_sync_handler+0x84/0xf0 [ 474.974777][ T4655] el0t_64_sync+0x190/0x194 [ 474.984404][ T4641] EXT4-fs (loop3): orphan cleanup on readonly fs [ 474.986625][ T4641] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 474.990953][ T4641] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents 00:07:54 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 475.022229][ T4641] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 475.042928][ T4631] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 475.054818][ T4631] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:55 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) (fail_nth: 7) [ 475.074761][ T4631] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 475.079772][ T4663] FAULT_INJECTION: forcing a failure. [ 475.079772][ T4663] name failslab, interval 1, probability 0, space 0, times 0 [ 475.083490][ T4641] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 475.095784][ T4631] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 475.099444][ T4663] CPU: 0 PID: 4663 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 475.102200][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 475.104878][ T4663] Call trace: [ 475.105757][ T4663] dump_backtrace+0x1c4/0x1f0 [ 475.107023][ T4663] show_stack+0x2c/0x3c [ 475.108175][ T4663] dump_stack_lvl+0x104/0x16c [ 475.109489][ T4663] dump_stack+0x1c/0x58 [ 475.110606][ T4663] should_fail_ex+0x1e8/0x20c [ 475.111857][ T4663] __should_failslab+0x68/0x7c [ 475.113186][ T4663] should_failslab+0x10/0x28 [ 475.114458][ T4663] kmem_cache_alloc+0x8c/0x364 [ 475.115810][ T4663] __anon_vma_prepare+0x88/0x1ac [ 475.117169][ T4663] do_anonymous_page+0x558/0x880 [ 475.118548][ T4663] handle_mm_fault+0x838/0xb28 [ 475.119896][ T4663] do_page_fault+0x428/0x79c [ 475.121107][ T4663] do_translation_fault+0x78/0x194 [ 475.122549][ T4663] do_mem_abort+0x54/0x130 [ 475.123767][ T4663] el1_abort+0x3c/0x5c [ 475.124867][ T4663] el1h_64_sync_handler+0x60/0xac [ 475.126188][ T4663] el1h_64_sync+0x64/0x68 [ 475.127322][ T4663] __arch_copy_to_user+0x104/0x234 [ 475.128686][ T4663] el0_svc_common+0x138/0x220 [ 475.129964][ T4663] do_el0_svc+0x48/0x104 [ 475.131102][ T4663] el0_svc+0x58/0x150 [ 475.132202][ T4663] el0t_64_sync_handler+0x84/0xf0 [ 475.133567][ T4663] el0t_64_sync+0x190/0x194 [ 475.147681][ T4641] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 475.155061][ T4631] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 475.157524][ T4641] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 475.166486][ T4641] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 475.168928][ T4631] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 475.173437][ T4631] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 475.187470][ T4641] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 475.191178][ T4631] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 475.201924][ T4641] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 475.205457][ T4631] EXT4-fs (loop1): 1 truncate cleaned up [ 475.207018][ T4641] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 475.210014][ T4641] EXT4-fs (loop3): 1 truncate cleaned up 00:07:55 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7c030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:55 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/4088, 0xff8}, {&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/116, 0x74}], 0x6, &(0x7f0000000480)=""/36, 0x24}, 0xec}, {{&(0x7f0000001500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003f80)=""/7, 0x7}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/53, 0x35}, {&(0x7f0000002600)=""/213, 0xd5}, {&(0x7f0000002700)=""/34, 0x22}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/169, 0xa9}, {&(0x7f0000003800)=""/173, 0xad}], 0x8, &(0x7f00000055c0)=""/239, 0xef}, 0x80000001}, {{&(0x7f0000003a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003ac0)=""/82, 0x52}, {&(0x7f0000003b40)=""/219, 0xdb}], 0x2, &(0x7f0000003c80)=""/167, 0xa7}, 0x1f}, {{&(0x7f0000003d40)=@rc={0x1f, @none}, 0x80, &(0x7f0000003e00), 0x0, &(0x7f0000003e40)=""/185, 0xb9}, 0x30}, {{0x0, 0x0, &(0x7f0000007780)=[{&(0x7f0000003f00)=""/15, 0xf}, {&(0x7f0000003f40)=""/16, 0x10}, {&(0x7f0000007900)=""/248, 0xf8}, {&(0x7f0000004080)=""/133, 0x85}, {&(0x7f0000004140)=""/113, 0x71}, {&(0x7f0000007800)=""/195, 0xc3}, {&(0x7f0000006380)=""/9, 0x9}], 0x7, &(0x7f0000004300)=""/31, 0x1f}, 0x1}, {{&(0x7f0000004340)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000005500)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/43, 0x2b}, {&(0x7f0000005400)=""/67, 0x43}, {&(0x7f0000005480)=""/89, 0x59}], 0x4}, 0x400}, {{&(0x7f0000005540)=@ax25={{0x3, @rose}, [@netrom, @null, @bcast, @null, @netrom, @remote, @rose, @netrom]}, 0x80, &(0x7f0000005880), 0x0, &(0x7f00000058c0)=""/155, 0x9b}}, {{&(0x7f0000005980)=@ax25={{0x3, @netrom}, [@rose, @default, @null, @null, @bcast, @null, @default]}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005a00)=""/218, 0xda}, {&(0x7f0000005b00)=""/158, 0x9e}, {&(0x7f0000005bc0)=""/147, 0x93}, {&(0x7f0000003940)=""/112, 0x70}, {&(0x7f0000005d00)=""/213, 0xd5}], 0x5, &(0x7f0000005e80)=""/211, 0xd3}, 0x6}, {{&(0x7f0000005f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000063c0)=[{&(0x7f0000006000)=""/161, 0xa1}, {&(0x7f00000060c0)=""/150, 0x96}, {&(0x7f0000006180)=""/202, 0xca}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/174, 0xae}, {&(0x7f00000041c0)=""/50, 0x32}], 0x6, &(0x7f0000006440)=""/88, 0x58}, 0x607}], 0x9, 0xc0010022, &(0x7f0000003c40)={0x77359400}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000006740)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) 00:07:55 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) 00:07:55 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) (fail_nth: 8) 00:07:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 63) 00:07:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:55 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/4088, 0xff8}, {&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/116, 0x74}], 0x6, &(0x7f0000000480)=""/36, 0x24}, 0xec}, {{&(0x7f0000001500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003f80)=""/7, 0x7}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/53, 0x35}, {&(0x7f0000002600)=""/213, 0xd5}, {&(0x7f0000002700)=""/34, 0x22}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/169, 0xa9}, {&(0x7f0000003800)=""/173, 0xad}], 0x8, &(0x7f00000055c0)=""/239, 0xef}, 0x80000001}, {{&(0x7f0000003a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003ac0)=""/82, 0x52}, {&(0x7f0000003b40)=""/219, 0xdb}], 0x2, &(0x7f0000003c80)=""/167, 0xa7}, 0x1f}, {{&(0x7f0000003d40)=@rc={0x1f, @none}, 0x80, &(0x7f0000003e00), 0x0, &(0x7f0000003e40)=""/185, 0xb9}, 0x30}, {{0x0, 0x0, &(0x7f0000007780)=[{&(0x7f0000003f00)=""/15, 0xf}, {&(0x7f0000003f40)=""/16, 0x10}, {&(0x7f0000007900)=""/248, 0xf8}, {&(0x7f0000004080)=""/133, 0x85}, {&(0x7f0000004140)=""/113, 0x71}, {&(0x7f0000007800)=""/195, 0xc3}, {&(0x7f0000006380)=""/9, 0x9}], 0x7, &(0x7f0000004300)=""/31, 0x1f}, 0x1}, {{&(0x7f0000004340)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000005500)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/43, 0x2b}, {&(0x7f0000005400)=""/67, 0x43}, {&(0x7f0000005480)=""/89, 0x59}], 0x4}, 0x400}, {{&(0x7f0000005540)=@ax25={{0x3, @rose}, [@netrom, @null, @bcast, @null, @netrom, @remote, @rose, @netrom]}, 0x80, &(0x7f0000005880), 0x0, &(0x7f00000058c0)=""/155, 0x9b}}, {{&(0x7f0000005980)=@ax25={{0x3, @netrom}, [@rose, @default, @null, @null, @bcast, @null, @default]}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005a00)=""/218, 0xda}, {&(0x7f0000005b00)=""/158, 0x9e}, {&(0x7f0000005bc0)=""/147, 0x93}, {&(0x7f0000003940)=""/112, 0x70}, {&(0x7f0000005d00)=""/213, 0xd5}], 0x5, &(0x7f0000005e80)=""/211, 0xd3}, 0x6}, {{&(0x7f0000005f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000063c0)=[{&(0x7f0000006000)=""/161, 0xa1}, {&(0x7f00000060c0)=""/150, 0x96}, {&(0x7f0000006180)=""/202, 0xca}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/174, 0xae}, {&(0x7f00000041c0)=""/50, 0x32}], 0x6, &(0x7f0000006440)=""/88, 0x58}, 0x607}], 0x9, 0xc0010022, &(0x7f0000003c40)={0x77359400}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000006740)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) 00:07:55 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 475.363114][ T4675] FAULT_INJECTION: forcing a failure. [ 475.363114][ T4675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 475.372641][ T4677] loop1: detected capacity change from 0 to 512 [ 475.380913][ T4676] FAULT_INJECTION: forcing a failure. [ 475.380913][ T4676] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 475.383824][ T4675] CPU: 0 PID: 4675 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 475.387434][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 475.390185][ T4675] Call trace: [ 475.391033][ T4675] dump_backtrace+0x1c4/0x1f0 [ 475.392294][ T4675] show_stack+0x2c/0x3c [ 475.393405][ T4675] dump_stack_lvl+0x104/0x16c [ 475.394670][ T4675] dump_stack+0x1c/0x58 [ 475.395817][ T4675] should_fail_ex+0x1e8/0x20c [ 475.397130][ T4675] should_fail_alloc_page+0x68/0x7c [ 475.398592][ T4675] prepare_alloc_pages+0x128/0x244 [ 475.400023][ T4675] __alloc_pages+0xa4/0x1fc [ 475.401334][ T4675] __folio_alloc+0x1c/0x48 [ 475.402565][ T4675] vma_alloc_folio+0x598/0x9a0 [ 475.403938][ T4675] alloc_zeroed_user_highpage_movable+0x58/0x6c [ 475.405684][ T4675] do_anonymous_page+0x18c/0x880 [ 475.407059][ T4675] handle_mm_fault+0x838/0xb28 [ 475.408387][ T4675] do_page_fault+0x428/0x79c [ 475.409679][ T4675] do_translation_fault+0x78/0x194 [ 475.411106][ T4675] do_mem_abort+0x54/0x130 [ 475.412345][ T4675] el1_abort+0x3c/0x5c [ 475.413471][ T4675] el1h_64_sync_handler+0x60/0xac [ 475.414851][ T4675] el1h_64_sync+0x64/0x68 [ 475.416070][ T4675] __arch_copy_to_user+0x104/0x234 [ 475.417467][ T4675] el0_svc_common+0x138/0x220 [ 475.418770][ T4675] do_el0_svc+0x48/0x104 [ 475.419926][ T4675] el0_svc+0x58/0x150 [ 475.421035][ T4675] el0t_64_sync_handler+0x84/0xf0 [ 475.422446][ T4675] el0t_64_sync+0x190/0x194 00:07:55 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/4088, 0xff8}, {&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/116, 0x74}], 0x6, &(0x7f0000000480)=""/36, 0x24}, 0xec}, {{&(0x7f0000001500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003f80)=""/7, 0x7}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/53, 0x35}, {&(0x7f0000002600)=""/213, 0xd5}, {&(0x7f0000002700)=""/34, 0x22}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/169, 0xa9}, {&(0x7f0000003800)=""/173, 0xad}], 0x8, &(0x7f00000055c0)=""/239, 0xef}, 0x80000001}, {{&(0x7f0000003a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003ac0)=""/82, 0x52}, {&(0x7f0000003b40)=""/219, 0xdb}], 0x2, &(0x7f0000003c80)=""/167, 0xa7}, 0x1f}, {{&(0x7f0000003d40)=@rc={0x1f, @none}, 0x80, &(0x7f0000003e00), 0x0, &(0x7f0000003e40)=""/185, 0xb9}, 0x30}, {{0x0, 0x0, &(0x7f0000007780)=[{&(0x7f0000003f00)=""/15, 0xf}, {&(0x7f0000003f40)=""/16, 0x10}, {&(0x7f0000007900)=""/248, 0xf8}, {&(0x7f0000004080)=""/133, 0x85}, {&(0x7f0000004140)=""/113, 0x71}, {&(0x7f0000007800)=""/195, 0xc3}, {&(0x7f0000006380)=""/9, 0x9}], 0x7, &(0x7f0000004300)=""/31, 0x1f}, 0x1}, {{&(0x7f0000004340)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000005500)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/43, 0x2b}, {&(0x7f0000005400)=""/67, 0x43}, {&(0x7f0000005480)=""/89, 0x59}], 0x4}, 0x400}, {{&(0x7f0000005540)=@ax25={{0x3, @rose}, [@netrom, @null, @bcast, @null, @netrom, @remote, @rose, @netrom]}, 0x80, &(0x7f0000005880), 0x0, &(0x7f00000058c0)=""/155, 0x9b}}, {{&(0x7f0000005980)=@ax25={{0x3, @netrom}, [@rose, @default, @null, @null, @bcast, @null, @default]}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005a00)=""/218, 0xda}, {&(0x7f0000005b00)=""/158, 0x9e}, {&(0x7f0000005bc0)=""/147, 0x93}, {&(0x7f0000003940)=""/112, 0x70}, {&(0x7f0000005d00)=""/213, 0xd5}], 0x5, &(0x7f0000005e80)=""/211, 0xd3}, 0x6}, {{&(0x7f0000005f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000063c0)=[{&(0x7f0000006000)=""/161, 0xa1}, {&(0x7f00000060c0)=""/150, 0x96}, {&(0x7f0000006180)=""/202, 0xca}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/174, 0xae}, {&(0x7f00000041c0)=""/50, 0x32}], 0x6, &(0x7f0000006440)=""/88, 0x58}, 0x607}], 0x9, 0xc0010022, &(0x7f0000003c40)={0x77359400}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000006740)=""/4096) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/4088, 0xff8}, {&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/116, 0x74}], 0x6, &(0x7f0000000480)=""/36, 0x24}, 0xec}, {{&(0x7f0000001500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003f80)=""/7, 0x7}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/53, 0x35}, {&(0x7f0000002600)=""/213, 0xd5}, {&(0x7f0000002700)=""/34, 0x22}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/169, 0xa9}, {&(0x7f0000003800)=""/173, 0xad}], 0x8, &(0x7f00000055c0)=""/239, 0xef}, 0x80000001}, {{&(0x7f0000003a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003ac0)=""/82, 0x52}, {&(0x7f0000003b40)=""/219, 0xdb}], 0x2, &(0x7f0000003c80)=""/167, 0xa7}, 0x1f}, {{&(0x7f0000003d40)=@rc={0x1f, @none}, 0x80, &(0x7f0000003e00), 0x0, &(0x7f0000003e40)=""/185, 0xb9}, 0x30}, {{0x0, 0x0, &(0x7f0000007780)=[{&(0x7f0000003f00)=""/15, 0xf}, {&(0x7f0000003f40)=""/16, 0x10}, {&(0x7f0000007900)=""/248, 0xf8}, {&(0x7f0000004080)=""/133, 0x85}, {&(0x7f0000004140)=""/113, 0x71}, {&(0x7f0000007800)=""/195, 0xc3}, {&(0x7f0000006380)=""/9, 0x9}], 0x7, &(0x7f0000004300)=""/31, 0x1f}, 0x1}, {{&(0x7f0000004340)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000005500)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/43, 0x2b}, {&(0x7f0000005400)=""/67, 0x43}, {&(0x7f0000005480)=""/89, 0x59}], 0x4}, 0x400}, {{&(0x7f0000005540)=@ax25={{0x3, @rose}, [@netrom, @null, @bcast, @null, @netrom, @remote, @rose, @netrom]}, 0x80, &(0x7f0000005880), 0x0, &(0x7f00000058c0)=""/155, 0x9b}}, {{&(0x7f0000005980)=@ax25={{0x3, @netrom}, [@rose, @default, @null, @null, @bcast, @null, @default]}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005a00)=""/218, 0xda}, {&(0x7f0000005b00)=""/158, 0x9e}, {&(0x7f0000005bc0)=""/147, 0x93}, {&(0x7f0000003940)=""/112, 0x70}, {&(0x7f0000005d00)=""/213, 0xd5}], 0x5, &(0x7f0000005e80)=""/211, 0xd3}, 0x6}, {{&(0x7f0000005f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000063c0)=[{&(0x7f0000006000)=""/161, 0xa1}, {&(0x7f00000060c0)=""/150, 0x96}, {&(0x7f0000006180)=""/202, 0xca}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/174, 0xae}, {&(0x7f00000041c0)=""/50, 0x32}], 0x6, &(0x7f0000006440)=""/88, 0x58}, 0x607}], 0x9, 0xc0010022, &(0x7f0000003c40)={0x77359400}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semget$private(0x0, 0x4, 0x0) (async) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000006740)=""/4096) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) [ 475.425655][ T4676] CPU: 1 PID: 4676 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 475.428546][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 475.431304][ T4676] Call trace: [ 475.432176][ T4676] dump_backtrace+0x1c4/0x1f0 [ 475.433436][ T4676] show_stack+0x2c/0x3c [ 475.434583][ T4676] dump_stack_lvl+0x104/0x16c [ 475.435848][ T4676] dump_stack+0x1c/0x58 [ 475.436962][ T4676] should_fail_ex+0x1e8/0x20c [ 475.438252][ T4676] should_fail_alloc_page+0x68/0x7c [ 475.439691][ T4676] prepare_alloc_pages+0x128/0x244 [ 475.441071][ T4676] __alloc_pages+0xa4/0x1fc [ 475.442288][ T4676] __folio_alloc+0x1c/0x48 [ 475.443480][ T4676] vma_alloc_folio+0x598/0x9a0 [ 475.444773][ T4676] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 475.446312][ T4676] shmem_get_folio_gfp+0xb54/0x1a00 [ 475.447767][ T4676] shmem_write_begin+0x8c/0x350 [ 475.449098][ T4676] generic_perform_write+0xf0/0x2cc [ 475.450495][ T4676] __generic_file_write_iter+0xd8/0x21c [ 475.452008][ T4676] generic_file_write_iter+0x6c/0x168 [ 475.453487][ T4676] vfs_write+0x2dc/0x46c [ 475.454639][ T4676] ksys_write+0xb4/0x160 [ 475.455810][ T4676] __arm64_sys_write+0x24/0x34 [ 475.457093][ T4676] el0_svc_common+0x138/0x220 [ 475.458375][ T4676] do_el0_svc+0x48/0x104 [ 475.459542][ T4676] el0_svc+0x58/0x150 [ 475.460597][ T4676] el0t_64_sync_handler+0x84/0xf0 [ 475.461966][ T4676] el0t_64_sync+0x190/0x194 00:07:55 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0x4}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000180)={0x1000, 0x18, [0x401, 0x0, 0x8, 0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0]}) getsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) semtimedop(0x0, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x1000}], 0x1, 0x0) [ 475.492645][ T4677] EXT4-fs (loop1): orphan cleanup on readonly fs [ 475.494952][ T4677] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 475.499766][ T4677] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:55 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 475.519319][ T4677] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:55 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) (fail_nth: 9) [ 475.532906][ T4677] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 64) [ 475.568830][ T4677] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 475.568941][ T4694] FAULT_INJECTION: forcing a failure. [ 475.568941][ T4694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.583365][ T4677] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:55 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0x4}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000180)={0x1000, 0x18, [0x401, 0x0, 0x8, 0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0]}) getsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) semtimedop(0x0, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x1000}], 0x1, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0x4}}, './file0\x00'}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) (async) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000180)={0x1000, 0x18, [0x401, 0x0, 0x8, 0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (async) getsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x1000}], 0x1, 0x0) (async) [ 475.600389][ T4677] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 475.606381][ T4677] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 475.610680][ T4677] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 475.614246][ T4677] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 475.616953][ T4694] CPU: 1 PID: 4694 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 475.619885][ T4694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 475.622087][ T4677] EXT4-fs (loop1): 1 truncate cleaned up [ 475.622689][ T4694] Call trace: [ 475.622694][ T4694] dump_backtrace+0x1c4/0x1f0 [ 475.622707][ T4694] show_stack+0x2c/0x3c [ 475.622714][ T4694] dump_stack_lvl+0x104/0x16c [ 475.622723][ T4694] dump_stack+0x1c/0x58 [ 475.629964][ T4694] should_fail_ex+0x1e8/0x20c [ 475.631273][ T4694] should_fail+0x14/0x24 [ 475.632406][ T4694] should_fail_usercopy+0x20/0x30 [ 475.633215][ T4698] FAULT_INJECTION: forcing a failure. [ 475.633215][ T4698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.633778][ T4694] simple_read_from_buffer+0xc0/0x1cc [ 475.638706][ T4694] proc_fail_nth_read+0xf4/0x164 [ 475.640043][ T4694] vfs_read+0x19c/0x448 [ 475.641190][ T4694] ksys_read+0xb4/0x160 [ 475.642314][ T4694] __arm64_sys_read+0x24/0x34 [ 475.643614][ T4694] el0_svc_common+0x138/0x220 [ 475.644880][ T4694] do_el0_svc+0x48/0x104 [ 475.646058][ T4694] el0_svc+0x58/0x150 [ 475.647169][ T4694] el0t_64_sync_handler+0x84/0xf0 [ 475.648541][ T4694] el0t_64_sync+0x190/0x194 [ 475.649794][ T4698] CPU: 0 PID: 4698 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 475.652525][ T4698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 475.655150][ T4698] Call trace: [ 475.656010][ T4698] dump_backtrace+0x1c4/0x1f0 [ 475.657249][ T4698] show_stack+0x2c/0x3c [ 475.658344][ T4698] dump_stack_lvl+0x104/0x16c [ 475.659632][ T4698] dump_stack+0x1c/0x58 [ 475.660782][ T4698] should_fail_ex+0x1e8/0x20c [ 475.662102][ T4698] should_fail+0x14/0x24 [ 475.663286][ T4698] should_fail_usercopy+0x20/0x30 [ 475.664715][ T4698] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 475.666304][ T4698] generic_perform_write+0x144/0x2cc [ 475.667773][ T4698] __generic_file_write_iter+0xd8/0x21c [ 475.669302][ T4698] generic_file_write_iter+0x6c/0x168 [ 475.670766][ T4698] vfs_write+0x2dc/0x46c [ 475.671960][ T4698] ksys_write+0xb4/0x160 [ 475.673145][ T4698] __arm64_sys_write+0x24/0x34 [ 475.674460][ T4698] el0_svc_common+0x138/0x220 [ 475.675756][ T4698] do_el0_svc+0x48/0x104 [ 475.676892][ T4698] el0_svc+0x58/0x150 [ 475.677949][ T4698] el0t_64_sync_handler+0x84/0xf0 [ 475.679307][ T4698] el0t_64_sync+0x190/0x194 [ 475.695790][ T4698] loop3: detected capacity change from 0 to 512 [ 475.776104][ T4698] EXT4-fs (loop3): orphan cleanup on readonly fs [ 475.779563][ T4698] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 475.783760][ T4698] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 475.792649][ T4698] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 475.796075][ T4698] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 475.800507][ T4698] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 475.801359][ T4680] loop2: detected capacity change from 0 to 32768 [ 475.803836][ T4698] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 475.809024][ T4698] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 475.811494][ T4698] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 475.815046][ T4698] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 475.817549][ T4680] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 475.820591][ T4698] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 475.820963][ T4680] BTRFS info (device loop2): using free space tree [ 475.823255][ T4698] EXT4-fs (loop3): 1 truncate cleaned up [ 475.854077][ T4680] BTRFS info (device loop2): enabling ssd optimizations [ 475.856054][ T4680] BTRFS info (device loop2): auto enabling async discard 00:07:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:55 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:55 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/243) 00:07:55 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0x4}}, './file0\x00'}) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) (async) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000180)={0x1000, 0x18, [0x401, 0x0, 0x8, 0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (async) getsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x1000}], 0x1, 0x0) 00:07:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 65) 00:07:55 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$eJzs3UGIVVUcB+DzZhydFGaezMY2YriRFjIFLSKi0Y1TTvBKEKLM0UUhthhkpFYhtHQzEAbu1CAUwZ4QmgvBjUVRtLAgsUULCwIXQhsDF/HevefNfef67nuOY2P6fTFz77n/e84973EX83t57gsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQQlh/66vTVfUtk5v3XT88s+3yzNUd53fOnwyh1j5ey+t7t0+/+d6uva+Pxg6zb2Tber3XkFnX37PG6q6DrX7dP/tCCCPJAMP59upwadTi7qHygJVGr93duOfC9LHTWy/tnpi9c6v80mkZXekJrJT8vrq5eC9NtX8PJWd02oVbr9Z1i2b90xvuP3kRAMB9mWy0N50/R/M/cTvtI2k9aU8l7YWkHf9CWCg2liIbd3WveW5K6ys0z6ksKqzpOc+knr//nXYj7Z+0k6hxH/PsPjWPNKO95jmX1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPkubNpy5V1bdMbt53/fDMtsszV3ec3zl/MoR6+3gtK9c+PnX2bPPc9MSZz8MLB7f/8udw3i9uVxVODr/GnRfHQ9hfqNyMw/41FkKju9BuhuPlwoH2zquxAAAAwOPk6fbvoU47i4MjXe1aO03W2v9FWVgcvXZ3454L08dOb720e2L2zq2lj9foMd7UPcfrtOuLP7VCMI7xNx1vsR5PPVQap1o6Yprnzx1++YOq/qX8X6/O//Gdk/8BAAB4EPJ/Ok61fvn/1NH9c1X9S/l/U9clS/k/zjjm/6GwtPwPAAAAj7KHnf+nSuNU65f/f774z8Wq/qX8PzlY/l9VnHY8+EOc8MHxECb7TR0AAADoIf5/98WPFmJezz45SPP6Hwd+e6dqvFL+nxos/48s66sCAAAAHsRHN9Z+UVUv5f/GYPl/zUOdNQAAAHA/vvz+7bVV9VL+nx0s/8dB85UPWadv4r9C+HQ8hNHWzlxW+DYsvNIpAAAAAMsk5vTnPvx6vuq8Uv6fq37+f3zSQVz/3/X8v9L6/0Ihe+rfSx4MAAAAwJOovJ4/Ph4/++aCXt+/P+j6/7H3X3u36vql/H9ksPw/XNwu5/f/AQAAwBL8377/763SONX6Pf//x++ena7qX8r/C4Pl/7hdV3x5V+L788l4CBtaO/nTBM/Eyx1MCs2RQqGtkfTYFXvkheaaQqFtLunx/HgIz7R2jiSF9bGwkBRuj+WFE0nhp1jI74dO4VxSuBLvtM/G8ummhYuxkC+waMYVFOs6SyKSHn/36tEq3LPHjc7FAQAAnigxPOdZdqS7GdIo26z1O2FtvxOG+p0w3O+EVckJ6Ym9jofZ7kI8Pn18fiJUKOX/E4Pl//hWrM42vdb/h7j+P/9ew876/9lYqCeFZiw00icGNOI1srB7NF6j3sh73N7QKQAAAMBjLX4uMLzC8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ze9+YOu66sOBn+fYfrbj2C5FaukPgaE/mnZTHDslqNqykWSa6Gg03CnVQIiRkLiZG5eExNlIV1Vpw9BQlC0TlaimCRIYg6qoC0xb+Nc1qmgYWmClE4huagUbtJo0+kdMnVC7dXq+9zzfd67fnzR2GnefjxS/8973/L3vT965975zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/4Y7vnP0f1rFrx6/cvtjB7ZsemDLw+/44g2zJ0KYnHu8koUrd3z6vvtO3n/9pfd+Jqzfvfl7T/bm5fJ4WFn705Xf+Uis9cerQjhVCaE7DawZzAI9+f3BWN/rB0O4JMwH6iWmBrISacPh4f4Qjof5QL2qr/SHMFgIbH30oQeP1hJ394fwlhBCNW3j8WrWRn8auKo3CwykgT3dWeC/XsrUA1/uygJw3uKbof6iPznZmGFk4XJNXn89i9axV1Y6vBUxMdI83083LXGnCnrTBybP62krVceSKL09Tnu3LYN3W2k7H/O0Fb9I5d9QXpoPVUPXzqmbtx+YmY2PdIWxsRXNalqi5/mx527fcS7pZfM6jB0YWZTX4YZnP/ri7bu29H3h6LEzn7zna7ecbzd/UNikxfRSq4b8Nbdsnsdoo8+TZfD2K31LGvWlK4Twd7/4+99uFS/N/0daz//jyznedjXkjrW+MJTNzeMjgzHxzFA2NwcAAIBlYznsNT1169NfbVVfaf4/2tnx/3jIP5/MZ6M9HcLGucTh4RAun3s8C9wbm/vAcAhvmktNNgY2JYHTIbxuLnFNvaqkRF8sMZoEnhrKAxuTwJkYmEwCn42BY0ngIzFwMgnsiIHTSWBzDITpxnH8wlA+jo4D/TGwLduIJ+NZCD8biq0l2+pf6lUBAAAsknx22NN4t3Cuw/lmiNPLk/3tMsQzsJtmqCY1pDPY+rSqaQ3d7WroaldDfdyHWg+/VHOlXc2l0zAqjRl+/dRbvhtaKM3/x1vP/6sLdKRSOv4fwo1zf2PurjwyU49vm2zIAAAAAJyHrb93dnereGn+v7Gz8//jPpEVhczhbNwNsXs4hPHGQFbtL5cD2VHvlXkAAAAAloP68fj6sfDp/DY7RTudT5fzT55j/njgf+OC+Z84/My/tupvaf4/2dn5/wONt1knzsRefHw4hL5C4Juxl7XAnNEY+OHbGwP5+M/EDXAkVpWfmFCv6kgssS0GxpPA8WYlHqmXuLwxkD9Z9cYP18cxnZcoBAAAAOCCi7sD4nH5eP7/tx/YM9mqXGn+v+3czv+fmweXTu+fWRnC2u4QVqQ/DDg7kC0MGAODlTzxwEBW14q0qjsHQthQG1ha1Y/y9f+70zUGH+3PqoqBy9/8+eeuqiU+0x/C2mLg++89sb6WmE0C9cZv6g/hjbXRpo3/TV/WeE/a+Cf6QnhDIVCv6gN9IdQa602reqiaX8cgreqvqiFcWgjUq3pbNYSDAYBlKv5XurP44P6Dt+3ePjMztW8JE3Effn+4eXpmamzHnpmd1SZ92pn0uWEZozvLY+rucOxxiaKbZjav7iRd/53geLEv+X780omD442d6Zkb57qehrvXpkO++spyE6HwTeqVGvJAsZL5J7FUf8zfG1aGvgP7p/aNfXj77Oy+iexvp9nXZX/jYaZsW02k22pgob5dBC+P1cVK1s7eunft/oO3rZm+dfuuqV1TH5yYeNu668Ynrnvr+rW1UY1nf9sMdfVCVSdDfelEh+NaxKFeUdyWF+JTQ0JCYrklTl0/e7jVx09p/r+39fw/furET/58fYZmx/9H4mH+7PH5w/zbYuB4p8f/R5odza+fGDCaBA7FwCGH+QEAAHh1iLsj497MuNd64pYn0334DUrz/0Od/f5/kdb/ry9d/85my/xfE0uMN1v/P13mv77+/6Fm6/+ny/zX1/8//gqs/3+gHkg2yc+s/w8AALwaXLj1/9su759eIKCUoe3y/ukFAkoZ2i7j3+kFAs55/f+eEwPzi+4voDT/P9bZ/N/C/QAAAHDx+Mvh//+JVvHS/P94Z/P/C7/+X2h2/v9os8Bks4UBrf8HAADAMtVs/b+//8Z7Hm9VrjT/P9nZ/D+edtHVkDvW+sJQtqZdSNe0e2ao/pMBAAAAWB66wthYT4d5G1ZG3fTy24xLgbZKFx195xWfalVfaf5/urP5f8PvMjY8+9EXb9+1pe+FLxw9duaT93ztlvnj/wAAAMDS6XS/BAAAAAAAAAAAAAAA8Mp7z5HBp1vFS7//DzfOPd7s9//xun/x9wWvbcgda22//l9+f+sN9x+cW7Lw7FAIVxYDu+/afUnIr82/uhh48H3XXFZL3JWW+PoTm39SS7w/DVy/5jXP1xIbksC2uEji69JAvKri86uSQFxe8Z/SQNweJ9NAbx742KpsHJV0W/37YLatKum2+ufBEIYLgfq2OjWYtVFJB3h3EqgP8ENpIA7wN/NAV9qr+1dmvYqBwVj0UyuzXgEAcNGqXws83Dw9MzUev8LH2yu6G2+jhiXL7ixXW+mw+bg02U0zm1d3kl6Rfhedv9Z4T6jWhjBR+rpazFKZG+Xi1NJm0722yZDbrfbW1aRc6lw3XW/zEfVnIxrbsWdmZ0/bgV/bPsu67rZZJkqTnWKWrrlN2kEtHfSlgxF1uG066HK83xXGxlYkuX4pBkdCg3aviE5/r7/Qmn/NXhE1f/u5Rw60qq80/x/pbP5fLY7r+fxiAIfilfX+ZNgy/wAAALC0Prbp5/fEf0e+8WdbW+Utzf9HO5v/xz1Y+aHgbG/H6Xj9/8PDIcxdWn8kC9wbm/vAcAhvmktNxhLZBfXfGUuMZ4F74w6Ta2KJbZONVfXFwMkk8NRQHjidBM7EQL6X4vMh35Xzp0MhrJ9L3dhYYm8sMZIE3hUDo0lgLAbGk8CqGNiYBP5jVR6YTAL/EANhunFb/fWqfFsBAACci3ye1dN4N6TzvJPd7TJU2mUYaJehq12GarsMzUYR738pZuhJTl6pFDL1pLX2J7WUMsSL4Z9zv0oZwiONOdOCpabj+Qf18w0qjRl2/MFv/2FooTT/H+9s/j/QeJu1fibO/+ev/5cFvhm79/F46vhoDPzw7Y2BfMfAmTjZPVKvajIvkU/aj8QSG2NgNAnsjYGNSWDbjXng+GWNgXymXW/8cL3x6bxEIQAAAAAXXNxBEHfTxPn/c4/veqpVudL8f2Nn8//Y3spiYx+Jtf54VQinKvO9qQfWDGaBuB9jMP48/vWDIVxS2MFRLzE1kJXoTRoOD/dnv1DvTav6Sn/244N4f+ujDz14tJa4uz+EtxT2vtTbeLyatdGfBq7qzQIDaWBPdxaIe37qgS93ZQE4b/W9gvEFlZ/qUjeycLkmr79XyzVB0+GV9oEukG+h31wtlWr6QL5Pte7cnrZSdSyJ0tvjtHfbcny3jXi3Fb9I5d9QXpoPVUPXzqmbtx+YmY2PFH/JWrJEz/NCv2RtlV6E1+Ghl9/b9qppB8aTj4/xhcst/DqsxOo2PPvRF2/ftaXvC0ePnfnkPV+7peNuNBE36V/8zmOrf1DYvEutGvLX3LL7PJn0ebIc/xsY9bSFEP7oN/77u63ipfn/ZGfz/+7kds7P48bcPxzC1YWNezZu/l8bzj4HC4HsU/LSciA75P5vQ00/OQEAAGCx1Xd31PcXTOe32Qnh6Ty5nH/yHPPH/RUbF8zfab93Pvvgt1rFS/P/ba3n/31JNx3/d/yfJeL4/4Iu9l3RfekDh85rV3SpOpaE4/8LutjfbY7/L8jxf8f/F+L4fxuO/y/oYn/aSt+S9vrSFUL41TuefnereGn+v7ez+b/1/xZetK++/t+2Zuv/7W22/t8h6/8BAABLqslCc+k8r7R6XylDunpfKUPbBQLbLjFo/b9zXv/vV97zxx8OLZTm/4c6m//Hl8PKYuvLZf2/0RubVHUsBvZaGBAAAICLUbMdBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyyLvvOu9/VKn71+JXbHzuwZdMDWx5+xxdvmD0RwvTc45UsXLnj0/fdd/L+6y+99zNh/e7N33uympfryW//X0PuWOsLQyEcLzwyGBPPDNXuzAe23nD/we5a4uxQCFcWA7vv2n1JLfHZoRBWFwMPvu+ay2qJu9ISX39i809qifengevXvOb5WmJDHqik3f3zVVl3K2l3j64KYbgQqHf3llWNVdXbeEce6Erb+Nxg1kYMDMai9wxmbcTATCwx3RfC2u4QVqRVfauaVbUireqr1ayqFWlVd1RD2BBC6E6reqI3q6o7Hfk/9mZVxcDlb/78c1fVEsd7Q1hbDHz/vSfW1xIfSgL1xn+rN4Q31l4yaeNf6ska70kbv7snhDeEEHrTEv/ZnZXoTUv8qDuESwuBeuO/2x3CwcCrQvzw2Vl8cP/B23Zvn5mZ2reEid68rf5w8/TM1NiOPTM7q0mfmqkU0i/dWY6v6HDsjz13+47a7U0zm1d3ku7Oy/XMdXldT8Pdaxer911L1PvYr4FiJfPPR6n+mL83rAx9B/ZP7Rv78PbZ2X0T2d9Os6/L/sanJNtWE4u1rSptykcvd1utLlaydvbWvWv3H7xtzfSt23dN7Zr64MTE29ZdNz5x3VvXr62Najz7uxhDPdHhuBZxqFd0Fyq5EB8AEhISyy3R1fDpNr5YH+RL9elW+qI/39GeUJ37gC5NK4pZKnOjXIxBb3qZI34531PajmiiNHEoZVnXPsu1pcnEfJb+LMvc97rS5LBYU9fcJo33u8LYWNOvbyONd4ub96eLsHk7TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rMHo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//+l99CO") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) [ 475.920376][ T4731] loop1: detected capacity change from 0 to 512 00:07:55 executing program 0: semctl$IPC_STAT(0x0, 0x2, 0x2, &(0x7f0000000000)=""/243) [ 475.933879][ T4738] FAULT_INJECTION: forcing a failure. [ 475.933879][ T4738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 475.940228][ T4731] EXT4-fs (loop1): orphan cleanup on readonly fs [ 475.942620][ T4731] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 475.946926][ T4738] CPU: 1 PID: 4738 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 475.949845][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 475.952582][ T4738] Call trace: [ 475.953438][ T4738] dump_backtrace+0x1c4/0x1f0 [ 475.954736][ T4738] show_stack+0x2c/0x3c [ 475.954852][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 475.955866][ T4738] dump_stack_lvl+0x104/0x16c [ 475.955879][ T4738] dump_stack+0x1c/0x58 [ 475.955886][ T4738] should_fail_ex+0x1e8/0x20c [ 475.961490][ T4731] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 475.961722][ T4738] should_fail_alloc_page+0x68/0x7c [ 475.961739][ T4738] prepare_alloc_pages+0x128/0x244 [ 475.963336][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 475.966165][ T4738] __alloc_pages+0xa4/0x1fc [ 475.966179][ T4738] __folio_alloc+0x1c/0x48 [ 475.966190][ T4738] vma_alloc_folio+0x598/0x9a0 [ 475.966201][ T4738] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 475.966211][ T4738] shmem_get_folio_gfp+0xb54/0x1a00 [ 475.966219][ T4738] shmem_write_begin+0x8c/0x350 [ 475.966228][ T4738] generic_perform_write+0xf0/0x2cc [ 475.973350][ T4731] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 475.973453][ T4738] __generic_file_write_iter+0xd8/0x21c [ 475.975024][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 475.975991][ T4738] generic_file_write_iter+0x6c/0x168 [ 475.976005][ T4738] vfs_write+0x2dc/0x46c [ 475.976016][ T4738] ksys_write+0xb4/0x160 [ 475.979779][ T4731] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 475.980306][ T4738] __arm64_sys_write+0x24/0x34 [ 475.982095][ T4731] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 475.985013][ T4738] el0_svc_common+0x138/0x220 [ 475.985026][ T4738] do_el0_svc+0x48/0x104 [ 475.985032][ T4738] el0_svc+0x58/0x150 [ 475.985041][ T4738] el0t_64_sync_handler+0x84/0xf0 [ 475.990397][ T4731] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 475.991250][ T4738] el0t_64_sync+0x190/0x194 [ 476.022935][ T4731] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 476.025834][ T4731] EXT4-fs (loop1): 1 truncate cleaned up 00:07:56 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget(0x3, 0x1, 0x160) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x8, 0x1000}, {0x0, 0x3f, 0x800}, {0x0, 0x1, 0x800}, {0x2, 0x81, 0x3800}, {0x4, 0x0, 0x1000}, {0x1, 0x7f}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x49, 0x800}], 0x9, &(0x7f00000000c0)) semtimedop(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={r1, r2+10000000}) 00:07:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 66) 00:07:56 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget(0x3, 0x1, 0x160) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x8, 0x1000}, {0x0, 0x3f, 0x800}, {0x0, 0x1, 0x800}, {0x2, 0x81, 0x3800}, {0x4, 0x0, 0x1000}, {0x1, 0x7f}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x49, 0x800}], 0x9, &(0x7f00000000c0)) (async) semtimedop(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={r1, r2+10000000}) 00:07:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:56 executing program 0: semctl$IPC_STAT(0x0, 0xb, 0x2, &(0x7f0000000000)=""/243) 00:07:56 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:56 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r0 = semget(0x3, 0x1, 0x160) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x8, 0x1000}, {0x0, 0x3f, 0x800}, {0x0, 0x1, 0x800}, {0x2, 0x81, 0x3800}, {0x4, 0x0, 0x1000}, {0x1, 0x7f}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x49, 0x800}], 0x9, &(0x7f00000000c0)) (async) semtimedop(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={r1, r2+10000000}) [ 476.114151][ T4755] FAULT_INJECTION: forcing a failure. [ 476.114151][ T4755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.117983][ T4755] CPU: 0 PID: 4755 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 476.120679][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 476.123295][ T4755] Call trace: [ 476.124186][ T4755] dump_backtrace+0x1c4/0x1f0 [ 476.125425][ T4755] show_stack+0x2c/0x3c [ 476.126538][ T4755] dump_stack_lvl+0x104/0x16c [ 476.127828][ T4755] dump_stack+0x1c/0x58 [ 476.128989][ T4755] should_fail_ex+0x1e8/0x20c [ 476.130263][ T4755] should_fail+0x14/0x24 [ 476.131517][ T4755] should_fail_usercopy+0x20/0x30 [ 476.132889][ T4755] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 476.134451][ T4755] generic_perform_write+0x144/0x2cc [ 476.135806][ T4755] __generic_file_write_iter+0xd8/0x21c [ 476.137272][ T4755] generic_file_write_iter+0x6c/0x168 [ 476.138684][ T4755] vfs_write+0x2dc/0x46c [ 476.139845][ T4755] ksys_write+0xb4/0x160 [ 476.140978][ T4755] __arm64_sys_write+0x24/0x34 [ 476.142289][ T4755] el0_svc_common+0x138/0x220 [ 476.143541][ T4755] do_el0_svc+0x48/0x104 [ 476.144654][ T4755] el0_svc+0x58/0x150 [ 476.145737][ T4755] el0t_64_sync_handler+0x84/0xf0 [ 476.147091][ T4755] el0t_64_sync+0x190/0x194 [ 476.149941][ T4436] EXT4-fs unmount: 139 callbacks suppressed [ 476.149952][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 00:07:56 executing program 5: r0 = semget$private(0x0, 0x2, 0x500) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x6}, {0x4, 0x5, 0x1800}], 0x42, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) 00:07:56 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8b0f0000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:56 executing program 0: semctl$IPC_STAT(0x0, 0x10, 0x2, &(0x7f0000000000)=""/243) [ 476.207387][ T4768] loop1: detected capacity change from 0 to 512 [ 476.225245][ T4768] EXT4-fs (loop1): orphan cleanup on readonly fs [ 476.230459][ T4768] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 476.238927][ T4768] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 476.250006][ T4768] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 476.253506][ T4768] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 476.279582][ T4768] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 476.284910][ T4755] loop3: detected capacity change from 0 to 512 [ 476.289614][ T4768] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 476.294125][ T4768] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 476.310053][ T4768] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 476.313769][ T4768] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 476.322762][ T4768] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 476.333488][ T4768] EXT4-fs (loop1): 1 truncate cleaned up [ 476.340679][ T4768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 476.344315][ T4755] EXT4-fs (loop3): orphan cleanup on readonly fs [ 476.346939][ T4755] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 476.347226][ T4748] loop2: detected capacity change from 0 to 32768 [ 476.356413][ T4755] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 476.371727][ T4755] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 476.379161][ T4748] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 476.381883][ T4748] BTRFS info (device loop2): using free space tree [ 476.382042][ T4755] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 476.403807][ T4755] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 476.407860][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.418632][ T4755] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 476.422397][ T4755] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 476.426459][ T4755] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 476.439141][ T4755] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 476.444998][ T4755] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 476.452578][ T4755] EXT4-fs (loop3): 1 truncate cleaned up [ 476.454288][ T4755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 476.476646][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.519036][ T4748] BTRFS info (device loop2): enabling ssd optimizations [ 476.521090][ T4748] BTRFS info (device loop2): auto enabling async discard 00:07:56 executing program 0: semctl$IPC_STAT(0x0, 0x1d7, 0x2, &(0x7f0000000000)=""/243) 00:07:56 executing program 5: r0 = semget$private(0x0, 0x2, 0x500) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x6}, {0x4, 0x5, 0x1800}], 0x42, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) 00:07:56 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8c0f0000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3dFrW18dAPDvvW3667bO9sd80IGzuEk3dEm7uq34MCeIPg3U+T5Lm5bStClNuq1lSId/gCCiok8++SL4BwiyP0GEgb6LiiK6uQdfNHKTG9d2SdvNtPmt/XzgJOfc3JvvObfNuffkXHIDOLXGI+JuRAxExLWIGM2Xp3m6kD1st9Z7+eLJXJaSaDTu/z2JJF+Wrb+dRrOcOdfaJIYj4ptfixjsELe2ubU8W6mU1/Nyqb6yVqptbl1fWpldLC+WV6enp27N3J65OTPZk3aORMSdr/z5h9/7+Vfv/Przj/7w4K9Xv5Pky2NHO3qhsiPf2ieF5r5oy/bHeq+C9dlA3p5CvysCAMChDOTn+Z9pnv+PxkDHs3UAAADgfdb40khz7qYBAAAAnFhp8xrYJC3m1wGMRJoWi61reD8eZ9NKtVb/3EJ1Y3W+da3sWBTShaVKeTK/VngsCklWnmrmX5dv7ClPD0V8GBE/GD3TLBfnqpX5fn/5AQAAAKfEuT3j/1ejrfE/AAAAcMKM9bsCAAAAwJEz/gcAAICTz/gfAAAATrSv37uXpUb7/tfzDzc3lqsPr8+Xa8vFlY254lx1fa24WK0uNn+zb+Wg96tUq2tfiNWNx6V6uVYv1Ta3HqxUN1brD5Z23QIbAAAAOEYffvrZ75OI2P7imWbKDOWvFfpaM+CopW+z8p+Orh7A8RvodwWAvhnsdwWAvjHGB5IDXu968c5vel8XAADgaEx80vw/nFb7zf8P/+S8+QE4wcz/w+nV4fjukA+nRMEZAJx6Rz//32i8VYUAAICeG2mmJC3mc4EjkabFYsT55m0BCsnCUqU8GREfi4jfjRY+yMpTzS2TA8cMAAAAAAAAAAAAAAAAAAAAAAAAAEBLo5FE4x28epeNAAAAgL6ISP+S5Pf/mhi9MrL3+4Gh5F+jzeeIePTT+z96PFuvr09ly//xv+X1H+fLbxzwZcN+NxsHAAAAeqY9Tm+P4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgl16+eDLXTscZ929fjoixTvEHY7j5PByFiDj7zyQGd2yXRMRAD+JvP42IT3SKn2TVirG8FnvjpxFxps/xz/UgPpxmz7L+526nz18a483nzp+/wTz9v3b2f1l3sDN+u/8b6BB/KCLOHzLGxee/LHWN/zTi4mDn/qcdP+nS/17uGvGDXaVvf2trq9uajZ9FTHQ8/iS7YpXqK2ul2ubW9aWV2cXyYnl1enrq1sztmZszk6WFpUo5f+wY4/uf+tV/9mv/2S7xxw5o/5Uu77n3/+Lfzx+/uNDKFjrFv3p5d/zx2LkH3oyf5se+z+b57PWJdn67ld/p0i9+eynPvnHIyuLPd2n/QX//q13av9e1b3z3j4dcFQA4BrXNreXZSqW8fuSZ8aMPISOzXyY7bf0IVOP9yPS7ZwIAAHrt9Un/IVbuxYQ7AAAAAAAAAAAAAAAAAAAA8Ibj+DmxvTG3+9NUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9/TcAAP//w07Q4Q==") 00:07:56 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) 00:07:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 67) [ 476.549755][ T4799] loop1: detected capacity change from 0 to 512 00:07:56 executing program 0: semctl$IPC_STAT(0x0, 0xb00, 0x2, &(0x7f0000000000)=""/243) 00:07:56 executing program 5: r0 = semget$private(0x0, 0x2, 0x500) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x6}, {0x4, 0x5, 0x1800}], 0x42, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semget$private(0x0, 0x2, 0x500) (async) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x6}, {0x4, 0x5, 0x1800}], 0x42, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) 00:07:56 executing program 0: semctl$IPC_STAT(0x0, 0x2000, 0x2, &(0x7f0000000000)=""/243) [ 476.614030][ T4800] FAULT_INJECTION: forcing a failure. [ 476.614030][ T4800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:07:56 executing program 5: semtimedop(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) futex(&(0x7f0000000140)=0x2, 0xa, 0x2, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0) futex(&(0x7f0000000300)=0x1, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x1, 0x0) rt_sigtimedwait(&(0x7f0000000200)={[0x1ff]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x0) r0 = semget(0x1, 0x0, 0x4) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x0, 0x1800}], 0x1, 0x0) [ 476.635630][ T4800] CPU: 0 PID: 4800 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 476.638493][ T4800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 476.641200][ T4800] Call trace: [ 476.642089][ T4800] dump_backtrace+0x1c4/0x1f0 [ 476.643343][ T4800] show_stack+0x2c/0x3c [ 476.644440][ T4800] dump_stack_lvl+0x104/0x16c [ 476.645678][ T4800] dump_stack+0x1c/0x58 [ 476.646756][ T4800] should_fail_ex+0x1e8/0x20c [ 476.648025][ T4800] should_fail_alloc_page+0x68/0x7c [ 476.649421][ T4800] prepare_alloc_pages+0x128/0x244 [ 476.650794][ T4800] __alloc_pages+0xa4/0x1fc [ 476.651995][ T4800] __folio_alloc+0x1c/0x48 [ 476.653185][ T4800] vma_alloc_folio+0x598/0x9a0 [ 476.654465][ T4800] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 476.656058][ T4800] shmem_get_folio_gfp+0xb54/0x1a00 [ 476.657450][ T4800] shmem_write_begin+0x8c/0x350 [ 476.658771][ T4800] generic_perform_write+0xf0/0x2cc [ 476.660187][ T4800] __generic_file_write_iter+0xd8/0x21c [ 476.661674][ T4800] generic_file_write_iter+0x6c/0x168 [ 476.663125][ T4800] vfs_write+0x2dc/0x46c [ 476.664275][ T4800] ksys_write+0xb4/0x160 [ 476.665416][ T4800] __arm64_sys_write+0x24/0x34 [ 476.666721][ T4800] el0_svc_common+0x138/0x220 [ 476.667958][ T4800] do_el0_svc+0x48/0x104 [ 476.669099][ T4800] el0_svc+0x58/0x150 [ 476.670168][ T4800] el0t_64_sync_handler+0x84/0xf0 00:07:56 executing program 0: semctl$IPC_STAT(0x0, 0x3f00, 0x2, &(0x7f0000000000)=""/243) [ 476.671547][ T4800] el0t_64_sync+0x190/0x194 [ 476.676030][ T4799] EXT4-fs (loop1): orphan cleanup on readonly fs [ 476.686691][ T4799] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 476.694062][ T4799] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:56 executing program 0: semctl$IPC_STAT(0x0, 0xd701, 0x2, &(0x7f0000000000)=""/243) [ 476.706064][ T4799] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 476.710542][ T4799] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:56 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x90020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:56 executing program 5: semtimedop(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) futex(&(0x7f0000000140)=0x2, 0xa, 0x2, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0) futex(&(0x7f0000000300)=0x1, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x1, 0x0) rt_sigtimedwait(&(0x7f0000000200)={[0x1ff]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x0) r0 = semget(0x1, 0x0, 0x4) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x0, 0x1800}], 0x1, 0x0) semtimedop(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) (async) futex(&(0x7f0000000140)=0x2, 0xa, 0x2, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0) (async) futex(&(0x7f0000000300)=0x1, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x1, 0x0) (async) rt_sigtimedwait(&(0x7f0000000200)={[0x1ff]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x0) (async) semget(0x1, 0x0, 0x4) (async) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x0, 0x1800}], 0x1, 0x0) (async) 00:07:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 68) [ 476.767922][ T4799] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 476.786735][ T4825] FAULT_INJECTION: forcing a failure. [ 476.786735][ T4825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.790246][ T4825] CPU: 0 PID: 4825 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 476.793030][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 476.795733][ T4825] Call trace: [ 476.796626][ T4825] dump_backtrace+0x1c4/0x1f0 [ 476.797925][ T4825] show_stack+0x2c/0x3c [ 476.799070][ T4825] dump_stack_lvl+0x104/0x16c [ 476.800348][ T4825] dump_stack+0x1c/0x58 [ 476.800918][ T4799] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 476.801478][ T4825] should_fail_ex+0x1e8/0x20c [ 476.806135][ T4825] should_fail+0x14/0x24 [ 476.807330][ T4825] should_fail_usercopy+0x20/0x30 [ 476.808737][ T4825] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 476.810329][ T4825] generic_perform_write+0x144/0x2cc [ 476.811758][ T4825] __generic_file_write_iter+0xd8/0x21c [ 476.812917][ T4799] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 476.813258][ T4825] generic_file_write_iter+0x6c/0x168 [ 476.816981][ T4825] vfs_write+0x2dc/0x46c [ 476.818178][ T4825] ksys_write+0xb4/0x160 [ 476.819289][ T4825] __arm64_sys_write+0x24/0x34 [ 476.820584][ T4825] el0_svc_common+0x138/0x220 [ 476.821844][ T4825] do_el0_svc+0x48/0x104 [ 476.822515][ T4799] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 476.822976][ T4825] el0_svc+0x58/0x150 [ 476.827352][ T4825] el0t_64_sync_handler+0x84/0xf0 [ 476.828712][ T4825] el0t_64_sync+0x190/0x194 [ 476.833015][ T4825] loop3: detected capacity change from 0 to 512 [ 476.853772][ T4825] EXT4-fs (loop3): orphan cleanup on readonly fs [ 476.855802][ T4799] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 476.865336][ T4825] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 476.872563][ T4825] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 476.912094][ T4825] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 476.915581][ T4825] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 476.931558][ T4799] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 476.931802][ T4825] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 476.934507][ T4799] EXT4-fs (loop1): 1 truncate cleaned up [ 476.938176][ T4825] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 476.939050][ T4799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 476.943915][ T4825] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 476.965365][ T4825] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents 00:07:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 476.974653][ T4825] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 476.976829][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.985060][ T4825] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 476.993534][ T4825] EXT4-fs (loop3): 1 truncate cleaned up [ 476.995158][ T4825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 477.019344][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.021844][ T4834] loop1: detected capacity change from 0 to 512 [ 477.042685][ T4834] EXT4-fs (loop1): orphan cleanup on readonly fs [ 477.045020][ T4834] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 477.055346][ T4834] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.061376][ T4834] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 477.064965][ T4834] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.065828][ T4814] loop2: detected capacity change from 0 to 32768 [ 477.072894][ T4834] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 477.076836][ T4834] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.077126][ T4814] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 477.080917][ T4834] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 477.082636][ T4814] BTRFS info (device loop2): using free space tree [ 477.085004][ T4834] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.090717][ T4834] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 477.094031][ T4834] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 477.096763][ T4834] EXT4-fs (loop1): 1 truncate cleaned up [ 477.099097][ T4834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 477.117104][ T4814] BTRFS info (device loop2): enabling ssd optimizations [ 477.119240][ T4814] BTRFS info (device loop2): auto enabling async discard [ 477.120866][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 00:07:57 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9a040000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:57 executing program 0: semctl$IPC_STAT(0x0, 0x200000, 0x2, &(0x7f0000000000)=""/243) 00:07:57 executing program 5: semtimedop(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) futex(&(0x7f0000000140)=0x2, 0xa, 0x2, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0) (async) futex(&(0x7f0000000300)=0x1, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x1, 0x0) (async) rt_sigtimedwait(&(0x7f0000000200)={[0x1ff]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x0) (async) r0 = semget(0x1, 0x0, 0x4) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x0, 0x1800}], 0x1, 0x0) 00:07:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 69) 00:07:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:57 executing program 0: semctl$IPC_STAT(0x0, 0x2000000, 0x2, &(0x7f0000000000)=""/243) [ 477.200070][ T4861] FAULT_INJECTION: forcing a failure. [ 477.200070][ T4861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 477.202348][ T4862] loop1: detected capacity change from 0 to 512 [ 477.205436][ T4861] CPU: 0 PID: 4861 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 477.208223][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 477.210928][ T4861] Call trace: [ 477.211817][ T4861] dump_backtrace+0x1c4/0x1f0 [ 477.213118][ T4861] show_stack+0x2c/0x3c [ 477.214223][ T4861] dump_stack_lvl+0x104/0x16c [ 477.215491][ T4861] dump_stack+0x1c/0x58 [ 477.216642][ T4861] should_fail_ex+0x1e8/0x20c [ 477.217925][ T4861] should_fail_alloc_page+0x68/0x7c [ 477.219363][ T4861] prepare_alloc_pages+0x128/0x244 [ 477.220767][ T4861] __alloc_pages+0xa4/0x1fc [ 477.221986][ T4861] __folio_alloc+0x1c/0x48 [ 477.223220][ T4861] vma_alloc_folio+0x598/0x9a0 [ 477.224550][ T4861] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 477.226118][ T4861] shmem_get_folio_gfp+0xb54/0x1a00 [ 477.227549][ T4861] shmem_write_begin+0x8c/0x350 [ 477.228874][ T4861] generic_perform_write+0xf0/0x2cc [ 477.230302][ T4861] __generic_file_write_iter+0xd8/0x21c [ 477.231840][ T4861] generic_file_write_iter+0x6c/0x168 [ 477.233352][ T4861] vfs_write+0x2dc/0x46c [ 477.234535][ T4861] ksys_write+0xb4/0x160 [ 477.235691][ T4861] __arm64_sys_write+0x24/0x34 [ 477.237001][ T4861] el0_svc_common+0x138/0x220 [ 477.238275][ T4861] do_el0_svc+0x48/0x104 [ 477.239399][ T4861] el0_svc+0x58/0x150 [ 477.240503][ T4861] el0t_64_sync_handler+0x84/0xf0 [ 477.241905][ T4861] el0t_64_sync+0x190/0x194 00:07:57 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0xe31, 0x1000}, {0x1, 0x9, 0x1400}, {0x4, 0x7, 0x1800}, {0x4, 0x4}, {0x1, 0x2, 0x1800}], 0x5, &(0x7f0000000040)) 00:07:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 00:07:57 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0xe31, 0x1000}, {0x1, 0x9, 0x1400}, {0x4, 0x7, 0x1800}, {0x4, 0x4}, {0x1, 0x2, 0x1800}], 0x5, &(0x7f0000000040)) [ 477.289740][ T4862] EXT4-fs (loop1): orphan cleanup on readonly fs 00:07:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 70) [ 477.327193][ T4878] FAULT_INJECTION: forcing a failure. [ 477.327193][ T4878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.330819][ T4878] CPU: 0 PID: 4878 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 477.333546][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 477.336176][ T4878] Call trace: [ 477.337016][ T4878] dump_backtrace+0x1c4/0x1f0 [ 477.337306][ T4862] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, [ 477.338317][ T4878] show_stack+0x2c/0x3c [ 477.338328][ T4878] dump_stack_lvl+0x104/0x16c [ 477.338337][ T4878] dump_stack+0x1c/0x58 [ 477.338344][ T4878] should_fail_ex+0x1e8/0x20c [ 477.340553][ T4862] block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 477.341630][ T4878] should_fail+0x14/0x24 [ 477.342889][ T4862] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.343942][ T4878] should_fail_usercopy+0x20/0x30 [ 477.353065][ T4878] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 477.354615][ T4878] generic_perform_write+0x144/0x2cc [ 477.356034][ T4878] __generic_file_write_iter+0xd8/0x21c [ 477.357490][ T4878] generic_file_write_iter+0x6c/0x168 [ 477.359010][ T4878] vfs_write+0x2dc/0x46c [ 477.360119][ T4878] ksys_write+0xb4/0x160 [ 477.361257][ T4878] __arm64_sys_write+0x24/0x34 [ 477.361726][ T4862] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 477.362498][ T4878] el0_svc_common+0x138/0x220 [ 477.362509][ T4878] do_el0_svc+0x48/0x104 [ 477.362516][ T4878] el0_svc+0x58/0x150 [ 477.362524][ T4878] el0t_64_sync_handler+0x84/0xf0 00:07:57 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0xe31, 0x1000}, {0x1, 0x9, 0x1400}, {0x4, 0x7, 0x1800}, {0x4, 0x4}, {0x1, 0x2, 0x1800}], 0x5, &(0x7f0000000040)) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0xe31, 0x1000}, {0x1, 0x9, 0x1400}, {0x4, 0x7, 0x1800}, {0x4, 0x4}, {0x1, 0x2, 0x1800}], 0x5, &(0x7f0000000040)) (async) 00:07:57 executing program 0: semctl$IPC_STAT(0x0, 0xb000000, 0x2, &(0x7f0000000000)=""/243) [ 477.365767][ T4862] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.366678][ T4878] el0t_64_sync+0x190/0x194 [ 477.374628][ T4862] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 477.385333][ T4862] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.389328][ T4862] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 477.391795][ T4862] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.395247][ T4862] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 477.400143][ T4878] loop3: detected capacity change from 0 to 512 [ 477.404033][ T4862] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem 00:07:57 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:57 executing program 5: semtimedop(0x0, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000001c0)=""/111, &(0x7f0000000240)=0x6f) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@'}, {0x20, '/dev/net/tun\x00'}, {0x20, '/dev/net/tun\x00'}, {}, {0x20, '#(,,,+\'@'}], 0xa, "1bc0b271593fb9a53c417ae77d2352ce57e0972a6b5c9c822dc4ea513ce8731dda67414333d3884a0e05458c69b40a688a50cd9436072a833fc033356288ad9e0677471a6f22ab0d5f782a5e5fb43eec0d30bd6f8c441ca1d6323f07b94834ff8520edf2e5fa342e7175bd73399a312bf31e1b0365e9e2815c084b5fe9c1ad5f8a0443c6710ee564cb3206632ca8a5d21f8bafbce80eac6e8b2e442bc2e503fa3982bdae65ebf0783e"}, 0xdc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa001, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{}], 0x1, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1ff, 0x800}, {0x2, 0x4, 0x1000}, {0x2, 0x0, 0x1000}, {0x4, 0xfffa, 0x1000}, {0x0, 0x0, 0x800}, {0x1, 0x5, 0x800}, {0x4, 0x4, 0x800}, {0x3, 0x723, 0x1800}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) [ 477.409209][ T4862] EXT4-fs (loop1): 1 truncate cleaned up [ 477.410914][ T4862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. 00:07:57 executing program 0: semctl$IPC_STAT(0x0, 0x10000000, 0x2, &(0x7f0000000000)=""/243) 00:07:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 477.488403][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.493776][ T4878] EXT4-fs (loop3): orphan cleanup on readonly fs 00:07:57 executing program 0: semctl$IPC_STAT(0x0, 0x1fffffff, 0x2, &(0x7f0000000000)=""/243) [ 477.500398][ T4878] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters 00:07:57 executing program 0: semctl$IPC_STAT(0x0, 0x20ffffff, 0x2, &(0x7f0000000000)=""/243) [ 477.543733][ T4878] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents 00:07:57 executing program 5: semtimedop(0x0, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000001c0)=""/111, &(0x7f0000000240)=0x6f) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@'}, {0x20, '/dev/net/tun\x00'}, {0x20, '/dev/net/tun\x00'}, {}, {0x20, '#(,,,+\'@'}], 0xa, "1bc0b271593fb9a53c417ae77d2352ce57e0972a6b5c9c822dc4ea513ce8731dda67414333d3884a0e05458c69b40a688a50cd9436072a833fc033356288ad9e0677471a6f22ab0d5f782a5e5fb43eec0d30bd6f8c441ca1d6323f07b94834ff8520edf2e5fa342e7175bd73399a312bf31e1b0365e9e2815c084b5fe9c1ad5f8a0443c6710ee564cb3206632ca8a5d21f8bafbce80eac6e8b2e442bc2e503fa3982bdae65ebf0783e"}, 0xdc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa001, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{}], 0x1, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1ff, 0x800}, {0x2, 0x4, 0x1000}, {0x2, 0x0, 0x1000}, {0x4, 0xfffa, 0x1000}, {0x0, 0x0, 0x800}, {0x1, 0x5, 0x800}, {0x4, 0x4, 0x800}, {0x3, 0x723, 0x1800}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) semtimedop(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000001c0)=""/111, &(0x7f0000000240)=0x6f) (async) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@'}, {0x20, '/dev/net/tun\x00'}, {0x20, '/dev/net/tun\x00'}, {}, {0x20, '#(,,,+\'@'}], 0xa, "1bc0b271593fb9a53c417ae77d2352ce57e0972a6b5c9c822dc4ea513ce8731dda67414333d3884a0e05458c69b40a688a50cd9436072a833fc033356288ad9e0677471a6f22ab0d5f782a5e5fb43eec0d30bd6f8c441ca1d6323f07b94834ff8520edf2e5fa342e7175bd73399a312bf31e1b0365e9e2815c084b5fe9c1ad5f8a0443c6710ee564cb3206632ca8a5d21f8bafbce80eac6e8b2e442bc2e503fa3982bdae65ebf0783e"}, 0xdc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa001, 0x0) (async) semtimedop(0x0, &(0x7f0000000280)=[{}], 0x1, 0x0) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1ff, 0x800}, {0x2, 0x4, 0x1000}, {0x2, 0x0, 0x1000}, {0x4, 0xfffa, 0x1000}, {0x0, 0x0, 0x800}, {0x1, 0x5, 0x800}, {0x4, 0x4, 0x800}, {0x3, 0x723, 0x1800}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) (async) [ 477.574003][ T4902] loop1: detected capacity change from 0 to 512 [ 477.607564][ T4878] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 477.612087][ T4902] EXT4-fs (loop1): orphan cleanup on readonly fs [ 477.614262][ T4902] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 477.629068][ T4902] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.633838][ T4878] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 477.645850][ T4902] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 477.654289][ T4878] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 477.662393][ T4878] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 477.666081][ T4902] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.671499][ T4878] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 477.674167][ T4902] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 477.682270][ T4878] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 477.686011][ T4902] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.691457][ T4878] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 477.694855][ T4878] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 477.702511][ T4902] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 477.705321][ T4878] EXT4-fs (loop3): 1 truncate cleaned up [ 477.711713][ T4902] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 477.715987][ T4878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 477.724248][ T4902] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 477.730164][ T4902] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 477.733015][ T4902] EXT4-fs (loop1): 1 truncate cleaned up [ 477.734659][ T4902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 477.738387][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.753935][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.765548][ T4877] loop2: detected capacity change from 0 to 32768 [ 477.782908][ T4877] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 477.785548][ T4877] BTRFS info (device loop2): using free space tree [ 477.793950][ T4877] BTRFS info (device loop2): enabling ssd optimizations [ 477.795897][ T4877] BTRFS info (device loop2): auto enabling async discard 00:07:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x40000}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 1) 00:07:57 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa8030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:57 executing program 0: semctl$IPC_STAT(0x0, 0x3f000000, 0x2, &(0x7f0000000000)=""/243) 00:07:57 executing program 5: semtimedop(0x0, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000001c0)=""/111, &(0x7f0000000240)=0x6f) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@'}, {0x20, '/dev/net/tun\x00'}, {0x20, '/dev/net/tun\x00'}, {}, {0x20, '#(,,,+\'@'}], 0xa, "1bc0b271593fb9a53c417ae77d2352ce57e0972a6b5c9c822dc4ea513ce8731dda67414333d3884a0e05458c69b40a688a50cd9436072a833fc033356288ad9e0677471a6f22ab0d5f782a5e5fb43eec0d30bd6f8c441ca1d6323f07b94834ff8520edf2e5fa342e7175bd73399a312bf31e1b0365e9e2815c084b5fe9c1ad5f8a0443c6710ee564cb3206632ca8a5d21f8bafbce80eac6e8b2e442bc2e503fa3982bdae65ebf0783e"}, 0xdc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa001, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{}], 0x1, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1ff, 0x800}, {0x2, 0x4, 0x1000}, {0x2, 0x0, 0x1000}, {0x4, 0xfffa, 0x1000}, {0x0, 0x0, 0x800}, {0x1, 0x5, 0x800}, {0x4, 0x4, 0x800}, {0x3, 0x723, 0x1800}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) semtimedop(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000001c0)=""/111, &(0x7f0000000240)=0x6f) (async) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '@'}, {0x20, '/dev/net/tun\x00'}, {0x20, '/dev/net/tun\x00'}, {}, {0x20, '#(,,,+\'@'}], 0xa, "1bc0b271593fb9a53c417ae77d2352ce57e0972a6b5c9c822dc4ea513ce8731dda67414333d3884a0e05458c69b40a688a50cd9436072a833fc033356288ad9e0677471a6f22ab0d5f782a5e5fb43eec0d30bd6f8c441ca1d6323f07b94834ff8520edf2e5fa342e7175bd73399a312bf31e1b0365e9e2815c084b5fe9c1ad5f8a0443c6710ee564cb3206632ca8a5d21f8bafbce80eac6e8b2e442bc2e503fa3982bdae65ebf0783e"}, 0xdc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa001, 0x0) (async) semtimedop(0x0, &(0x7f0000000280)=[{}], 0x1, 0x0) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1ff, 0x800}, {0x2, 0x4, 0x1000}, {0x2, 0x0, 0x1000}, {0x4, 0xfffa, 0x1000}, {0x0, 0x0, 0x800}, {0x1, 0x5, 0x800}, {0x4, 0x4, 0x800}, {0x3, 0x723, 0x1800}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) (async) 00:07:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 71) 00:07:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 477.845621][ T4934] FAULT_INJECTION: forcing a failure. [ 477.845621][ T4934] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 477.853279][ T4932] loop1: detected capacity change from 0 to 512 [ 477.857126][ T4934] CPU: 0 PID: 4934 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 477.859911][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 477.862556][ T4934] Call trace: [ 477.863371][ T4934] dump_backtrace+0x1c4/0x1f0 [ 477.864624][ T4934] show_stack+0x2c/0x3c [ 477.865658][ T4934] dump_stack_lvl+0x104/0x16c [ 477.866935][ T4934] dump_stack+0x1c/0x58 [ 477.868040][ T4934] should_fail_ex+0x1e8/0x20c [ 477.869299][ T4934] should_fail_alloc_page+0x68/0x7c [ 477.870711][ T4934] prepare_alloc_pages+0x128/0x244 [ 477.872079][ T4934] __alloc_pages+0xa4/0x1fc [ 477.873331][ T4934] __folio_alloc+0x1c/0x48 [ 477.874493][ T4934] vma_alloc_folio+0x598/0x9a0 [ 477.875813][ T4934] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 477.877360][ T4934] shmem_get_folio_gfp+0xb54/0x1a00 [ 477.878773][ T4934] shmem_write_begin+0x8c/0x350 [ 477.880098][ T4934] generic_perform_write+0xf0/0x2cc [ 477.881476][ T4934] __generic_file_write_iter+0xd8/0x21c [ 477.883019][ T4934] generic_file_write_iter+0x6c/0x168 [ 477.884449][ T4934] vfs_write+0x2dc/0x46c [ 477.885641][ T4934] ksys_write+0xb4/0x160 [ 477.886770][ T4934] __arm64_sys_write+0x24/0x34 [ 477.888054][ T4934] el0_svc_common+0x138/0x220 [ 477.889291][ T4934] do_el0_svc+0x48/0x104 [ 477.890452][ T4934] el0_svc+0x58/0x150 [ 477.891571][ T4934] el0t_64_sync_handler+0x84/0xf0 [ 477.892963][ T4934] el0t_64_sync+0x190/0x194 00:07:57 executing program 0: semctl$IPC_STAT(0x0, 0xd7010000, 0x2, &(0x7f0000000000)=""/243) 00:07:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 72) [ 477.953669][ T4949] FAULT_INJECTION: forcing a failure. [ 477.953669][ T4949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.955687][ T4932] EXT4-fs (loop1): orphan cleanup on readonly fs [ 477.957410][ T4949] CPU: 1 PID: 4949 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 477.959550][ T4932] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, [ 477.961735][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 477.961744][ T4949] Call trace: [ 477.961747][ T4949] dump_backtrace+0x1c4/0x1f0 [ 477.963950][ T4932] block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 477.966589][ T4949] show_stack+0x2c/0x3c [ 477.966601][ T4949] dump_stack_lvl+0x104/0x16c [ 477.966609][ T4949] dump_stack+0x1c/0x58 [ 477.966616][ T4949] should_fail_ex+0x1e8/0x20c [ 477.966629][ T4949] should_fail+0x14/0x24 [ 477.966640][ T4949] should_fail_usercopy+0x20/0x30 [ 477.966651][ T4949] copy_page_from_iter_atomic+0x2f0/0x9f8 00:07:57 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xad000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 477.966662][ T4949] generic_perform_write+0x144/0x2cc [ 477.966672][ T4949] __generic_file_write_iter+0xd8/0x21c [ 477.966681][ T4949] generic_file_write_iter+0x6c/0x168 [ 477.966691][ T4949] vfs_write+0x2dc/0x46c [ 477.966701][ T4949] ksys_write+0xb4/0x160 [ 477.966710][ T4949] __arm64_sys_write+0x24/0x34 [ 477.966721][ T4949] el0_svc_common+0x138/0x220 [ 477.966728][ T4949] do_el0_svc+0x48/0x104 [ 477.966735][ T4949] el0_svc+0x58/0x150 [ 477.966742][ T4949] el0t_64_sync_handler+0x84/0xf0 [ 477.992491][ T4949] el0t_64_sync+0x190/0x194 [ 478.022909][ T4932] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 478.033949][ T4932] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 478.038117][ T4932] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:07:58 executing program 0: semctl$IPC_STAT(0x0, 0xfeffffff, 0x2, &(0x7f0000000000)=""/243) [ 478.041775][ T4932] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 478.045217][ T4932] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 478.050936][ T4949] loop3: detected capacity change from 0 to 512 [ 478.069847][ T4932] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem 00:07:58 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000), 0x0, &(0x7f0000000080)={r1, r2+10000000}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) [ 478.088592][ T4932] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 478.093137][ T4932] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error 00:07:58 executing program 0: semctl$IPC_STAT(0x0, 0xffffff1f, 0x2, &(0x7f0000000000)=""/243) [ 478.104517][ T4932] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 478.133007][ T4932] EXT4-fs (loop1): 1 truncate cleaned up [ 478.134738][ T4932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 478.142602][ T4949] EXT4-fs (loop3): orphan cleanup on readonly fs [ 478.144757][ T4949] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 478.154759][ T4949] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 478.165609][ T4949] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 478.169168][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.190157][ T4949] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 478.199943][ T4949] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 478.203430][ T4949] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 478.209757][ T4949] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 478.215233][ T4949] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 478.223266][ T4949] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 478.229031][ T4949] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 478.231872][ T4949] EXT4-fs (loop3): 1 truncate cleaned up [ 478.233515][ T4949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 478.271092][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.345205][ T4960] loop2: detected capacity change from 0 to 32768 [ 478.349766][ T4960] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 478.352314][ T4960] BTRFS info (device loop2): using free space tree [ 478.365423][ T4960] BTRFS info (device loop2): enabling ssd optimizations [ 478.367480][ T4960] BTRFS info (device loop2): auto enabling async discard [ 478.374727][ T4960] FAULT_INJECTION: forcing a failure. [ 478.374727][ T4960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.378800][ T4960] CPU: 0 PID: 4960 Comm: syz-executor.2 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 478.381623][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 478.384410][ T4960] Call trace: [ 478.385296][ T4960] dump_backtrace+0x1c4/0x1f0 [ 478.386542][ T4960] show_stack+0x2c/0x3c [ 478.387650][ T4960] dump_stack_lvl+0x104/0x16c [ 478.388945][ T4960] dump_stack+0x1c/0x58 [ 478.390077][ T4960] should_fail_ex+0x1e8/0x20c [ 478.391356][ T4960] should_fail+0x14/0x24 [ 478.392495][ T4960] should_fail_usercopy+0x20/0x30 [ 478.393860][ T4960] iovec_from_user+0xc8/0x43c [ 478.395180][ T4960] __import_iovec+0x60/0x248 [ 478.396439][ T4960] import_iovec+0x6c/0x88 [ 478.397572][ T4960] do_pwritev+0xfc/0x1e8 [ 478.398705][ T4960] __arm64_sys_pwritev2+0x5c/0x90 [ 478.400058][ T4960] el0_svc_common+0x138/0x220 [ 478.401373][ T4960] do_el0_svc+0x48/0x104 [ 478.402534][ T4960] el0_svc+0x58/0x150 [ 478.403620][ T4960] el0t_64_sync_handler+0x84/0xf0 [ 478.404957][ T4960] el0t_64_sync+0x190/0x194 00:07:58 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x40000}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 2) 00:07:58 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000), 0x0, &(0x7f0000000080)={r1, r2+10000000}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 00:07:58 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xbe0c0000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:58 executing program 0: semctl$IPC_STAT(0x0, 0xffffff20, 0x2, &(0x7f0000000000)=""/243) 00:07:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:07:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 73) [ 478.432732][ T4986] FAULT_INJECTION: forcing a failure. [ 478.432732][ T4986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.436408][ T4986] CPU: 0 PID: 4986 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 478.439078][ T4986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 478.441636][ T4986] Call trace: [ 478.442470][ T4986] dump_backtrace+0x1c4/0x1f0 [ 478.443691][ T4986] show_stack+0x2c/0x3c [ 478.444783][ T4986] dump_stack_lvl+0x104/0x16c [ 478.445962][ T4986] dump_stack+0x1c/0x58 [ 478.447072][ T4986] should_fail_ex+0x1e8/0x20c [ 478.448329][ T4986] should_fail+0x14/0x24 [ 478.449470][ T4986] should_fail_usercopy+0x20/0x30 [ 478.450804][ T4986] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 478.452335][ T4986] generic_perform_write+0x144/0x2cc [ 478.453744][ T4986] __generic_file_write_iter+0xd8/0x21c [ 478.455263][ T4986] generic_file_write_iter+0x6c/0x168 [ 478.456673][ T4986] vfs_write+0x2dc/0x46c [ 478.457818][ T4986] ksys_write+0xb4/0x160 [ 478.459000][ T4986] __arm64_sys_write+0x24/0x34 [ 478.460260][ T4986] el0_svc_common+0x138/0x220 [ 478.461619][ T4986] do_el0_svc+0x48/0x104 [ 478.462770][ T4986] el0_svc+0x58/0x150 [ 478.463856][ T4986] el0t_64_sync_handler+0x84/0xf0 [ 478.465211][ T4986] el0t_64_sync+0x190/0x194 00:07:58 executing program 0: semctl$IPC_STAT(0x0, 0xfffffffe, 0x2, &(0x7f0000000000)=""/243) 00:07:58 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000), 0x0, &(0x7f0000000080)={r1, r2+10000000}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) [ 478.497218][ T4986] loop3: detected capacity change from 0 to 512 00:07:58 executing program 0: semctl$IPC_STAT(0x0, 0x20000000000000, 0x2, &(0x7f0000000000)=""/243) 00:07:58 executing program 0: semctl$IPC_STAT(0x0, 0x200000000000000, 0x2, &(0x7f0000000000)=""/243) 00:07:58 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 478.571838][ T4986] EXT4-fs (loop3): orphan cleanup on readonly fs [ 478.589372][ T4986] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 478.591752][ T5003] loop1: detected capacity change from 0 to 512 [ 478.593531][ T4986] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 478.603706][ T4986] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 478.607244][ T4986] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 478.627761][ T4986] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 478.645399][ T4986] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 478.647205][ T5003] EXT4-fs (loop1): orphan cleanup on readonly fs [ 478.649168][ T4986] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 478.650803][ T5003] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 478.652942][ T4986] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 478.665043][ T5003] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 478.665053][ T4986] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 478.671924][ T5003] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 478.675464][ T5003] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 478.679687][ T5003] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 478.682955][ T5003] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 478.689044][ T4986] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 478.692015][ T5003] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 478.694620][ T5003] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 478.698335][ T5003] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 478.701709][ T4986] EXT4-fs (loop3): 1 truncate cleaned up [ 478.701737][ T5003] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 478.703305][ T4986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 478.723964][ T5003] EXT4-fs (loop1): 1 truncate cleaned up [ 478.725663][ T5003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 478.735315][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.752276][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.892980][ T5006] loop2: detected capacity change from 0 to 32768 [ 478.898333][ T5006] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 478.900861][ T5006] BTRFS info (device loop2): using free space tree [ 478.908734][ T5006] BTRFS info (device loop2): enabling ssd optimizations [ 478.910753][ T5006] BTRFS info (device loop2): auto enabling async discard [ 478.920454][ T5006] FAULT_INJECTION: forcing a failure. [ 478.920454][ T5006] name failslab, interval 1, probability 0, space 0, times 0 [ 478.924128][ T5006] CPU: 1 PID: 5006 Comm: syz-executor.2 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 478.926855][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 478.929616][ T5006] Call trace: [ 478.930519][ T5006] dump_backtrace+0x1c4/0x1f0 [ 478.931748][ T5006] show_stack+0x2c/0x3c [ 478.932863][ T5006] dump_stack_lvl+0x104/0x16c [ 478.934071][ T5006] dump_stack+0x1c/0x58 [ 478.935205][ T5006] should_fail_ex+0x1e8/0x20c [ 478.936456][ T5006] __should_failslab+0x68/0x7c [ 478.937758][ T5006] should_failslab+0x10/0x28 [ 478.939047][ T5006] kmem_cache_alloc+0x8c/0x364 [ 478.940316][ T5006] btrfs_alloc_path+0x30/0x3c [ 478.941556][ T5006] btrfs_getxattr+0x38/0x16c [ 478.942779][ T5006] btrfs_xattr_handler_get+0x50/0x68 [ 478.944204][ T5006] __vfs_getxattr+0x258/0x268 [ 478.945456][ T5006] cap_inode_need_killpriv+0x34/0x5c [ 478.946910][ T5006] security_inode_need_killpriv+0x34/0x88 [ 478.948401][ T5006] __file_remove_privs+0xc4/0x270 [ 478.949779][ T5006] file_remove_privs+0x24/0x34 [ 478.951112][ T5006] btrfs_write_check+0x90/0x234 [ 478.952435][ T5006] btrfs_do_write_iter+0x2b0/0x888 [ 478.953834][ T5006] btrfs_file_write_iter+0x2c/0x3c [ 478.955232][ T5006] do_iter_write+0x318/0x560 [ 478.956504][ T5006] do_pwritev+0x130/0x1e8 [ 478.957650][ T5006] __arm64_sys_pwritev2+0x5c/0x90 [ 478.959010][ T5006] el0_svc_common+0x138/0x220 [ 478.960280][ T5006] do_el0_svc+0x48/0x104 [ 478.961401][ T5006] el0_svc+0x58/0x150 [ 478.962483][ T5006] el0t_64_sync_handler+0x84/0xf0 [ 478.963809][ T5006] el0t_64_sync+0x190/0x194 00:07:58 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x40000}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 3) 00:07:58 executing program 5: sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="06e884099a70de400666d8e952c93ca1eecf9973b5bcdde77eede8e73e2cbc23e9e7dc29104d531adfb8786fd86e51d119764b4a5908c8d94870b704ea14690c585a2365623cb9a6f5af4f3de7f99b522fad2532c03151bb3e187e90ebf69ab5de3d4ccccc53350efe996359d5545eb9d04a942910", 0x75, 0x10, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x2, 0x20) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(r0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x989680}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x20, 0x1800}], 0x1, &(0x7f0000000140)={0x0, 0x989680}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) dup(r1) 00:07:58 executing program 0: semctl$IPC_STAT(0x0, 0xb00000000000000, 0x2, &(0x7f0000000000)=""/243) 00:07:58 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3VFrW9cdAPD/lS3HSZzZYXvYAsvMkuGELZIdL4nZQ5bB2J4C27L3zNiyMZYtY8lJbMJw2AcYjNGW9qlPfSn0AxRKPkIpBNr30paW0ibNQ19aFUlXje1ItpPKVmP/fnCic67u1f+cG+vce+656AZwaA1HxLWI6ImI8xExmC7PpCnWG6m23qOHd6dqKYlq9cYXSSTpsub6Sbrt8XSz/oj4x18jelvELa+uzU8Wi4XltJyvLCzly6trF+YWJmcLs4XF8fGxyxNXJi5NjHaknQMRcfXPn7z03zf+cvWd393+8OZn5/6dpMtjQzs6obgh39gn2fq+aKrtj+VOBeuynrQ92W5XBACAXelJz91/XT//H4yelmfrAAAAwIus+seB+txNFQAAADiwMvV7YJNMLr0PYCAymVyucQ/vz+JYplgqV347U1pZnG7cKzsU2czMXLEwmt4rPBTZpFYeq+eflC9uKY/3RZyMiP8PHq2Xc1Ol4nS3L34AAADAIXF8y/j/8WBj/A8AAAAcMEPdrgAAAACw54z/AQAA4OAz/gcAAIAD7W/Xr9dStfn86+lbqyvzpVsXpgvl+dzCylRuqrS8lJstlWbrv9m3sNPnFUulpd/H4sqdfKVQruTLq2s3F0ori5Wbc5segQ0AAADso5O/uv9BEhHrfzhaTzV96XvZrtYM2GuZZ1n5472rB7D/erpdAaBrertdAaBrjPGBZIf32968827n6wIAAOyNkV+Y/4fDarv5//5XT5gfgAPM/D8cXi2O7w75cEhknQHAobf38//V6jNVCAAA6LiBekoyuXQucCAymVwu4kT9sQDZZGauWBiNiJ9ExPuD2SO18lh9y2THMQMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlF9Do+fZyMAAACgKyIynybp879GBs8ObL0+0Jd8PVh/jYjbr914+c5kpbI8Vlv+5ffLK6+kyy/ucLFhu4eNAwAAAB3THKc3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EmPHt6daqb9jPv5nyJiqFX83uivv/ZHNiKOfZVE74btkojo6UD89XsR8fNW8ZNatWIorcXW+JmIONrl+Mc7EB8Os/u1/udaq+9fJobrr62/f71p+qE29n+17mBj/Gb/19Mifl9EnNhljFMP3sq3jX8v4lRv6/6nGT9p0/+eaRvxyKbSv/65ttZuzerrESMtjz/Jplj5ysJSvry6dmFuYXK2MFtYHB8fuzxxZeLSxGh+Zq5YSP9tGeN/v3z72+3af6xN/KEd2n+2zWdu/bv45sGdhz9tZLOt4p87szn+cGzcA0/Hz6THvt+k+dr7I838eiO/0ek33zudZp86ZNXiT7dp/07//+fatH+r83//z0e7XBUA2Afl1bX5yWKxsLznmeG9DyEjs12mdtr6I6jGi5Hpds8EAAB02pOT/l2s3IkJdwAAAAAAAAAAAAAAAAAAAOAp+/FzYltjrnenqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/ouAAD//yiV0Mw=") (fail_nth: 74) 00:07:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 479.004019][ T5028] FAULT_INJECTION: forcing a failure. [ 479.004019][ T5028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.007842][ T5028] CPU: 1 PID: 5028 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 479.010567][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 479.013219][ T5028] Call trace: [ 479.014087][ T5028] dump_backtrace+0x1c4/0x1f0 [ 479.015300][ T5028] show_stack+0x2c/0x3c [ 479.016395][ T5028] dump_stack_lvl+0x104/0x16c [ 479.017636][ T5028] dump_stack+0x1c/0x58 [ 479.018776][ T5028] should_fail_ex+0x1e8/0x20c [ 479.020098][ T5028] should_fail+0x14/0x24 00:07:59 executing program 0: semctl$IPC_STAT(0x0, 0x1000000000000000, 0x2, &(0x7f0000000000)=""/243) [ 479.021231][ T5028] should_fail_usercopy+0x20/0x30 [ 479.022602][ T5028] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 479.024154][ T5028] generic_perform_write+0x144/0x2cc [ 479.025670][ T5028] __generic_file_write_iter+0xd8/0x21c [ 479.027174][ T5028] generic_file_write_iter+0x6c/0x168 [ 479.028659][ T5028] vfs_write+0x2dc/0x46c [ 479.029846][ T5028] ksys_write+0xb4/0x160 [ 479.030982][ T5028] __arm64_sys_write+0x24/0x34 [ 479.032313][ T5028] el0_svc_common+0x138/0x220 [ 479.033620][ T5028] do_el0_svc+0x48/0x104 [ 479.034771][ T5028] el0_svc+0x58/0x150 [ 479.035844][ T5028] el0t_64_sync_handler+0x84/0xf0 [ 479.037224][ T5028] el0t_64_sync+0x190/0x194 [ 479.041810][ T5028] loop3: detected capacity change from 0 to 512 00:07:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 479.093050][ T5028] EXT4-fs (loop3): orphan cleanup on readonly fs [ 479.095557][ T5028] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters 00:07:59 executing program 5: sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="06e884099a70de400666d8e952c93ca1eecf9973b5bcdde77eede8e73e2cbc23e9e7dc29104d531adfb8786fd86e51d119764b4a5908c8d94870b704ea14690c585a2365623cb9a6f5af4f3de7f99b522fad2532c03151bb3e187e90ebf69ab5de3d4ccccc53350efe996359d5545eb9d04a942910", 0x75, 0x10, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x2, 0x20) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(r0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x989680}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x20, 0x1800}], 0x1, &(0x7f0000000140)={0x0, 0x989680}) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) (async) dup(r1) [ 479.106324][ T5028] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 479.121586][ T5028] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 479.121981][ T5041] loop1: detected capacity change from 0 to 512 00:07:59 executing program 5: sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="06e884099a70de400666d8e952c93ca1eecf9973b5bcdde77eede8e73e2cbc23e9e7dc29104d531adfb8786fd86e51d119764b4a5908c8d94870b704ea14690c585a2365623cb9a6f5af4f3de7f99b522fad2532c03151bb3e187e90ebf69ab5de3d4ccccc53350efe996359d5545eb9d04a942910", 0x75, 0x10, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x2, 0x20) semtimedop(r0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(r0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x0, 0x989680}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x20, 0x1800}], 0x1, &(0x7f0000000140)={0x0, 0x989680}) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) dup(r1) 00:07:59 executing program 0: semctl$IPC_STAT(0x0, 0x3f00000000000000, 0x2, &(0x7f0000000000)=""/243) 00:07:59 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 479.152773][ T5041] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 479.155791][ T5028] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 479.196329][ T5028] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 479.205641][ T5028] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 479.212210][ T5041] EXT4-fs (loop1): orphan cleanup on readonly fs [ 479.214479][ T5041] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 479.230770][ T5041] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 479.237922][ T5028] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 479.247510][ T5028] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 479.254237][ T5041] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 479.266488][ T5028] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 479.270083][ T5041] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 479.282564][ T5028] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 479.285388][ T5041] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 479.298121][ T5028] EXT4-fs (loop3): 1 truncate cleaned up [ 479.299787][ T5028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 479.303253][ T5041] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 479.315510][ T5048] loop2: detected capacity change from 0 to 32768 [ 479.316304][ T5041] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 479.319901][ T5041] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 479.325199][ T5041] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 479.329688][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.329885][ T5041] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 479.334906][ T5041] EXT4-fs (loop1): 1 truncate cleaned up [ 479.336637][ T5041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 479.350494][ T5048] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 479.353084][ T5048] BTRFS info (device loop2): using free space tree [ 479.365083][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.434113][ T5048] BTRFS info (device loop2): enabling ssd optimizations [ 479.436067][ T5048] BTRFS info (device loop2): auto enabling async discard [ 479.443698][ T5048] FAULT_INJECTION: forcing a failure. [ 479.443698][ T5048] name failslab, interval 1, probability 0, space 0, times 0 [ 479.451652][ T5048] CPU: 1 PID: 5048 Comm: syz-executor.2 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 479.454491][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 479.457219][ T5048] Call trace: [ 479.458077][ T5048] dump_backtrace+0x1c4/0x1f0 [ 479.459315][ T5048] show_stack+0x2c/0x3c [ 479.460440][ T5048] dump_stack_lvl+0x104/0x16c [ 479.461682][ T5048] dump_stack+0x1c/0x58 [ 479.462827][ T5048] should_fail_ex+0x1e8/0x20c [ 479.464105][ T5048] __should_failslab+0x68/0x7c [ 479.465362][ T5048] should_failslab+0x10/0x28 [ 479.466617][ T5048] __kmem_cache_alloc_node+0x80/0x378 [ 479.468049][ T5048] kmalloc_trace+0x44/0x7c [ 479.469262][ T5048] __iomap_dio_rw+0xf0/0xc08 [ 479.470480][ T5048] btrfs_dio_write+0x64/0x94 [ 479.471685][ T5048] btrfs_do_write_iter+0x38c/0x888 [ 479.473059][ T5048] btrfs_file_write_iter+0x2c/0x3c [ 479.474452][ T5048] do_iter_write+0x318/0x560 [ 479.475711][ T5048] do_pwritev+0x130/0x1e8 [ 479.476879][ T5048] __arm64_sys_pwritev2+0x5c/0x90 [ 479.478232][ T5048] el0_svc_common+0x138/0x220 [ 479.479505][ T5048] do_el0_svc+0x48/0x104 [ 479.480635][ T5048] el0_svc+0x58/0x150 [ 479.481699][ T5048] el0t_64_sync_handler+0x84/0xf0 [ 479.483071][ T5048] el0t_64_sync+0x190/0x194 00:07:59 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$eJzs3UGIVVUcB+DzZhydFGaezMY2YriRFjIFLSKi0Y1TTvBKEKLM0UUhthhkpFYhtHQzEAbu1CAUwZ4QmgvBjUVRtLAgsUULCwIXQhsDF/HevefNfef67nuOY2P6fTFz77n/e84973EX83t57gsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQQlh/66vTVfUtk5v3XT88s+3yzNUd53fOnwyh1j5ey+t7t0+/+d6uva+Pxg6zb2Tber3XkFnX37PG6q6DrX7dP/tCCCPJAMP59upwadTi7qHygJVGr93duOfC9LHTWy/tnpi9c6v80mkZXekJrJT8vrq5eC9NtX8PJWd02oVbr9Z1i2b90xvuP3kRAMB9mWy0N50/R/M/cTvtI2k9aU8l7YWkHf9CWCg2liIbd3WveW5K6ys0z6ksKqzpOc+knr//nXYj7Z+0k6hxH/PsPjWPNKO95jmX1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPkubNpy5V1bdMbt53/fDMtsszV3ec3zl/MoR6+3gtK9c+PnX2bPPc9MSZz8MLB7f/8udw3i9uVxVODr/GnRfHQ9hfqNyMw/41FkKju9BuhuPlwoH2zquxAAAAwOPk6fbvoU47i4MjXe1aO03W2v9FWVgcvXZ3454L08dOb720e2L2zq2lj9foMd7UPcfrtOuLP7VCMI7xNx1vsR5PPVQap1o6Yprnzx1++YOq/qX8X6/O//Gdk/8BAAB4EPJ/Ok61fvn/1NH9c1X9S/l/U9clS/k/zjjm/6GwtPwPAAAAj7KHnf+nSuNU65f/f774z8Wq/qX8PzlY/l9VnHY8+EOc8MHxECb7TR0AAADoIf5/98WPFmJezz45SPP6Hwd+e6dqvFL+nxos/48s66sCAAAAHsRHN9Z+UVUv5f/GYPl/zUOdNQAAAHA/vvz+7bVV9VL+nx0s/8dB85UPWadv4r9C+HQ8hNHWzlxW+DYsvNIpAAAAAMsk5vTnPvx6vuq8Uv6fq37+f3zSQVz/3/X8v9L6/0Ihe+rfSx4MAAAAwJOovJ4/Ph4/++aCXt+/P+j6/7H3X3u36vql/H9ksPw/XNwu5/f/AQAAwBL8377/763SONX6Pf//x++ena7qX8r/C4Pl/7hdV3x5V+L788l4CBtaO/nTBM/Eyx1MCs2RQqGtkfTYFXvkheaaQqFtLunx/HgIz7R2jiSF9bGwkBRuj+WFE0nhp1jI74dO4VxSuBLvtM/G8ummhYuxkC+waMYVFOs6SyKSHn/36tEq3LPHjc7FAQAAnigxPOdZdqS7GdIo26z1O2FtvxOG+p0w3O+EVckJ6Ym9jofZ7kI8Pn18fiJUKOX/E4Pl//hWrM42vdb/h7j+P/9ew876/9lYqCeFZiw00icGNOI1srB7NF6j3sh73N7QKQAAAMBjLX4uMLzC8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ze9+YOu66sOBn+fYfrbj2C5FaukPgaE/mnZTHDslqNqykWSa6Gg03CnVQIiRkLiZG5eExNlIV1Vpw9BQlC0TlaimCRIYg6qoC0xb+Nc1qmgYWmClE4huagUbtJo0+kdMnVC7dXq+9zzfd67fnzR2GnefjxS/8973/L3vT965975zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/4Y7vnP0f1rFrx6/cvtjB7ZsemDLw+/44g2zJ0KYnHu8koUrd3z6vvtO3n/9pfd+Jqzfvfl7T/bm5fJ4WFn705Xf+Uis9cerQjhVCaE7DawZzAI9+f3BWN/rB0O4JMwH6iWmBrISacPh4f4Qjof5QL2qr/SHMFgIbH30oQeP1hJ394fwlhBCNW3j8WrWRn8auKo3CwykgT3dWeC/XsrUA1/uygJw3uKbof6iPznZmGFk4XJNXn89i9axV1Y6vBUxMdI83083LXGnCnrTBybP62krVceSKL09Tnu3LYN3W2k7H/O0Fb9I5d9QXpoPVUPXzqmbtx+YmY2PdIWxsRXNalqi5/mx527fcS7pZfM6jB0YWZTX4YZnP/ri7bu29H3h6LEzn7zna7ecbzd/UNikxfRSq4b8Nbdsnsdoo8+TZfD2K31LGvWlK4Twd7/4+99uFS/N/0daz//jyznedjXkjrW+MJTNzeMjgzHxzFA2NwcAAIBlYznsNT1169NfbVVfaf4/2tnx/3jIP5/MZ6M9HcLGucTh4RAun3s8C9wbm/vAcAhvmktNNgY2JYHTIbxuLnFNvaqkRF8sMZoEnhrKAxuTwJkYmEwCn42BY0ngIzFwMgnsiIHTSWBzDITpxnH8wlA+jo4D/TGwLduIJ+NZCD8biq0l2+pf6lUBAAAsknx22NN4t3Cuw/lmiNPLk/3tMsQzsJtmqCY1pDPY+rSqaQ3d7WroaldDfdyHWg+/VHOlXc2l0zAqjRl+/dRbvhtaKM3/x1vP/6sLdKRSOv4fwo1zf2PurjwyU49vm2zIAAAAAJyHrb93dnereGn+v7Gz8//jPpEVhczhbNwNsXs4hPHGQFbtL5cD2VHvlXkAAAAAloP68fj6sfDp/DY7RTudT5fzT55j/njgf+OC+Z84/My/tupvaf4/2dn5/wONt1knzsRefHw4hL5C4Juxl7XAnNEY+OHbGwP5+M/EDXAkVpWfmFCv6kgssS0GxpPA8WYlHqmXuLwxkD9Z9cYP18cxnZcoBAAAAOCCi7sD4nH5eP7/tx/YM9mqXGn+v+3czv+fmweXTu+fWRnC2u4QVqQ/DDg7kC0MGAODlTzxwEBW14q0qjsHQthQG1ha1Y/y9f+70zUGH+3PqoqBy9/8+eeuqiU+0x/C2mLg++89sb6WmE0C9cZv6g/hjbXRpo3/TV/WeE/a+Cf6QnhDIVCv6gN9IdQa602reqiaX8cgreqvqiFcWgjUq3pbNYSDAYBlKv5XurP44P6Dt+3ePjMztW8JE3Effn+4eXpmamzHnpmd1SZ92pn0uWEZozvLY+rucOxxiaKbZjav7iRd/53geLEv+X780omD442d6Zkb57qehrvXpkO++spyE6HwTeqVGvJAsZL5J7FUf8zfG1aGvgP7p/aNfXj77Oy+iexvp9nXZX/jYaZsW02k22pgob5dBC+P1cVK1s7eunft/oO3rZm+dfuuqV1TH5yYeNu668Ynrnvr+rW1UY1nf9sMdfVCVSdDfelEh+NaxKFeUdyWF+JTQ0JCYrklTl0/e7jVx09p/r+39fw/furET/58fYZmx/9H4mH+7PH5w/zbYuB4p8f/R5odza+fGDCaBA7FwCGH+QEAAHh1iLsj497MuNd64pYn0334DUrz/0Od/f5/kdb/ry9d/85my/xfE0uMN1v/P13mv77+/6Fm6/+ny/zX1/8//gqs/3+gHkg2yc+s/w8AALwaXLj1/9su759eIKCUoe3y/ukFAkoZ2i7j3+kFAs55/f+eEwPzi+4voDT/P9bZ/N/C/QAAAHDx+Mvh//+JVvHS/P94Z/P/C7/+X2h2/v9os8Bks4UBrf8HAADAMtVs/b+//8Z7Hm9VrjT/P9nZ/D+edtHVkDvW+sJQtqZdSNe0e2ao/pMBAAAAWB66wthYT4d5G1ZG3fTy24xLgbZKFx195xWfalVfaf5/urP5f8PvMjY8+9EXb9+1pe+FLxw9duaT93ztlvnj/wAAAMDS6XS/BAAAAAAAAAAAAAAA8Mp7z5HBp1vFS7//DzfOPd7s9//xun/x9wWvbcgda22//l9+f+sN9x+cW7Lw7FAIVxYDu+/afUnIr82/uhh48H3XXFZL3JWW+PoTm39SS7w/DVy/5jXP1xIbksC2uEji69JAvKri86uSQFxe8Z/SQNweJ9NAbx742KpsHJV0W/37YLatKum2+ufBEIYLgfq2OjWYtVFJB3h3EqgP8ENpIA7wN/NAV9qr+1dmvYqBwVj0UyuzXgEAcNGqXws83Dw9MzUev8LH2yu6G2+jhiXL7ixXW+mw+bg02U0zm1d3kl6Rfhedv9Z4T6jWhjBR+rpazFKZG+Xi1NJm0722yZDbrfbW1aRc6lw3XW/zEfVnIxrbsWdmZ0/bgV/bPsu67rZZJkqTnWKWrrlN2kEtHfSlgxF1uG066HK83xXGxlYkuX4pBkdCg3aviE5/r7/Qmn/NXhE1f/u5Rw60qq80/x/pbP5fLY7r+fxiAIfilfX+ZNgy/wAAALC0Prbp5/fEf0e+8WdbW+Utzf9HO5v/xz1Y+aHgbG/H6Xj9/8PDIcxdWn8kC9wbm/vAcAhvmktNxhLZBfXfGUuMZ4F74w6Ta2KJbZONVfXFwMkk8NRQHjidBM7EQL6X4vMh35Xzp0MhrJ9L3dhYYm8sMZIE3hUDo0lgLAbGk8CqGNiYBP5jVR6YTAL/EANhunFb/fWqfFsBAACci3ye1dN4N6TzvJPd7TJU2mUYaJehq12GarsMzUYR738pZuhJTl6pFDL1pLX2J7WUMsSL4Z9zv0oZwiONOdOCpabj+Qf18w0qjRl2/MFv/2FooTT/H+9s/j/QeJu1fibO/+ev/5cFvhm79/F46vhoDPzw7Y2BfMfAmTjZPVKvajIvkU/aj8QSG2NgNAnsjYGNSWDbjXng+GWNgXymXW/8cL3x6bxEIQAAAAAXXNxBEHfTxPn/c4/veqpVudL8f2Nn8//Y3spiYx+Jtf54VQinKvO9qQfWDGaBuB9jMP48/vWDIVxS2MFRLzE1kJXoTRoOD/dnv1DvTav6Sn/244N4f+ujDz14tJa4uz+EtxT2vtTbeLyatdGfBq7qzQIDaWBPdxaIe37qgS93ZQE4b/W9gvEFlZ/qUjeycLkmr79XyzVB0+GV9oEukG+h31wtlWr6QL5Pte7cnrZSdSyJ0tvjtHfbcny3jXi3Fb9I5d9QXpoPVUPXzqmbtx+YmY2PFH/JWrJEz/NCv2RtlV6E1+Ghl9/b9qppB8aTj4/xhcst/DqsxOo2PPvRF2/ftaXvC0ePnfnkPV+7peNuNBE36V/8zmOrf1DYvEutGvLX3LL7PJn0ebIc/xsY9bSFEP7oN/77u63ipfn/ZGfz/+7kds7P48bcPxzC1YWNezZu/l8bzj4HC4HsU/LSciA75P5vQ00/OQEAAGCx1Xd31PcXTOe32Qnh6Ty5nH/yHPPH/RUbF8zfab93Pvvgt1rFS/P/ba3n/31JNx3/d/yfJeL4/4Iu9l3RfekDh85rV3SpOpaE4/8LutjfbY7/L8jxf8f/F+L4fxuO/y/oYn/aSt+S9vrSFUL41TuefnereGn+v7ez+b/1/xZetK++/t+2Zuv/7W22/t8h6/8BAABLqslCc+k8r7R6XylDunpfKUPbBQLbLjFo/b9zXv/vV97zxx8OLZTm/4c6m//Hl8PKYuvLZf2/0RubVHUsBvZaGBAAAICLUbMdBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyyLvvOu9/VKn71+JXbHzuwZdMDWx5+xxdvmD0RwvTc45UsXLnj0/fdd/L+6y+99zNh/e7N33uympfryW//X0PuWOsLQyEcLzwyGBPPDNXuzAe23nD/we5a4uxQCFcWA7vv2n1JLfHZoRBWFwMPvu+ay2qJu9ISX39i809qifengevXvOb5WmJDHqik3f3zVVl3K2l3j64KYbgQqHf3llWNVdXbeEce6Erb+Nxg1kYMDMai9wxmbcTATCwx3RfC2u4QVqRVfauaVbUireqr1ayqFWlVd1RD2BBC6E6reqI3q6o7Hfk/9mZVxcDlb/78c1fVEsd7Q1hbDHz/vSfW1xIfSgL1xn+rN4Q31l4yaeNf6ska70kbv7snhDeEEHrTEv/ZnZXoTUv8qDuESwuBeuO/2x3CwcCrQvzw2Vl8cP/B23Zvn5mZ2reEid68rf5w8/TM1NiOPTM7q0mfmqkU0i/dWY6v6HDsjz13+47a7U0zm1d3ku7Oy/XMdXldT8Pdaxer911L1PvYr4FiJfPPR6n+mL83rAx9B/ZP7Rv78PbZ2X0T2d9Os6/L/sanJNtWE4u1rSptykcvd1utLlaydvbWvWv3H7xtzfSt23dN7Zr64MTE29ZdNz5x3VvXr62Najz7uxhDPdHhuBZxqFd0Fyq5EB8AEhISyy3R1fDpNr5YH+RL9elW+qI/39GeUJ37gC5NK4pZKnOjXIxBb3qZI34531PajmiiNHEoZVnXPsu1pcnEfJb+LMvc97rS5LBYU9fcJo33u8LYWNOvbyONd4ub96eLsHk7TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rMHo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//+l99CO") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x40000}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 4) 00:07:59 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) clock_settime(0x6, &(0x7f0000000000)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) 00:07:59 executing program 0: semctl$IPC_STAT(0x0, 0xd701000000000000, 0x2, &(0x7f0000000000)=""/243) 00:07:59 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf2030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3VFrW9cdAPD/lS3HSZzZYXvYAsvMkuGELZIdL4nZQ5bB2J4C27L3zNiyMZYtY8lJbMJw2AcYjNGW9qlPfSn0AxRKPkIpBNr30paW0ibNQ19aFUlXje1ItpPKVmP/fnCic67u1f+cG+vce+656AZwaA1HxLWI6ImI8xExmC7PpCnWG6m23qOHd6dqKYlq9cYXSSTpsub6Sbrt8XSz/oj4x18jelvELa+uzU8Wi4XltJyvLCzly6trF+YWJmcLs4XF8fGxyxNXJi5NjHaknQMRcfXPn7z03zf+cvWd393+8OZn5/6dpMtjQzs6obgh39gn2fq+aKrtj+VOBeuynrQ92W5XBACAXelJz91/XT//H4yelmfrAAAAwIus+seB+txNFQAAADiwMvV7YJNMLr0PYCAymVyucQ/vz+JYplgqV347U1pZnG7cKzsU2czMXLEwmt4rPBTZpFYeq+eflC9uKY/3RZyMiP8PHq2Xc1Ol4nS3L34AAADAIXF8y/j/8WBj/A8AAAAcMEPdrgAAAACw54z/AQAA4OAz/gcAAIAD7W/Xr9dStfn86+lbqyvzpVsXpgvl+dzCylRuqrS8lJstlWbrv9m3sNPnFUulpd/H4sqdfKVQruTLq2s3F0ori5Wbc5segQ0AAADso5O/uv9BEhHrfzhaTzV96XvZrtYM2GuZZ1n5472rB7D/erpdAaBrertdAaBrjPGBZIf32968827n6wIAAOyNkV+Y/4fDarv5//5XT5gfgAPM/D8cXi2O7w75cEhknQHAobf38//V6jNVCAAA6LiBekoyuXQucCAymVwu4kT9sQDZZGauWBiNiJ9ExPuD2SO18lh9y2THMQMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlF9Do+fZyMAAACgKyIynybp879GBs8ObL0+0Jd8PVh/jYjbr914+c5kpbI8Vlv+5ffLK6+kyy/ucLFhu4eNAwAAAB3THKc3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EmPHt6daqb9jPv5nyJiqFX83uivv/ZHNiKOfZVE74btkojo6UD89XsR8fNW8ZNatWIorcXW+JmIONrl+Mc7EB8Os/u1/udaq+9fJobrr62/f71p+qE29n+17mBj/Gb/19Mifl9EnNhljFMP3sq3jX8v4lRv6/6nGT9p0/+eaRvxyKbSv/65ttZuzerrESMtjz/Jplj5ysJSvry6dmFuYXK2MFtYHB8fuzxxZeLSxGh+Zq5YSP9tGeN/v3z72+3af6xN/KEd2n+2zWdu/bv45sGdhz9tZLOt4p87szn+cGzcA0/Hz6THvt+k+dr7I838eiO/0ek33zudZp86ZNXiT7dp/07//+fatH+r83//z0e7XBUA2Afl1bX5yWKxsLznmeG9DyEjs12mdtr6I6jGi5Hpds8EAAB02pOT/l2s3IkJdwAAAAAAAAAAAAAAAAAAAOAp+/FzYltjrnenqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/ouAAD//yiV0Mw=") (fail_nth: 75) 00:07:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 479.510579][ T5085] FAULT_INJECTION: forcing a failure. [ 479.510579][ T5085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 479.519484][ T5084] loop1: detected capacity change from 0 to 512 00:07:59 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) clock_settime(0x6, &(0x7f0000000000)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) clock_settime(0x6, &(0x7f0000000000)) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) (async) [ 479.548886][ T5085] CPU: 1 PID: 5085 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 00:07:59 executing program 0: semctl$IPC_STAT(0x0, 0xfeffffff00000000, 0x2, &(0x7f0000000000)=""/243) [ 479.551776][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 479.554474][ T5085] Call trace: [ 479.555350][ T5085] dump_backtrace+0x1c4/0x1f0 [ 479.556603][ T5085] show_stack+0x2c/0x3c [ 479.557749][ T5085] dump_stack_lvl+0x104/0x16c [ 479.559028][ T5085] dump_stack+0x1c/0x58 [ 479.560133][ T5085] should_fail_ex+0x1e8/0x20c [ 479.561413][ T5085] should_fail_alloc_page+0x68/0x7c [ 479.562792][ T5085] prepare_alloc_pages+0x128/0x244 [ 479.564193][ T5085] __alloc_pages+0xa4/0x1fc [ 479.565379][ T5085] __folio_alloc+0x1c/0x48 [ 479.566581][ T5085] vma_alloc_folio+0x598/0x9a0 [ 479.567890][ T5085] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 479.569416][ T5085] shmem_get_folio_gfp+0xb54/0x1a00 [ 479.570829][ T5085] shmem_write_begin+0x8c/0x350 [ 479.572117][ T5085] generic_perform_write+0xf0/0x2cc [ 479.573489][ T5085] __generic_file_write_iter+0xd8/0x21c [ 479.575021][ T5085] generic_file_write_iter+0x6c/0x168 [ 479.576457][ T5085] vfs_write+0x2dc/0x46c [ 479.577607][ T5085] ksys_write+0xb4/0x160 [ 479.578796][ T5085] __arm64_sys_write+0x24/0x34 [ 479.580094][ T5085] el0_svc_common+0x138/0x220 [ 479.581361][ T5085] do_el0_svc+0x48/0x104 [ 479.582504][ T5085] el0_svc+0x58/0x150 [ 479.583589][ T5085] el0t_64_sync_handler+0x84/0xf0 [ 479.584953][ T5085] el0t_64_sync+0x190/0x194 00:07:59 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) clock_settime(0x6, &(0x7f0000000000)) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) 00:07:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 76) [ 479.605429][ T5095] FAULT_INJECTION: forcing a failure. [ 479.605429][ T5095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.609248][ T5095] CPU: 1 PID: 5095 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 479.611928][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 479.614480][ T5095] Call trace: [ 479.615357][ T5095] dump_backtrace+0x1c4/0x1f0 [ 479.616581][ T5095] show_stack+0x2c/0x3c [ 479.617682][ T5095] dump_stack_lvl+0x104/0x16c [ 479.618888][ T5095] dump_stack+0x1c/0x58 [ 479.620028][ T5095] should_fail_ex+0x1e8/0x20c [ 479.621275][ T5095] should_fail+0x14/0x24 [ 479.622386][ T5095] should_fail_usercopy+0x20/0x30 [ 479.623742][ T5095] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 479.625287][ T5095] generic_perform_write+0x144/0x2cc [ 479.626681][ T5095] __generic_file_write_iter+0xd8/0x21c [ 479.628111][ T5095] generic_file_write_iter+0x6c/0x168 [ 479.629536][ T5095] vfs_write+0x2dc/0x46c [ 479.630675][ T5095] ksys_write+0xb4/0x160 [ 479.631797][ T5095] __arm64_sys_write+0x24/0x34 [ 479.633050][ T5095] el0_svc_common+0x138/0x220 [ 479.634297][ T5095] do_el0_svc+0x48/0x104 [ 479.635433][ T5095] el0_svc+0x58/0x150 [ 479.636485][ T5095] el0t_64_sync_handler+0x84/0xf0 [ 479.637814][ T5095] el0t_64_sync+0x190/0x194 [ 479.641786][ T5095] loop3: detected capacity change from 0 to 512 00:07:59 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf4090000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:07:59 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x3, 0x1000}], 0x1, &(0x7f0000000100)={r0, r1+60000000}) semtimedop(0x0, &(0x7f0000000040)=[{}, {0x2, 0x7f, 0x1800}, {0x0, 0x0, 0x1800}, {0x0, 0x5, 0x400}, {0x1, 0x6, 0x1800}, {0x1, 0x3}], 0x6, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) [ 479.688911][ T5084] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 479.691538][ T5084] EXT4-fs (loop1): orphan cleanup on readonly fs [ 479.694183][ T5095] EXT4-fs (loop3): orphan cleanup on readonly fs [ 479.697306][ T5095] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 479.713691][ T5095] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 479.735006][ T5095] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 479.750931][ T5095] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 479.770088][ T5095] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 479.782376][ T5095] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 479.793682][ T5084] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 479.798458][ T5095] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 479.808205][ T5095] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 479.819819][ T5095] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 479.828400][ T5095] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 479.832940][ T5084] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 479.840262][ T5095] EXT4-fs (loop3): 1 truncate cleaned up [ 479.843103][ T5095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 479.845342][ T5107] loop2: detected capacity change from 0 to 32768 [ 479.849710][ T5084] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 479.855873][ T5107] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 479.861218][ T5107] BTRFS info (device loop2): using free space tree [ 479.870083][ T5084] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 479.874010][ T5084] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 479.882626][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.884171][ T5084] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 479.892812][ T5084] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 479.902337][ T5084] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 479.907099][ T5084] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 479.913021][ T5084] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 479.921912][ T5084] EXT4-fs (loop1): 1 truncate cleaned up [ 479.923583][ T5084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 479.953359][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.962778][ T5107] BTRFS info (device loop2): enabling ssd optimizations [ 479.964701][ T5107] BTRFS info (device loop2): auto enabling async discard [ 479.977422][ T5107] FAULT_INJECTION: forcing a failure. [ 479.977422][ T5107] name failslab, interval 1, probability 0, space 0, times 0 [ 479.980861][ T5107] CPU: 1 PID: 5107 Comm: syz-executor.2 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 479.983516][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 479.986165][ T5107] Call trace: [ 479.987050][ T5107] dump_backtrace+0x1c4/0x1f0 [ 479.988334][ T5107] show_stack+0x2c/0x3c [ 479.989453][ T5107] dump_stack_lvl+0x104/0x16c [ 479.990706][ T5107] dump_stack+0x1c/0x58 [ 479.991843][ T5107] should_fail_ex+0x1e8/0x20c [ 479.993122][ T5107] __should_failslab+0x68/0x7c [ 479.994413][ T5107] should_failslab+0x10/0x28 [ 479.995653][ T5107] kmem_cache_alloc+0x8c/0x364 [ 479.996946][ T5107] __set_extent_bit+0x104/0x1174 [ 479.998312][ T5107] lock_extent+0x6c/0x164 [ 479.999463][ T5107] btrfs_dio_iomap_begin+0x328/0x828 [ 480.000918][ T5107] iomap_iter+0x2bc/0x400 [ 480.002118][ T5107] __iomap_dio_rw+0x4e0/0xc08 [ 480.003380][ T5107] btrfs_dio_write+0x64/0x94 [ 480.004636][ T5107] btrfs_do_write_iter+0x38c/0x888 [ 480.006016][ T5107] btrfs_file_write_iter+0x2c/0x3c [ 480.007384][ T5107] do_iter_write+0x318/0x560 [ 480.008677][ T5107] do_pwritev+0x130/0x1e8 [ 480.009882][ T5107] __arm64_sys_pwritev2+0x5c/0x90 [ 480.011316][ T5107] el0_svc_common+0x138/0x220 [ 480.012576][ T5107] do_el0_svc+0x48/0x104 [ 480.013731][ T5107] el0_svc+0x58/0x150 [ 480.014819][ T5107] el0t_64_sync_handler+0x84/0xf0 [ 480.016208][ T5107] el0t_64_sync+0x190/0x194 00:08:00 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x3, 0x1000}], 0x1, &(0x7f0000000100)={r0, r1+60000000}) semtimedop(0x0, &(0x7f0000000040)=[{}, {0x2, 0x7f, 0x1800}, {0x0, 0x0, 0x1800}, {0x0, 0x5, 0x400}, {0x1, 0x6, 0x1800}, {0x1, 0x3}], 0x6, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) 00:08:00 executing program 0: semctl$IPC_STAT(0x0, 0xffffff1f00000000, 0x2, &(0x7f0000000000)=""/243) 00:08:00 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:08:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3VFrW9cdAPD/lS3HSZzZYXvYAsvMkuGELZIdL4nZQ5bB2J4C27L3zNiyMZYtY8lJbMJw2AcYjNGW9qlPfSn0AxRKPkIpBNr30paW0ibNQ19aFUlXje1ItpPKVmP/fnCic67u1f+cG+vce+656AZwaA1HxLWI6ImI8xExmC7PpCnWG6m23qOHd6dqKYlq9cYXSSTpsub6Sbrt8XSz/oj4x18jelvELa+uzU8Wi4XltJyvLCzly6trF+YWJmcLs4XF8fGxyxNXJi5NjHaknQMRcfXPn7z03zf+cvWd393+8OZn5/6dpMtjQzs6obgh39gn2fq+aKrtj+VOBeuynrQ92W5XBACAXelJz91/XT//H4yelmfrAAAAwIus+seB+txNFQAAADiwMvV7YJNMLr0PYCAymVyucQ/vz+JYplgqV347U1pZnG7cKzsU2czMXLEwmt4rPBTZpFYeq+eflC9uKY/3RZyMiP8PHq2Xc1Ol4nS3L34AAADAIXF8y/j/8WBj/A8AAAAcMEPdrgAAAACw54z/AQAA4OAz/gcAAIAD7W/Xr9dStfn86+lbqyvzpVsXpgvl+dzCylRuqrS8lJstlWbrv9m3sNPnFUulpd/H4sqdfKVQruTLq2s3F0ori5Wbc5segQ0AAADso5O/uv9BEhHrfzhaTzV96XvZrtYM2GuZZ1n5472rB7D/erpdAaBrertdAaBrjPGBZIf32968827n6wIAAOyNkV+Y/4fDarv5//5XT5gfgAPM/D8cXi2O7w75cEhknQHAobf38//V6jNVCAAA6LiBekoyuXQucCAymVwu4kT9sQDZZGauWBiNiJ9ExPuD2SO18lh9y2THMQMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlF9Do+fZyMAAACgKyIynybp879GBs8ObL0+0Jd8PVh/jYjbr914+c5kpbI8Vlv+5ffLK6+kyy/ucLFhu4eNAwAAAB3THKc3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EmPHt6daqb9jPv5nyJiqFX83uivv/ZHNiKOfZVE74btkojo6UD89XsR8fNW8ZNatWIorcXW+JmIONrl+Mc7EB8Os/u1/udaq+9fJobrr62/f71p+qE29n+17mBj/Gb/19Mifl9EnNhljFMP3sq3jX8v4lRv6/6nGT9p0/+eaRvxyKbSv/65ttZuzerrESMtjz/Jplj5ysJSvry6dmFuYXK2MFtYHB8fuzxxZeLSxGh+Zq5YSP9tGeN/v3z72+3af6xN/KEd2n+2zWdu/bv45sGdhz9tZLOt4p87szn+cGzcA0/Hz6THvt+k+dr7I838eiO/0ek33zudZp86ZNXiT7dp/07//+fatH+r83//z0e7XBUA2Afl1bX5yWKxsLznmeG9DyEjs12mdtr6I6jGi5Hpds8EAAB02pOT/l2s3IkJdwAAAAAAAAAAAAAAAAAAAOAp+/FzYltjrnenqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/ouAAD//yiV0Mw=") (fail_nth: 77) 00:08:00 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x40000}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 5) 00:08:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 480.048329][ T5143] FAULT_INJECTION: forcing a failure. [ 480.048329][ T5143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 480.051859][ T5143] CPU: 0 PID: 5143 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 480.054523][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 480.057253][ T5143] Call trace: [ 480.058128][ T5143] dump_backtrace+0x1c4/0x1f0 [ 480.059388][ T5143] show_stack+0x2c/0x3c [ 480.060470][ T5143] dump_stack_lvl+0x104/0x16c [ 480.061772][ T5143] dump_stack+0x1c/0x58 [ 480.062863][ T5143] should_fail_ex+0x1e8/0x20c [ 480.064125][ T5143] should_fail_alloc_page+0x68/0x7c [ 480.065552][ T5143] prepare_alloc_pages+0x128/0x244 [ 480.066956][ T5143] __alloc_pages+0xa4/0x1fc [ 480.068184][ T5143] __folio_alloc+0x1c/0x48 [ 480.069291][ T5144] loop1: detected capacity change from 0 to 512 [ 480.069369][ T5143] vma_alloc_folio+0x598/0x9a0 [ 480.072388][ T5143] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 480.073923][ T5143] shmem_get_folio_gfp+0xb54/0x1a00 [ 480.075338][ T5143] shmem_write_begin+0x8c/0x350 [ 480.076635][ T5143] generic_perform_write+0xf0/0x2cc [ 480.078049][ T5143] __generic_file_write_iter+0xd8/0x21c [ 480.079554][ T5143] generic_file_write_iter+0x6c/0x168 [ 480.081040][ T5143] vfs_write+0x2dc/0x46c [ 480.082177][ T5143] ksys_write+0xb4/0x160 [ 480.083330][ T5143] __arm64_sys_write+0x24/0x34 [ 480.084618][ T5143] el0_svc_common+0x138/0x220 [ 480.085932][ T5143] do_el0_svc+0x48/0x104 [ 480.087097][ T5143] el0_svc+0x58/0x150 [ 480.088172][ T5143] el0t_64_sync_handler+0x84/0xf0 [ 480.089581][ T5143] el0t_64_sync+0x190/0x194 00:08:00 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x3, 0x1000}], 0x1, &(0x7f0000000100)={r0, r1+60000000}) semtimedop(0x0, &(0x7f0000000040)=[{}, {0x2, 0x7f, 0x1800}, {0x0, 0x0, 0x1800}, {0x0, 0x5, 0x400}, {0x1, 0x6, 0x1800}, {0x1, 0x3}], 0x6, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x3, 0x1000}], 0x1, &(0x7f0000000100)={r0, r1+60000000}) (async) semtimedop(0x0, &(0x7f0000000040)=[{}, {0x2, 0x7f, 0x1800}, {0x0, 0x0, 0x1800}, {0x0, 0x5, 0x400}, {0x1, 0x6, 0x1800}, {0x1, 0x3}], 0x6, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) (async) 00:08:00 executing program 0: semctl$IPC_STAT(0x0, 0xffffff2000000000, 0x2, &(0x7f0000000000)=""/243) 00:08:00 executing program 0: semctl$IPC_STAT(0x0, 0xffffffff00000000, 0x2, &(0x7f0000000000)=""/243) 00:08:00 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff7f0000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:08:00 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x3, &(0x7f0000000000)=""/243) 00:08:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 78) 00:08:00 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex_waitv(&(0x7f00000005c0)=[{0xffffffffffff97ff, &(0x7f0000000000), 0x82}, {0x1, &(0x7f0000000040)=0xff, 0x2}, {0x7d, &(0x7f0000000080)=0x100, 0x82}, {0x1000, &(0x7f00000000c0)=0x9133, 0x2}, {0x51, &(0x7f0000000100)=0x6, 0x2}, {0x2, &(0x7f0000000140)=0x10000}, {0x8, &(0x7f0000000180)=0x1, 0x82}, {0x9, &(0x7f00000001c0)=0x3, 0x2}, {0x5, &(0x7f0000000200)=0x6, 0x2}, {0x6, &(0x7f0000000240)=0x7, 0x82}, {0x5, &(0x7f0000000280)=0x100000001, 0x2}, {0x3ff, &(0x7f00000002c0)=0x5a, 0x2}, {0x400, &(0x7f0000000300)=0x7fffffffffffffff, 0x82}, {0x3, &(0x7f0000000340), 0x82}, {0x401, &(0x7f0000000380)=0xff, 0x2}, {0x80, &(0x7f00000003c0)=0x7fff, 0x82}, {0x7a, &(0x7f0000000400)=0x3, 0x82}, {0xc41, &(0x7f0000000440)=0x1000, 0x82}, {0x8000000000000001, &(0x7f0000000480)=0x6, 0x2}, {0x8, &(0x7f0000000500)=0x81, 0xead6b87a99d7b068}, {0x0, &(0x7f0000000540)=0xfff, 0x82}, {0x6, &(0x7f0000000580)=0x3, 0x2}], 0x16, 0x0, &(0x7f0000000800)={0x77359400}, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f0000000840)=[{0x1, 0x2, 0x800}, {0x4, 0x4, 0x1800}, {0x1, 0x7ff, 0x3f8132e6fa4b6ed3}, {0x4, 0xff}, {0x3, 0x7, 0x800}, {0x1, 0x9, 0x1000}, {0x0, 0x7, 0x800}, {0x1, 0x3, 0x1000}, {0x4, 0x0, 0x800}], 0x9, &(0x7f0000000880)={0x0, 0x989680}) [ 480.178643][ T5144] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 480.181357][ T5144] EXT4-fs (loop1): orphan cleanup on readonly fs [ 480.183520][ T5144] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 480.204078][ T5144] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 480.223809][ T5165] FAULT_INJECTION: forcing a failure. [ 480.223809][ T5165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.227723][ T5165] CPU: 1 PID: 5165 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 480.230369][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 480.232950][ T5165] Call trace: [ 480.233775][ T5165] dump_backtrace+0x1c4/0x1f0 [ 480.234997][ T5165] show_stack+0x2c/0x3c [ 480.236057][ T5165] dump_stack_lvl+0x104/0x16c [ 480.237289][ T5165] dump_stack+0x1c/0x58 [ 480.238392][ T5165] should_fail_ex+0x1e8/0x20c [ 480.239621][ T5165] should_fail+0x14/0x24 [ 480.240754][ T5165] should_fail_usercopy+0x20/0x30 [ 480.242125][ T5165] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 480.243641][ T5165] generic_perform_write+0x144/0x2cc [ 480.245090][ T5165] __generic_file_write_iter+0xd8/0x21c [ 480.246564][ T5165] generic_file_write_iter+0x6c/0x168 [ 480.248066][ T5165] vfs_write+0x2dc/0x46c [ 480.249199][ T5165] ksys_write+0xb4/0x160 [ 480.250347][ T5165] __arm64_sys_write+0x24/0x34 [ 480.251608][ T5165] el0_svc_common+0x138/0x220 [ 480.252871][ T5165] do_el0_svc+0x48/0x104 [ 480.254016][ T5165] el0_svc+0x58/0x150 [ 480.255060][ T5165] el0t_64_sync_handler+0x84/0xf0 [ 480.256451][ T5165] el0t_64_sync+0x190/0x194 [ 480.256665][ T5144] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error 00:08:00 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex_waitv(&(0x7f00000005c0)=[{0xffffffffffff97ff, &(0x7f0000000000), 0x82}, {0x1, &(0x7f0000000040)=0xff, 0x2}, {0x7d, &(0x7f0000000080)=0x100, 0x82}, {0x1000, &(0x7f00000000c0)=0x9133, 0x2}, {0x51, &(0x7f0000000100)=0x6, 0x2}, {0x2, &(0x7f0000000140)=0x10000}, {0x8, &(0x7f0000000180)=0x1, 0x82}, {0x9, &(0x7f00000001c0)=0x3, 0x2}, {0x5, &(0x7f0000000200)=0x6, 0x2}, {0x6, &(0x7f0000000240)=0x7, 0x82}, {0x5, &(0x7f0000000280)=0x100000001, 0x2}, {0x3ff, &(0x7f00000002c0)=0x5a, 0x2}, {0x400, &(0x7f0000000300)=0x7fffffffffffffff, 0x82}, {0x3, &(0x7f0000000340), 0x82}, {0x401, &(0x7f0000000380)=0xff, 0x2}, {0x80, &(0x7f00000003c0)=0x7fff, 0x82}, {0x7a, &(0x7f0000000400)=0x3, 0x82}, {0xc41, &(0x7f0000000440)=0x1000, 0x82}, {0x8000000000000001, &(0x7f0000000480)=0x6, 0x2}, {0x8, &(0x7f0000000500)=0x81, 0xead6b87a99d7b068}, {0x0, &(0x7f0000000540)=0xfff, 0x82}, {0x6, &(0x7f0000000580)=0x3, 0x2}], 0x16, 0x0, &(0x7f0000000800)={0x77359400}, 0x1) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(0x0, &(0x7f0000000840)=[{0x1, 0x2, 0x800}, {0x4, 0x4, 0x1800}, {0x1, 0x7ff, 0x3f8132e6fa4b6ed3}, {0x4, 0xff}, {0x3, 0x7, 0x800}, {0x1, 0x9, 0x1000}, {0x0, 0x7, 0x800}, {0x1, 0x3, 0x1000}, {0x4, 0x0, 0x800}], 0x9, &(0x7f0000000880)={0x0, 0x989680}) [ 480.265943][ T5144] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 480.269642][ T5144] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 480.282619][ T5144] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:08:00 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0xb, &(0x7f0000000000)=""/243) [ 480.298959][ T5165] loop3: detected capacity change from 0 to 512 [ 480.304553][ T5144] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem 00:08:00 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 480.321928][ T5144] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 480.326380][ T5144] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 480.333550][ T5144] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 480.346373][ T5144] EXT4-fs (loop1): 1 truncate cleaned up [ 480.347920][ T5144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 480.370606][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.370818][ T5165] EXT4-fs (loop3): orphan cleanup on readonly fs [ 480.381267][ T5165] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 480.385372][ T5165] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 480.395680][ T5165] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 480.409813][ T5165] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 480.422640][ T5165] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 480.443425][ T5165] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 480.447129][ T5165] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 480.449663][ T5165] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 480.453005][ T5165] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 480.461791][ T5165] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 480.464627][ T5165] EXT4-fs (loop3): 1 truncate cleaned up [ 480.466100][ T5165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 480.485831][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.584835][ T5174] loop2: detected capacity change from 0 to 32768 [ 480.591241][ T5174] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 480.593691][ T5174] BTRFS info (device loop2): using free space tree [ 480.602470][ T5174] BTRFS info (device loop2): enabling ssd optimizations [ 480.604518][ T5174] BTRFS info (device loop2): auto enabling async discard [ 480.625866][ T5174] FAULT_INJECTION: forcing a failure. [ 480.625866][ T5174] name failslab, interval 1, probability 0, space 0, times 0 [ 480.634629][ T5174] CPU: 1 PID: 5174 Comm: syz-executor.2 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 480.637438][ T5174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 480.640136][ T5174] Call trace: [ 480.641014][ T5174] dump_backtrace+0x1c4/0x1f0 [ 480.642287][ T5174] show_stack+0x2c/0x3c [ 480.643406][ T5174] dump_stack_lvl+0x104/0x16c [ 480.644680][ T5174] dump_stack+0x1c/0x58 [ 480.645811][ T5174] should_fail_ex+0x1e8/0x20c [ 480.647060][ T5174] __should_failslab+0x68/0x7c [ 480.648390][ T5174] should_failslab+0x10/0x28 [ 480.649599][ T5174] kmem_cache_alloc+0x8c/0x364 [ 480.650875][ T5174] alloc_extent_map+0x24/0x68 [ 480.652149][ T5174] btrfs_get_extent+0x110/0x7e0 [ 480.653455][ T5174] btrfs_dio_iomap_begin+0x468/0x828 [ 480.654885][ T5174] iomap_iter+0x2bc/0x400 [ 480.656062][ T5174] __iomap_dio_rw+0x4e0/0xc08 [ 480.657342][ T5174] btrfs_dio_write+0x64/0x94 [ 480.658578][ T5174] btrfs_do_write_iter+0x38c/0x888 [ 480.660003][ T5174] btrfs_file_write_iter+0x2c/0x3c [ 480.661389][ T5174] do_iter_write+0x318/0x560 [ 480.662641][ T5174] do_pwritev+0x130/0x1e8 [ 480.663808][ T5174] __arm64_sys_pwritev2+0x5c/0x90 [ 480.665153][ T5174] el0_svc_common+0x138/0x220 [ 480.666398][ T5174] do_el0_svc+0x48/0x104 [ 480.667539][ T5174] el0_svc+0x58/0x150 [ 480.668623][ T5174] el0t_64_sync_handler+0x84/0xf0 [ 480.669980][ T5174] el0t_64_sync+0x190/0x194 00:08:00 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0xc, &(0x7f0000000000)=""/243) 00:08:00 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x40000}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 6) 00:08:00 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:08:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 79) 00:08:00 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) futex_waitv(&(0x7f00000005c0)=[{0xffffffffffff97ff, &(0x7f0000000000), 0x82}, {0x1, &(0x7f0000000040)=0xff, 0x2}, {0x7d, &(0x7f0000000080)=0x100, 0x82}, {0x1000, &(0x7f00000000c0)=0x9133, 0x2}, {0x51, &(0x7f0000000100)=0x6, 0x2}, {0x2, &(0x7f0000000140)=0x10000}, {0x8, &(0x7f0000000180)=0x1, 0x82}, {0x9, &(0x7f00000001c0)=0x3, 0x2}, {0x5, &(0x7f0000000200)=0x6, 0x2}, {0x6, &(0x7f0000000240)=0x7, 0x82}, {0x5, &(0x7f0000000280)=0x100000001, 0x2}, {0x3ff, &(0x7f00000002c0)=0x5a, 0x2}, {0x400, &(0x7f0000000300)=0x7fffffffffffffff, 0x82}, {0x3, &(0x7f0000000340), 0x82}, {0x401, &(0x7f0000000380)=0xff, 0x2}, {0x80, &(0x7f00000003c0)=0x7fff, 0x82}, {0x7a, &(0x7f0000000400)=0x3, 0x82}, {0xc41, &(0x7f0000000440)=0x1000, 0x82}, {0x8000000000000001, &(0x7f0000000480)=0x6, 0x2}, {0x8, &(0x7f0000000500)=0x81, 0xead6b87a99d7b068}, {0x0, &(0x7f0000000540)=0xfff, 0x82}, {0x6, &(0x7f0000000580)=0x3, 0x2}], 0x16, 0x0, &(0x7f0000000800)={0x77359400}, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f0000000840)=[{0x1, 0x2, 0x800}, {0x4, 0x4, 0x1800}, {0x1, 0x7ff, 0x3f8132e6fa4b6ed3}, {0x4, 0xff}, {0x3, 0x7, 0x800}, {0x1, 0x9, 0x1000}, {0x0, 0x7, 0x800}, {0x1, 0x3, 0x1000}, {0x4, 0x0, 0x800}], 0x9, &(0x7f0000000880)={0x0, 0x989680}) 00:08:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$eJzs3VFrW9cdAPD/lS3HSZzZIXvYAsvMkuGELZIdL4nZQ5bB2J4C27L3zNiyMZYtY8lJbMJw2AcYjLGN7WlPexnsAwxGPkIpBNr30paW0ibNQ19aFUlXjexItpPKVmP/fnCkc47u9f8cJTr3Hp2LbgBH1mhE3IyIvoi4FBHDaX0mTWdqD5uN7Z4+eTBTS0lUq7c/TiJJ65rb96f7nmzsEoMR8dtfPa9vVV7fWJwuFguraTlfWVrJl9c3Li8sTc8X5gvLk5MT16auT12dGu9KP4ci4sYv3v/rn/79yxv///G9d+58ePEPSVofLf3ohmJLPqk/ZuvvRVPt/VjtVrAe60v7k+11QwAA2JO+9Nz9B/Xz/+Hoa3u2DgAAALzOqj8bqq/dVAEAAIBDK1O/BjbJ5NLrAIYik8nlGtfwfjtOZIqlcuVHc6W15dnGtbIjkc3MLRQL4+m1wiORTWrliXr+efnKtvLkQMTpiPjL8PF6OTdTKs72+ssPAAAAOCJObpv/PxtuzP8BAACAQ2ak1w0AAAAA9p35PwAAABx+5v8AAABwqP361q1aqjbvfz17d31tsXT38myhvJhbWpvJzZRWV3LzpdJ8/Tf7lnb7e8VSaeUnsbx2P18plCv58vrGnaXS2nLlzsKWW2ADAAAAB+j09x+9nUTE5k+P11PNQPpatqctA/Zb5mU2fm//2gEcvL5eNwDomf5eNwDoGXN8INnl9Y4X77zR/bYAAAD7Y+y71v/hqNpp/X/wH6esD8AhZv0fjq42x3eHfDgiss4A4Mjb//X/avWlGgQAAHTdUD0lmVy6FjgUmUwuF3GqfluAbDK3UCyMR8S3IuKt4eyxWnmivmey65wBAAAAAAAAAAAAAAAAAAAAAAAAAGioVpOovoJnr7ITAAAA0BMRmQ+S9P5fY8MXhrZ/PzCQfDZcf46Ie/+8/bf705XK6kSt/pOv6it/T+uv7PJlw043GwcAAAC6pjlPb87jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCbnj55MNNMBxn3o59HxEi7+P0xWH8ejGxEnPg0if6W/ZKI6OtC/M2HEfGddvGTWrNiJG3F9viZiDje4/gnuxAfjrJHtfHnZrvPXyZG68/tP3/9afq6Wse/2nDQGr85/vW1iT8QEaf2GOPs4//mO8Z/GHG2v/3404yfdBh/z3eMeGxL6fe/29jotGX1XxFjbY8/yZZY+crSSr68vnF5YWl6vjBfWJ6cnLg2dX3q6tR4fm6hWEgf28b48/f+98VO/T/RIf7ILv2/0OFvbv9/8fnj+0/ONLLZdvEvnt8afzRa34EX42fSY98P03zt9bFmfrORb3XuP2+eS7MvHLJq8Wc79H+3f/+LHfq/3aXf/PHdPW4KAByA8vrG4nSxWFjd98zo/oeQkdkpUztt/QY04/XI9HpkAgAAuu35Sf8eNu7GgjsAAAAAAAAAAAAAAAAAAADwgoP4ObHtMTd701UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB19GQAA//+9PtBk") [ 480.695920][ T5198] FAULT_INJECTION: forcing a failure. [ 480.695920][ T5198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 480.698669][ T5203] loop1: detected capacity change from 0 to 512 [ 480.700063][ T5198] CPU: 0 PID: 5198 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 480.704113][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 480.706845][ T5198] Call trace: [ 480.707761][ T5198] dump_backtrace+0x1c4/0x1f0 [ 480.709067][ T5198] show_stack+0x2c/0x3c [ 480.710198][ T5198] dump_stack_lvl+0x104/0x16c [ 480.711458][ T5198] dump_stack+0x1c/0x58 [ 480.712636][ T5198] should_fail_ex+0x1e8/0x20c [ 480.713909][ T5198] should_fail_alloc_page+0x68/0x7c [ 480.715348][ T5198] prepare_alloc_pages+0x128/0x244 [ 480.716729][ T5198] __alloc_pages+0xa4/0x1fc [ 480.717953][ T5198] __folio_alloc+0x1c/0x48 [ 480.719179][ T5198] vma_alloc_folio+0x598/0x9a0 [ 480.720470][ T5198] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 480.722039][ T5198] shmem_get_folio_gfp+0xb54/0x1a00 [ 480.723426][ T5198] shmem_write_begin+0x8c/0x350 [ 480.724753][ T5198] generic_perform_write+0xf0/0x2cc [ 480.726201][ T5198] __generic_file_write_iter+0xd8/0x21c [ 480.727706][ T5198] generic_file_write_iter+0x6c/0x168 [ 480.729220][ T5198] vfs_write+0x2dc/0x46c [ 480.730358][ T5198] ksys_write+0xb4/0x160 [ 480.731521][ T5198] __arm64_sys_write+0x24/0x34 [ 480.732854][ T5198] el0_svc_common+0x138/0x220 [ 480.734112][ T5198] do_el0_svc+0x48/0x104 [ 480.735243][ T5198] el0_svc+0x58/0x150 [ 480.736321][ T5198] el0t_64_sync_handler+0x84/0xf0 [ 480.737699][ T5198] el0t_64_sync+0x190/0x194 00:08:00 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0xd, &(0x7f0000000000)=""/243) [ 480.790319][ T5203] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 480.793056][ T5203] EXT4-fs (loop1): orphan cleanup on readonly fs [ 480.795353][ T5203] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 480.805823][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 480.810093][ T5203] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error 00:08:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 80) [ 480.813773][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:08:00 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 480.835907][ T5203] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 480.839860][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 480.843921][ T5203] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 480.846648][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents 00:08:00 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) semtimedop(0x0, &(0x7f00000004c0), 0x0, 0x0) r0 = semget(0x1, 0x2, 0x4e80e69c62f2f91e) semtimedop(r0, &(0x7f0000000100)=[{0x4, 0x1}], 0x1, &(0x7f0000000140)) r1 = semget$private(0x0, 0x4, 0x0) semtimedop(r1, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(r1, &(0x7f0000000080)=[{0x3, 0x9, 0x1c00}, {0x1, 0x5, 0x1800}, {0x1, 0x7, 0x1000}, {0x4, 0x1, 0x1800}, {0x1, 0x5be2, 0x800}, {0x0, 0x1, 0x800}], 0x6, &(0x7f0000000180)={0x77359400}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) [ 480.884093][ T5203] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 480.896080][ T5203] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 480.910353][ T5203] EXT4-fs (loop1): 1 truncate cleaned up 00:08:00 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0xe, &(0x7f0000000000)=""/243) [ 480.925554][ T5215] FAULT_INJECTION: forcing a failure. [ 480.925554][ T5215] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:08:00 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) semtimedop(0x0, &(0x7f00000004c0), 0x0, 0x0) (async) r0 = semget(0x1, 0x2, 0x4e80e69c62f2f91e) semtimedop(r0, &(0x7f0000000100)=[{0x4, 0x1}], 0x1, &(0x7f0000000140)) (async) r1 = semget$private(0x0, 0x4, 0x0) semtimedop(r1, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(r1, &(0x7f0000000080)=[{0x3, 0x9, 0x1c00}, {0x1, 0x5, 0x1800}, {0x1, 0x7, 0x1000}, {0x4, 0x1, 0x1800}, {0x1, 0x5be2, 0x800}, {0x0, 0x1, 0x800}], 0x6, &(0x7f0000000180)={0x77359400}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) [ 480.929316][ T5215] CPU: 1 PID: 5215 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 480.932065][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 480.934781][ T5215] Call trace: [ 480.935639][ T5215] dump_backtrace+0x1c4/0x1f0 [ 480.936902][ T5215] show_stack+0x2c/0x3c [ 480.938079][ T5215] dump_stack_lvl+0x104/0x16c [ 480.939360][ T5215] dump_stack+0x1c/0x58 [ 480.940504][ T5215] should_fail_ex+0x1e8/0x20c [ 480.941659][ T5203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 480.941774][ T5215] should_fail+0x14/0x24 [ 480.946044][ T5215] should_fail_usercopy+0x20/0x30 [ 480.947401][ T5215] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 480.948968][ T5215] generic_perform_write+0x144/0x2cc [ 480.950411][ T5215] __generic_file_write_iter+0xd8/0x21c [ 480.951923][ T5215] generic_file_write_iter+0x6c/0x168 [ 480.953402][ T5215] vfs_write+0x2dc/0x46c [ 480.954534][ T5215] ksys_write+0xb4/0x160 [ 480.955687][ T5215] __arm64_sys_write+0x24/0x34 [ 480.957010][ T5215] el0_svc_common+0x138/0x220 [ 480.958292][ T5215] do_el0_svc+0x48/0x104 [ 480.959432][ T5215] el0_svc+0x58/0x150 [ 480.960503][ T5215] el0t_64_sync_handler+0x84/0xf0 [ 480.961848][ T5215] el0t_64_sync+0x190/0x194 [ 480.973882][ T5215] loop3: detected capacity change from 0 to 512 00:08:00 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0xf, &(0x7f0000000000)=""/243) [ 480.987898][ T5215] EXT4-fs (loop3): orphan cleanup on readonly fs [ 480.990242][ T5215] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 480.994418][ T5215] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 480.998502][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.001482][ T5215] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 481.056393][ T5215] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 481.066543][ T5215] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 481.092054][ T5215] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 481.095636][ T5215] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 481.098914][ T5215] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 481.102518][ T5215] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 481.105814][ T5215] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 481.114167][ T5215] EXT4-fs (loop3): 1 truncate cleaned up [ 481.115843][ T5215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 481.126850][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.146495][ T5212] loop2: detected capacity change from 0 to 32768 [ 481.150134][ T5212] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 481.152640][ T5212] BTRFS info (device loop2): using free space tree [ 481.161848][ T5212] BTRFS info (device loop2): enabling ssd optimizations [ 481.163850][ T5212] BTRFS info (device loop2): auto enabling async discard [ 481.180355][ T5212] FAULT_INJECTION: forcing a failure. [ 481.180355][ T5212] name failslab, interval 1, probability 0, space 0, times 0 [ 481.183851][ T5212] CPU: 0 PID: 5212 Comm: syz-executor.2 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 481.186662][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 481.189375][ T5212] Call trace: [ 481.190250][ T5212] dump_backtrace+0x1c4/0x1f0 [ 481.191511][ T5212] show_stack+0x2c/0x3c [ 481.192638][ T5212] dump_stack_lvl+0x104/0x16c [ 481.193914][ T5212] dump_stack+0x1c/0x58 [ 481.195021][ T5212] should_fail_ex+0x1e8/0x20c [ 481.196291][ T5212] __should_failslab+0x68/0x7c [ 481.197596][ T5212] should_failslab+0x10/0x28 [ 481.198822][ T5212] kmem_cache_alloc+0x8c/0x364 [ 481.200066][ T5212] btrfs_alloc_path+0x30/0x3c [ 481.201293][ T5212] btrfs_get_extent+0x138/0x7e0 [ 481.202607][ T5212] btrfs_dio_iomap_begin+0x468/0x828 [ 481.204006][ T5212] iomap_iter+0x2bc/0x400 [ 481.205171][ T5212] __iomap_dio_rw+0x4e0/0xc08 [ 481.206474][ T5212] btrfs_dio_write+0x64/0x94 [ 481.207684][ T5212] btrfs_do_write_iter+0x38c/0x888 [ 481.209081][ T5212] btrfs_file_write_iter+0x2c/0x3c [ 481.210442][ T5212] do_iter_write+0x318/0x560 [ 481.211721][ T5212] do_pwritev+0x130/0x1e8 [ 481.212922][ T5212] __arm64_sys_pwritev2+0x5c/0x90 [ 481.214242][ T5212] el0_svc_common+0x138/0x220 [ 481.215476][ T5212] do_el0_svc+0x48/0x104 [ 481.216574][ T5212] el0_svc+0x58/0x150 [ 481.217658][ T5212] el0t_64_sync_handler+0x84/0xf0 [ 481.219013][ T5212] el0t_64_sync+0x190/0x194 00:08:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") 00:08:01 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x40000}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 7) 00:08:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 81) 00:08:01 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:08:01 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) semtimedop(0x0, &(0x7f00000004c0), 0x0, 0x0) (async) r0 = semget(0x1, 0x2, 0x4e80e69c62f2f91e) semtimedop(r0, &(0x7f0000000100)=[{0x4, 0x1}], 0x1, &(0x7f0000000140)) (async) r1 = semget$private(0x0, 0x4, 0x0) semtimedop(r1, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(r1, &(0x7f0000000080)=[{0x3, 0x9, 0x1c00}, {0x1, 0x5, 0x1800}, {0x1, 0x7, 0x1000}, {0x4, 0x1, 0x1800}, {0x1, 0x5be2, 0x800}, {0x0, 0x1, 0x800}], 0x6, &(0x7f0000000180)={0x77359400}) (async, rerun: 32) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (rerun: 32) 00:08:01 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x10, &(0x7f0000000000)=""/243) [ 481.240838][ T5247] loop1: detected capacity change from 0 to 512 [ 481.251964][ T5253] FAULT_INJECTION: forcing a failure. [ 481.251964][ T5253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 481.255579][ T5253] CPU: 0 PID: 5253 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 481.258344][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 481.261109][ T5253] Call trace: [ 481.261979][ T5253] dump_backtrace+0x1c4/0x1f0 [ 481.263213][ T5253] show_stack+0x2c/0x3c [ 481.264336][ T5253] dump_stack_lvl+0x104/0x16c [ 481.265607][ T5253] dump_stack+0x1c/0x58 [ 481.266703][ T5253] should_fail_ex+0x1e8/0x20c [ 481.267949][ T5253] should_fail_alloc_page+0x68/0x7c [ 481.269378][ T5253] prepare_alloc_pages+0x128/0x244 [ 481.270771][ T5253] __alloc_pages+0xa4/0x1fc [ 481.272003][ T5253] __folio_alloc+0x1c/0x48 [ 481.273178][ T5253] vma_alloc_folio+0x598/0x9a0 [ 481.274493][ T5253] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 481.276046][ T5253] shmem_get_folio_gfp+0xb54/0x1a00 [ 481.277491][ T5253] shmem_write_begin+0x8c/0x350 [ 481.278782][ T5253] generic_perform_write+0xf0/0x2cc [ 481.280248][ T5253] __generic_file_write_iter+0xd8/0x21c [ 481.281775][ T5253] generic_file_write_iter+0x6c/0x168 [ 481.283222][ T5253] vfs_write+0x2dc/0x46c [ 481.284392][ T5253] ksys_write+0xb4/0x160 [ 481.285522][ T5253] __arm64_sys_write+0x24/0x34 [ 481.286882][ T5253] el0_svc_common+0x138/0x220 [ 481.288135][ T5253] do_el0_svc+0x48/0x104 [ 481.289300][ T5253] el0_svc+0x58/0x150 [ 481.290364][ T5253] el0t_64_sync_handler+0x84/0xf0 [ 481.291740][ T5253] el0t_64_sync+0x190/0x194 00:08:01 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x1, 0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x3, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0x4, 0x1800}, {0x1, 0x0, 0x1000}, {0x4, 0x7, 0x1000}, {0x0, 0xffff, 0x800}], 0x6, &(0x7f0000000080)={r1, r2+60000000}) 00:08:01 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x11, &(0x7f0000000000)=""/243) [ 481.307282][ T5247] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 481.342204][ T5247] EXT4-fs (loop1): orphan cleanup on readonly fs 00:08:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 82) 00:08:01 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:08:01 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) r0 = semget$private(0x0, 0x1, 0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x3, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0x4, 0x1800}, {0x1, 0x0, 0x1000}, {0x4, 0x7, 0x1000}, {0x0, 0xffff, 0x800}], 0x6, &(0x7f0000000080)={r1, r2+60000000}) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semget$private(0x0, 0x1, 0x4) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x3, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0x4, 0x1800}, {0x1, 0x0, 0x1000}, {0x4, 0x7, 0x1000}, {0x0, 0xffff, 0x800}], 0x6, &(0x7f0000000080)={r1, r2+60000000}) (async) [ 481.373875][ T5247] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 481.393275][ T5247] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 481.398000][ T5247] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 481.401665][ T5247] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 481.411082][ T5264] FAULT_INJECTION: forcing a failure. [ 481.411082][ T5264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.414585][ T5264] CPU: 0 PID: 5264 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 481.417442][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 481.420185][ T5264] Call trace: [ 481.421060][ T5264] dump_backtrace+0x1c4/0x1f0 [ 481.422345][ T5264] show_stack+0x2c/0x3c [ 481.423475][ T5264] dump_stack_lvl+0x104/0x16c [ 481.424770][ T5264] dump_stack+0x1c/0x58 [ 481.425902][ T5264] should_fail_ex+0x1e8/0x20c [ 481.427207][ T5264] should_fail+0x14/0x24 [ 481.428390][ T5264] should_fail_usercopy+0x20/0x30 [ 481.429725][ T5264] copy_page_from_iter_atomic+0x2f0/0x9f8 [ 481.431281][ T5264] generic_perform_write+0x144/0x2cc [ 481.432715][ T5264] __generic_file_write_iter+0xd8/0x21c [ 481.434224][ T5264] generic_file_write_iter+0x6c/0x168 [ 481.435664][ T5264] vfs_write+0x2dc/0x46c [ 481.436818][ T5264] ksys_write+0xb4/0x160 [ 481.437953][ T5264] __arm64_sys_write+0x24/0x34 [ 481.439357][ T5264] el0_svc_common+0x138/0x220 [ 481.440706][ T5264] do_el0_svc+0x48/0x104 [ 481.441881][ T5264] el0_svc+0x58/0x150 [ 481.442930][ T5264] el0t_64_sync_handler+0x84/0xf0 [ 481.444324][ T5264] el0t_64_sync+0x190/0x194 [ 481.449793][ T5247] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error 00:08:01 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/243) [ 481.470004][ T5247] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 481.477049][ T5247] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 481.480804][ T5247] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 481.490303][ T5247] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 481.510265][ T5264] loop3: detected capacity change from 0 to 512 [ 481.513902][ T5264] EXT4-fs (loop3): orphan cleanup on readonly fs [ 481.514262][ T5247] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 481.515957][ T5264] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 32541 vs 41 free clusters [ 481.522293][ T5264] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 481.525713][ T5247] EXT4-fs (loop1): 1 truncate cleaned up [ 481.525875][ T5264] EXT4-fs error (device loop3): ext4_dirty_inode:6110: inode #12: comm syz-executor.3: mark_inode_dirty error [ 481.527809][ T5247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. 00:08:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 481.563297][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.564960][ T5264] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 481.572320][ T5264] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz-executor.3: mark_inode_dirty error [ 481.584839][ T5264] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 481.588752][ T5264] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 481.593945][ T5276] loop1: detected capacity change from 0 to 512 [ 481.595727][ T5264] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz-executor.3: corrupted inode contents [ 481.606359][ T5264] EXT4-fs error (device loop3): ext4_truncate:4365: inode #12: comm syz-executor.3: mark_inode_dirty error [ 481.610007][ T5264] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 481.610033][ T5276] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 481.612826][ T5264] EXT4-fs (loop3): 1 truncate cleaned up [ 481.614781][ T5276] EXT4-fs (loop1): orphan cleanup on readonly fs [ 481.616031][ T5264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 481.634041][ T4439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.656701][ T5276] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 424 vs 41 free clusters [ 481.676720][ T5276] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 481.681558][ T5276] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #12: comm syz-executor.1: mark_inode_dirty error [ 481.685103][ T5276] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 481.694655][ T5276] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz-executor.1: mark_inode_dirty error [ 481.696807][ T5267] loop2: detected capacity change from 0 to 32768 [ 481.698390][ T5276] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 481.703098][ T5276] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 481.707700][ T5276] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #12: comm syz-executor.1: corrupted inode contents [ 481.711113][ T5276] EXT4-fs error (device loop1): ext4_truncate:4365: inode #12: comm syz-executor.1: mark_inode_dirty error [ 481.712165][ T5267] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 481.714293][ T5276] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 481.716567][ T5267] BTRFS info (device loop2): using free space tree [ 481.719626][ T5276] EXT4-fs (loop1): 1 truncate cleaned up [ 481.722003][ T5276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 481.736844][ T5267] BTRFS info (device loop2): enabling ssd optimizations [ 481.738892][ T5267] BTRFS info (device loop2): auto enabling async discard [ 481.748375][ T5267] FAULT_INJECTION: forcing a failure. [ 481.748375][ T5267] name failslab, interval 1, probability 0, space 0, times 0 [ 481.751909][ T5267] CPU: 1 PID: 5267 Comm: syz-executor.2 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 481.751967][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.754688][ T5267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 481.759773][ T5267] Call trace: [ 481.760640][ T5267] dump_backtrace+0x1c4/0x1f0 [ 481.761865][ T5267] show_stack+0x2c/0x3c [ 481.762990][ T5267] dump_stack_lvl+0x104/0x16c [ 481.764242][ T5267] dump_stack+0x1c/0x58 [ 481.765375][ T5267] should_fail_ex+0x1e8/0x20c [ 481.766620][ T5267] __should_failslab+0x68/0x7c [ 481.767901][ T5267] should_failslab+0x10/0x28 [ 481.769131][ T5267] kmem_cache_alloc+0x8c/0x364 [ 481.770394][ T5267] alloc_extent_map+0x24/0x68 [ 481.771656][ T5267] btrfs_new_extent_direct+0xb4/0x24c [ 481.773060][ T5267] btrfs_get_blocks_direct_write+0x270/0x548 [ 481.774675][ T5267] btrfs_dio_iomap_begin+0x638/0x828 [ 481.776074][ T5267] iomap_iter+0x2bc/0x400 [ 481.777221][ T5267] __iomap_dio_rw+0x4e0/0xc08 [ 481.778491][ T5267] btrfs_dio_write+0x64/0x94 [ 481.779682][ T5267] btrfs_do_write_iter+0x38c/0x888 [ 481.781064][ T5267] btrfs_file_write_iter+0x2c/0x3c [ 481.782450][ T5267] do_iter_write+0x318/0x560 [ 481.783691][ T5267] do_pwritev+0x130/0x1e8 [ 481.784855][ T5267] __arm64_sys_pwritev2+0x5c/0x90 [ 481.786239][ T5267] el0_svc_common+0x138/0x220 [ 481.787490][ T5267] do_el0_svc+0x48/0x104 [ 481.788621][ T5267] el0_svc+0x58/0x150 [ 481.789696][ T5267] el0t_64_sync_handler+0x84/0xf0 [ 481.791035][ T5267] el0t_64_sync+0x190/0x194 00:08:01 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0006e3b643d9ffffdc120d7d2e0d23a701c00000fdec993cf3b1ffdc88f43b0db760c5f361010000000000000038af3b509d79a7de9114b228b6379bff4d1384ba01a9c41e1201601280e767c081000000000000000000008dd53cfc18c76111470b957f55190000000000bb4feca176ddfc247443fd5c521d53273a466a1e6369cb5146ee71bc9587ab31499e481b9df60ec2925db1453f934793fb7c21c17d106468ece1e5cae284374dff86ed346396397dd2ec5fd916630000000000"], 0x1, 0x50ee, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x52400) syz_io_uring_setup(0x6ae9, &(0x7f00000002c0), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x40000}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 8) 00:08:01 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:08:01 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x13, &(0x7f0000000000)=""/243) 00:08:01 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) (async) r0 = semget$private(0x0, 0x1, 0x4) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x3, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0x4, 0x1800}, {0x1, 0x0, 0x1000}, {0x4, 0x7, 0x1000}, {0x0, 0xffff, 0x800}], 0x6, &(0x7f0000000080)={r1, r2+60000000}) 00:08:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 83) 00:08:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") [ 481.836824][ T5307] loop1: detected capacity change from 0 to 512 [ 481.843420][ T5306] FAULT_INJECTION: forcing a failure. [ 481.843420][ T5306] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 481.850153][ T5306] CPU: 1 PID: 5306 Comm: syz-executor.3 Not tainted 6.2.0-rc5-syzkaller-17291-g2e84eedb182e #0 [ 481.852889][ T5306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 481.855600][ T5306] Call trace: [ 481.856475][ T5306] dump_backtrace+0x1c4/0x1f0 [ 481.857744][ T5306] show_stack+0x2c/0x3c [ 481.858862][ T5306] dump_stack_lvl+0x104/0x16c [ 481.860118][ T5306] dump_stack+0x1c/0x58 [ 481.861224][ T5306] should_fail_ex+0x1e8/0x20c [ 481.862461][ T5306] should_fail_alloc_page+0x68/0x7c [ 481.863850][ T5306] prepare_alloc_pages+0x128/0x244 [ 481.865224][ T5306] __alloc_pages+0xa4/0x1fc [ 481.866422][ T5306] __folio_alloc+0x1c/0x48 [ 481.867603][ T5306] vma_alloc_folio+0x598/0x9a0 [ 481.868909][ T5306] shmem_alloc_and_acct_folio+0x200/0x5f8 [ 481.870455][ T5306] shmem_get_folio_gfp+0xb54/0x1a00 [ 481.871824][ T5306] shmem_write_begin+0x8c/0x350 [ 481.873129][ T5306] generic_perform_write+0xf0/0x2cc [ 481.874516][ T5306] __generic_file_write_iter+0xd8/0x21c [ 481.876009][ T5306] generic_file_write_iter+0x6c/0x168 [ 481.877475][ T5306] vfs_write+0x2dc/0x46c [ 481.878602][ T5306] ksys_write+0xb4/0x160 [ 481.879739][ T5306] __arm64_sys_write+0x24/0x34 [ 481.881017][ T5306] el0_svc_common+0x138/0x220 [ 481.882328][ T5306] do_el0_svc+0x48/0x104 [ 481.883458][ T5306] el0_svc+0x58/0x150 [ 481.884508][ T5306] el0t_64_sync_handler+0x84/0xf0 [ 481.885886][ T5306] el0t_64_sync+0x190/0x194 00:08:01 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x14, &(0x7f0000000000)=""/243) 00:08:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x47, &(0x7f0000000080)={[{@nogrpid}, {@bsdgroups}, {@nolazytime}, {@grpjquota}, {@jqfmt_vfsold}, {@barrier}, {@errors_continue}, {@noblock_validity}, {@acl}]}, 0x3, 0x4e1, &(0x7f0000000680)="$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") (fail_nth: 84) 00:08:01 executing program 5: semtimedop(0x0, &(0x7f00000004c0)=[{0x0, 0xeee}], 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) semtimedop(0x0, &(0x7f00000004c0)=[{}], 0x1f4, 0x0) [ 481.924602][ T4437] ------------[ cut here ]------------