last executing test programs: 4.414928082s ago: executing program 1 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f00000001c0)=@xdp={0x2c, 0x2, r3, 0x42}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)="27030200dc0f14000e0007000024c1", 0xf}], 0x1}, 0x4005) 4.14541774s ago: executing program 4 (id=692): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000340)={0x1d, r1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000580)=0x8000, 0x4) sendmmsg(r0, &(0x7f0000000380), 0x0, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) 3.978647886s ago: executing program 1 (id=698): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4000c14, &(0x7f0000009a00), 0x7, 0x9864, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40001, 0x1ee) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc4) pwrite64(r2, &(0x7f0000000440)='\x00', 0x1, 0xf490) write$binfmt_elf64(r2, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x7, 0x91, 0x2, 0x6, 0x2, 0x6, 0x1, 0x35f, 0x40, 0xd2, 0x0, 0x3, 0x38, 0x1, 0x36, 0xfff, 0x7}, [{0x7, 0xe5b, 0x8, 0x7, 0x2d8e, 0x5, 0xd01b, 0x8}]}, 0x78) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) 3.290597186s ago: executing program 4 (id=704): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f00000023c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000002480)='./file0\x00', 0x3) 3.229689182s ago: executing program 4 (id=705): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x101b43, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000500)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x0) 3.039615772s ago: executing program 2 (id=709): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$FE_SET_TONE(0xffffffffffffffff, 0x6f42, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}]}, 0x28}}, 0x0) 3.019621474s ago: executing program 2 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r6, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x8, r5, 0x40}, 0x8a, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 2.729485673s ago: executing program 2 (id=712): openat(0xffffffffffffff9c, 0x0, 0x441, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x24, 0x11, 0x1, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810) 2.672890019s ago: executing program 1 (id=714): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000028c0)={'macvlan1\x00', 0x10}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="260000000000000000000000b7cc953673e48f95dd9acf2f7f66652547ad31710cdf72e440dd82e75cc1056a940610afa8dfb297be74d291d9d3d675f37c268be78ad6e0", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 2.644874362s ago: executing program 2 (id=715): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000340)={0x1d, r1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000580)=0x8000, 0x4) sendmmsg(r0, &(0x7f0000000380), 0x0, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) 1.791833818s ago: executing program 2 (id=725): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4000c14, &(0x7f0000009a00), 0x7, 0x9864, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40001, 0x1ee) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc4) pwrite64(r2, &(0x7f0000000440)='\x00', 0x1, 0xf490) write$binfmt_elf64(r2, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x7, 0x91, 0x2, 0x6, 0x2, 0x6, 0x1, 0x35f, 0x40, 0xd2, 0x0, 0x3, 0x38, 0x1, 0x36, 0xfff, 0x7}, [{0x7, 0xe5b, 0x8, 0x7, 0x2d8e, 0x5, 0xd01b, 0x8}]}, 0x78) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) 1.558865682s ago: executing program 3 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000100), 0x1000) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b00900000000", 0x40}], 0x1}, 0x20000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) 1.452468073s ago: executing program 1 (id=731): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000640), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @func_proto]}}, 0x0, 0x36, 0x0, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b34, 0x0) r1 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = syz_io_uring_setup(0x3800, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, r5, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000500)={0x2e, 0x8, 0xf5, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$FE_READ_STATUS(r1, 0x80046f45, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f00000008c0)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) 1.38153398s ago: executing program 1 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYRES16=r1]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f00000001c0)=@xdp={0x2c, 0x2, r3, 0x42}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)="27030200dc0f14000e0007000024c1", 0xf}], 0x1}, 0x4005) 1.37752062s ago: executing program 0 (id=733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x3ff, 0x2, 0xb5}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f00000008c0)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r3, &(0x7f0000000900)=@other={'decodes', ' ', 'none'}, 0xd) close(0x3) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/net/lo/tx_queue_len\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='./proc\x00', 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000002c0)={0x20004, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000380)) close_range(r0, 0xffffffffffffffff, 0x0) 1.069866231s ago: executing program 0 (id=734): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$FE_SET_TONE(0xffffffffffffffff, 0x6f42, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.011259867s ago: executing program 0 (id=735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r6, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x8, r5, 0x40}, 0x8a, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 988.00264ms ago: executing program 4 (id=736): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000340)={0x1d, r1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000580)=0x8000, 0x4) sendmmsg(r0, &(0x7f0000000380), 0x0, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) 636.424305ms ago: executing program 3 (id=737): openat$incfs(0xffffffffffffffff, 0x0, 0x200, 0x50) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000540)={0x1, 0x8, 0x7, 0x6, 0x1, 0xf6, 0x0, 0x1, 0x0, 0x2000001, 0x5}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x42}, 0x2000400c) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e00000011008b88040f80ee59acbc04130800480f0000", 0x17}], 0x1}, 0x0) 615.528367ms ago: executing program 3 (id=738): openat(0xffffffffffffff9c, 0x0, 0x441, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000400)=r0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x24, 0x11, 0x1, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810) 604.585929ms ago: executing program 1 (id=739): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r8, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r7, 0x0, r0, 0x0, 0x40010003, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 585.42335ms ago: executing program 0 (id=740): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0xffe0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x20, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="03030800030016000c0045"], 0x2e) 187.670091ms ago: executing program 0 (id=741): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r2, &(0x7f0000000180)=[{{&(0x7f00000001c0)=@xdp={0x2c, 0x8, r1, 0x23}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)="5e648d2271ebbbe21946b604e13243d6c65cc320", 0x14}], 0x1}}], 0x1, 0x1) 180.322862ms ago: executing program 2 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000640), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @func_proto]}}, 0x0, 0x36, 0x0, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b34, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r2 = syz_io_uring_setup(0x3800, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, r5, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000500)={0x2e, 0x8, 0xf5, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$FE_READ_STATUS(r1, 0x80046f45, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f00000008c0)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) 174.335972ms ago: executing program 3 (id=743): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 134.844706ms ago: executing program 3 (id=744): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f00000023c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000002480)='./file0\x00', 0x3) 134.507196ms ago: executing program 4 (id=745): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$FE_SET_TONE(0xffffffffffffffff, 0x6f42, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 123.756087ms ago: executing program 0 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f00000002c0)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f0000000780)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000005880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000058c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000005900)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000005980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000059c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000005a00)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) openat(0xffffffffffffff9c, &(0x7f0000005a40)='./file1\x00', 0x42, 0x0) 95.61247ms ago: executing program 4 (id=747): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='smaps\x00') r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2) r2 = memfd_create(0x0, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r3, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 0s ago: executing program 3 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x8, 0x1ff, 0x8, 0x2, 0x5, 0x7c099268, 0x80000000, 0x3bb}}}}]}, 0x96}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000003c0)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000440)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000480)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): rt_delalloc+0x690/0x129c [ 81.841391][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 81.842532][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 81.843748][ T6472] write_cache_pages+0x760/0xe00 [ 81.844857][ T6472] iomap_writepages+0x6c/0x1f4 [ 81.845802][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 81.846863][ T6472] do_writepages+0x2c4/0x50c [ 81.847990][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 81.849217][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 81.850484][ T6472] xfs_file_fsync+0x1b4/0x95c [ 81.851590][ T6472] vfs_fsync_range+0x168/0x188 [ 81.852685][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 81.853964][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 81.855157][ T6472] do_iter_write+0x520/0x93c [ 81.856235][ T6472] vfs_iter_write+0x88/0xac [ 81.857324][ T6472] iter_file_splice_write+0x528/0xa38 [ 81.858559][ T6472] direct_splice_actor+0xe4/0x138 [ 81.859802][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 81.861113][ T6472] do_splice_direct+0x168/0x25c [ 81.862279][ T6472] do_sendfile+0x460/0xc8c [ 81.863305][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 81.864593][ T6472] invoke_syscall+0x98/0x290 [ 81.865720][ T6472] el0_svc_common+0x13c/0x258 [ 81.866836][ T6472] do_el0_svc+0x5c/0x134 [ 81.867802][ T6472] el0_svc+0x58/0x12c [ 81.868725][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 81.869848][ T6472] el0t_64_sync+0x18c/0x190 [ 81.874999][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 81.877008][ T6472] XFS (loop1): page discard on page 000000008ca63a8c, inode 0x1146, pos 2097152. [ 81.879302][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 81.882749][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 81.884457][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 81.886735][ T6472] Call trace: [ 81.887516][ T6472] dump_backtrace+0x1c4/0x1f0 [ 81.888643][ T6472] show_stack+0x2c/0x3c [ 81.889639][ T6472] __dump_stack+0x30/0x40 [ 81.890688][ T6472] dump_stack_lvl+0xf4/0x15c [ 81.891675][ T6472] dump_stack+0x1c/0x5c [ 81.892638][ T6472] xfs_corruption_error+0x12c/0x188 [ 81.893866][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 81.895089][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 81.896269][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 81.897464][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 81.898579][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 81.899663][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 81.900747][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 81.901847][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 81.903140][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 81.904215][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 81.905368][ T6472] write_cache_pages+0x760/0xe00 [ 81.906420][ T6472] iomap_writepages+0x6c/0x1f4 [ 81.907427][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 81.908548][ T6472] do_writepages+0x2c4/0x50c [ 81.909599][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 81.910806][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 81.912119][ T6472] xfs_file_fsync+0x1b4/0x95c [ 81.913214][ T6472] vfs_fsync_range+0x168/0x188 [ 81.914264][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 81.915513][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 81.916663][ T6472] do_iter_write+0x520/0x93c [ 81.917672][ T6472] vfs_iter_write+0x88/0xac [ 81.918705][ T6472] iter_file_splice_write+0x528/0xa38 [ 81.919961][ T6472] direct_splice_actor+0xe4/0x138 [ 81.921110][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 81.922316][ T6472] do_splice_direct+0x168/0x25c [ 81.923408][ T6472] do_sendfile+0x460/0xc8c [ 81.924412][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 81.925658][ T6472] invoke_syscall+0x98/0x290 [ 81.926697][ T6472] el0_svc_common+0x13c/0x258 [ 81.927795][ T6472] do_el0_svc+0x5c/0x134 [ 81.928806][ T6472] el0_svc+0x58/0x12c [ 81.929797][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 81.931042][ T6472] el0t_64_sync+0x18c/0x190 [ 81.933397][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 81.935348][ T6472] XFS (loop1): page discard on page 00000000355d5448, inode 0x1146, pos 2101248. [ 81.937741][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 81.940457][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 81.942115][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 81.944541][ T6472] Call trace: [ 81.945360][ T6472] dump_backtrace+0x1c4/0x1f0 [ 81.946470][ T6472] show_stack+0x2c/0x3c [ 81.947451][ T6472] __dump_stack+0x30/0x40 [ 81.948472][ T6472] dump_stack_lvl+0xf4/0x15c [ 81.949543][ T6472] dump_stack+0x1c/0x5c [ 81.950488][ T6472] xfs_corruption_error+0x12c/0x188 [ 81.951714][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 81.952980][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 81.954178][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 81.955504][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 81.956687][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 81.957702][ T6508] fuse: Bad value for 'user_id' [ 81.957903][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 81.960004][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 81.961152][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 81.962507][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 81.963625][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 81.964845][ T6472] write_cache_pages+0x760/0xe00 [ 81.966023][ T6472] iomap_writepages+0x6c/0x1f4 [ 81.967157][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 81.968336][ T6472] do_writepages+0x2c4/0x50c [ 81.969421][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 81.970670][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 81.971977][ T6472] xfs_file_fsync+0x1b4/0x95c [ 81.973098][ T6472] vfs_fsync_range+0x168/0x188 [ 81.974184][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 81.975438][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 81.976544][ T6472] do_iter_write+0x520/0x93c [ 81.977533][ T6472] vfs_iter_write+0x88/0xac [ 81.978463][ T6472] iter_file_splice_write+0x528/0xa38 [ 81.979648][ T6472] direct_splice_actor+0xe4/0x138 [ 81.980747][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 81.981854][ T6472] do_splice_direct+0x168/0x25c [ 81.982858][ T6472] do_sendfile+0x460/0xc8c [ 81.983789][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 81.984930][ T6472] invoke_syscall+0x98/0x290 [ 81.985923][ T6472] el0_svc_common+0x13c/0x258 [ 81.986947][ T6472] do_el0_svc+0x5c/0x134 [ 81.987840][ T6472] el0_svc+0x58/0x12c [ 81.988698][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 81.989820][ T6472] el0t_64_sync+0x18c/0x190 [ 81.991434][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 81.993620][ T6472] XFS (loop1): page discard on page 00000000e18151aa, inode 0x1146, pos 2105344. [ 81.997532][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.007288][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.008883][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.011309][ T6472] Call trace: [ 82.012118][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.013292][ T6472] show_stack+0x2c/0x3c [ 82.014350][ T6472] __dump_stack+0x30/0x40 [ 82.015455][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.016603][ T6472] dump_stack+0x1c/0x5c [ 82.017628][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.018910][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.020137][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.021332][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.022631][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.023823][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.024999][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.026138][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.027384][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.028774][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.029872][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.031103][ T6472] write_cache_pages+0x760/0xe00 [ 82.032279][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.033398][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.034548][ T6472] do_writepages+0x2c4/0x50c [ 82.035640][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.036912][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.038200][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.039331][ T6472] vfs_fsync_range+0x168/0x188 [ 82.040488][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.041798][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.043038][ T6472] do_iter_write+0x520/0x93c [ 82.044133][ T6472] vfs_iter_write+0x88/0xac [ 82.045222][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.046491][ T6472] direct_splice_actor+0xe4/0x138 [ 82.047700][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.048956][ T6472] do_splice_direct+0x168/0x25c [ 82.050057][ T6472] do_sendfile+0x460/0xc8c [ 82.051123][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.052425][ T6472] invoke_syscall+0x98/0x290 [ 82.053474][ T6472] el0_svc_common+0x13c/0x258 [ 82.054528][ T6472] do_el0_svc+0x5c/0x134 [ 82.055537][ T6472] el0_svc+0x58/0x12c [ 82.056462][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.057678][ T6472] el0t_64_sync+0x18c/0x190 [ 82.070795][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.074395][ T6472] XFS (loop1): page discard on page 0000000038bbffcc, inode 0x1146, pos 2109440. [ 82.076965][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.079866][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.081426][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.083670][ T6472] Call trace: [ 82.084413][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.085456][ T6472] show_stack+0x2c/0x3c [ 82.086300][ T6472] __dump_stack+0x30/0x40 [ 82.087224][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.088287][ T6472] dump_stack+0x1c/0x5c [ 82.089269][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.090517][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.091792][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.093075][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.094525][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.095780][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.096983][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.098227][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.099427][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.100786][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.101876][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.103055][ T6472] write_cache_pages+0x760/0xe00 [ 82.104192][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.105245][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.106290][ T6472] do_writepages+0x2c4/0x50c [ 82.107239][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.108398][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.109609][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.110630][ T6472] vfs_fsync_range+0x168/0x188 [ 82.111667][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.112892][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.114058][ T6472] do_iter_write+0x520/0x93c [ 82.115098][ T6472] vfs_iter_write+0x88/0xac [ 82.116115][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.117307][ T6472] direct_splice_actor+0xe4/0x138 [ 82.118409][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.119590][ T6472] do_splice_direct+0x168/0x25c [ 82.120674][ T6472] do_sendfile+0x460/0xc8c [ 82.121649][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.122806][ T6472] invoke_syscall+0x98/0x290 [ 82.123784][ T6472] el0_svc_common+0x13c/0x258 [ 82.124770][ T6472] do_el0_svc+0x5c/0x134 [ 82.125657][ T6472] el0_svc+0x58/0x12c [ 82.126493][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.127552][ T6472] el0t_64_sync+0x18c/0x190 [ 82.129209][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.131282][ T6472] XFS (loop1): page discard on page 000000001aeba5da, inode 0x1146, pos 2113536. [ 82.133498][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.136724][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.138147][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.140502][ T6472] Call trace: [ 82.141279][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.142363][ T6472] show_stack+0x2c/0x3c [ 82.143363][ T6472] __dump_stack+0x30/0x40 [ 82.144351][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.145431][ T6472] dump_stack+0x1c/0x5c [ 82.146407][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.147593][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.148783][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.149938][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.151232][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.152407][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.153598][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.154758][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.155921][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.157216][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.158239][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.159292][ T6472] write_cache_pages+0x760/0xe00 [ 82.160373][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.161394][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.162435][ T6472] do_writepages+0x2c4/0x50c [ 82.163417][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.164538][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.165740][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.166755][ T6472] vfs_fsync_range+0x168/0x188 [ 82.167775][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.168952][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.169987][ T6472] do_iter_write+0x520/0x93c [ 82.170957][ T6472] vfs_iter_write+0x88/0xac [ 82.172079][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.173362][ T6472] direct_splice_actor+0xe4/0x138 [ 82.174565][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.175795][ T6472] do_splice_direct+0x168/0x25c [ 82.177014][ T6472] do_sendfile+0x460/0xc8c [ 82.178081][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.179215][ T6472] invoke_syscall+0x98/0x290 [ 82.180258][ T6472] el0_svc_common+0x13c/0x258 [ 82.181423][ T6472] do_el0_svc+0x5c/0x134 [ 82.182499][ T6472] el0_svc+0x58/0x12c [ 82.183470][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.184686][ T6472] el0t_64_sync+0x18c/0x190 [ 82.187159][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.190398][ T6472] XFS (loop1): page discard on page 0000000060e7cab8, inode 0x1146, pos 2117632. [ 82.193827][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.203769][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.205324][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.207845][ T6472] Call trace: [ 82.208655][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.209787][ T6472] show_stack+0x2c/0x3c [ 82.210793][ T6472] __dump_stack+0x30/0x40 [ 82.211853][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.212977][ T6472] dump_stack+0x1c/0x5c [ 82.213945][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.215251][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.216549][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.217788][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.219138][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.220412][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.221684][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.222938][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.224145][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.225532][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.226666][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.227900][ T6472] write_cache_pages+0x760/0xe00 [ 82.229076][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.230243][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.231415][ T6472] do_writepages+0x2c4/0x50c [ 82.232515][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.233828][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.235098][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.236130][ T6472] vfs_fsync_range+0x168/0x188 [ 82.237186][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.238393][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.239523][ T6472] do_iter_write+0x520/0x93c [ 82.240544][ T6472] vfs_iter_write+0x88/0xac [ 82.241575][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.242759][ T6472] direct_splice_actor+0xe4/0x138 [ 82.243870][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.245073][ T6472] do_splice_direct+0x168/0x25c [ 82.246168][ T6472] do_sendfile+0x460/0xc8c [ 82.247141][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.248349][ T6472] invoke_syscall+0x98/0x290 [ 82.249366][ T6472] el0_svc_common+0x13c/0x258 [ 82.250408][ T6472] do_el0_svc+0x5c/0x134 [ 82.251359][ T6472] el0_svc+0x58/0x12c [ 82.252296][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.253427][ T6472] el0t_64_sync+0x18c/0x190 [ 82.256921][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.258613][ T6472] XFS (loop1): page discard on page 00000000650f83c0, inode 0x1146, pos 2121728. [ 82.260587][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.268486][ T6472] CPU: 1 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.270045][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.272253][ T6472] Call trace: [ 82.272963][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.274067][ T6472] show_stack+0x2c/0x3c [ 82.275110][ T6472] __dump_stack+0x30/0x40 [ 82.276181][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.277266][ T6472] dump_stack+0x1c/0x5c [ 82.278283][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.279561][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.280786][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.281953][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.283283][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.284497][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.285687][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.286848][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.288086][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.289503][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.290617][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.291794][ T6472] write_cache_pages+0x760/0xe00 [ 82.292908][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.294003][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.295233][ T6472] do_writepages+0x2c4/0x50c [ 82.296334][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.297634][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.299006][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.300159][ T6472] vfs_fsync_range+0x168/0x188 [ 82.301296][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.302600][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.303812][ T6472] do_iter_write+0x520/0x93c [ 82.304887][ T6472] vfs_iter_write+0x88/0xac [ 82.305930][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.307177][ T6472] direct_splice_actor+0xe4/0x138 [ 82.308380][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.309670][ T6472] do_splice_direct+0x168/0x25c [ 82.310825][ T6472] do_sendfile+0x460/0xc8c [ 82.311886][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.313136][ T6472] invoke_syscall+0x98/0x290 [ 82.314244][ T6472] el0_svc_common+0x13c/0x258 [ 82.315349][ T6472] do_el0_svc+0x5c/0x134 [ 82.316376][ T6472] el0_svc+0x58/0x12c [ 82.317286][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.318401][ T6472] el0t_64_sync+0x18c/0x190 [ 82.322001][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.323886][ T6472] XFS (loop1): page discard on page 00000000080d3e89, inode 0x1146, pos 2125824. [ 82.326343][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.329355][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.331056][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.333366][ T6472] Call trace: [ 82.334085][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.335120][ T6472] show_stack+0x2c/0x3c [ 82.336076][ T6472] __dump_stack+0x30/0x40 [ 82.337078][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.338176][ T6472] dump_stack+0x1c/0x5c [ 82.339187][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.340411][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.341674][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.342886][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.344266][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.345464][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.346710][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.347845][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.348995][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.350335][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.351389][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.352516][ T6472] write_cache_pages+0x760/0xe00 [ 82.353704][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.354850][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.356060][ T6472] do_writepages+0x2c4/0x50c [ 82.357149][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.358404][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.359791][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.360949][ T6472] vfs_fsync_range+0x168/0x188 [ 82.362126][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.363432][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.364605][ T6472] do_iter_write+0x520/0x93c [ 82.365665][ T6472] vfs_iter_write+0x88/0xac [ 82.366714][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.367992][ T6472] direct_splice_actor+0xe4/0x138 [ 82.369121][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.370272][ T6472] do_splice_direct+0x168/0x25c [ 82.371310][ T6472] do_sendfile+0x460/0xc8c [ 82.372249][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.373374][ T6472] invoke_syscall+0x98/0x290 [ 82.374348][ T6472] el0_svc_common+0x13c/0x258 [ 82.375353][ T6472] do_el0_svc+0x5c/0x134 [ 82.376246][ T6472] el0_svc+0x58/0x12c [ 82.377093][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.378154][ T6472] el0t_64_sync+0x18c/0x190 [ 82.381967][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.384710][ T6472] XFS (loop1): page discard on page 00000000ccda4cca, inode 0x1146, pos 2129920. [ 82.387179][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.390277][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.391786][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.394143][ T6472] Call trace: [ 82.394922][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.396060][ T6472] show_stack+0x2c/0x3c [ 82.397104][ T6472] __dump_stack+0x30/0x40 [ 82.398164][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.399249][ T6472] dump_stack+0x1c/0x5c [ 82.400229][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.401410][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.402674][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.403862][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.405210][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.406400][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.407603][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.408786][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.409979][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.411437][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.412627][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.413910][ T6472] write_cache_pages+0x760/0xe00 [ 82.415147][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.416293][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.417504][ T6472] do_writepages+0x2c4/0x50c [ 82.418554][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.419796][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.421064][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.422128][ T6472] vfs_fsync_range+0x168/0x188 [ 82.423233][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.424462][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.425615][ T6472] do_iter_write+0x520/0x93c [ 82.426642][ T6472] vfs_iter_write+0x88/0xac [ 82.427612][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.428749][ T6472] direct_splice_actor+0xe4/0x138 [ 82.429956][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.431274][ T6472] do_splice_direct+0x168/0x25c [ 82.432400][ T6472] do_sendfile+0x460/0xc8c [ 82.433421][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.434659][ T6472] invoke_syscall+0x98/0x290 [ 82.435709][ T6472] el0_svc_common+0x13c/0x258 [ 82.436780][ T6472] do_el0_svc+0x5c/0x134 [ 82.437787][ T6472] el0_svc+0x58/0x12c [ 82.438718][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.439879][ T6472] el0t_64_sync+0x18c/0x190 [ 82.458315][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.460147][ T6472] XFS (loop1): page discard on page 00000000633cc012, inode 0x1146, pos 2134016. [ 82.462746][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.465806][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.467376][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.469606][ T6472] Call trace: [ 82.470357][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.471363][ T6472] show_stack+0x2c/0x3c [ 82.472272][ T6472] __dump_stack+0x30/0x40 [ 82.473274][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.474302][ T6472] dump_stack+0x1c/0x5c [ 82.475227][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.476354][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.477569][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.478774][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.480102][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.480865][ T6528] jffs2: notice: (6528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.481300][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.481316][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.487145][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.488331][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.489705][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.490804][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.491939][ T6472] write_cache_pages+0x760/0xe00 [ 82.493021][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.494062][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.495140][ T6472] do_writepages+0x2c4/0x50c [ 82.496139][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.497308][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.498509][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.499531][ T6472] vfs_fsync_range+0x168/0x188 [ 82.500577][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.501745][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.502811][ T6472] do_iter_write+0x520/0x93c [ 82.503812][ T6472] vfs_iter_write+0x88/0xac [ 82.504762][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.505905][ T6472] direct_splice_actor+0xe4/0x138 [ 82.507010][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.508191][ T6472] do_splice_direct+0x168/0x25c [ 82.509232][ T6472] do_sendfile+0x460/0xc8c [ 82.510172][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.511331][ T6472] invoke_syscall+0x98/0x290 [ 82.512312][ T6472] el0_svc_common+0x13c/0x258 [ 82.513310][ T6472] do_el0_svc+0x5c/0x134 [ 82.514238][ T6472] el0_svc+0x58/0x12c [ 82.515086][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.516149][ T6472] el0t_64_sync+0x18c/0x190 [ 82.523165][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.525120][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.530708][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.532226][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.534496][ T6472] Call trace: [ 82.535254][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.536312][ T6472] show_stack+0x2c/0x3c [ 82.537241][ T6472] __dump_stack+0x30/0x40 [ 82.538207][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.539269][ T6472] dump_stack+0x1c/0x5c [ 82.540222][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.541391][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.542639][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.543896][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.545152][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.546248][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.547352][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.548350][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.549379][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.550586][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.551568][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.552632][ T6472] write_cache_pages+0x760/0xe00 [ 82.553663][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.554656][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.555725][ T6472] do_writepages+0x2c4/0x50c [ 82.556684][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.557754][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.558912][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.559919][ T6472] vfs_fsync_range+0x168/0x188 [ 82.560965][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.562121][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.563229][ T6472] do_iter_write+0x520/0x93c [ 82.564230][ T6472] vfs_iter_write+0x88/0xac [ 82.565172][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.566324][ T6472] direct_splice_actor+0xe4/0x138 [ 82.567400][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.568628][ T6472] do_splice_direct+0x168/0x25c [ 82.569713][ T6472] do_sendfile+0x460/0xc8c [ 82.570696][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.571737][ T6472] invoke_syscall+0x98/0x290 [ 82.572786][ T6472] el0_svc_common+0x13c/0x258 [ 82.573781][ T6472] do_el0_svc+0x5c/0x134 [ 82.574731][ T6472] el0_svc+0x58/0x12c [ 82.575615][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.576722][ T6472] el0t_64_sync+0x18c/0x190 [ 82.587613][ T6536] __nla_validate_parse: 2 callbacks suppressed [ 82.587627][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 82.587642][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.592733][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.599194][ T6472] CPU: 1 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.600584][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.602698][ T6472] Call trace: [ 82.603368][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.604383][ T6472] show_stack+0x2c/0x3c [ 82.605281][ T6472] __dump_stack+0x30/0x40 [ 82.606293][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.607423][ T6472] dump_stack+0x1c/0x5c [ 82.608414][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.609701][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.610939][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.612105][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.613411][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.614522][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.615700][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.616862][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.618096][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.619483][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.620593][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.621777][ T6472] write_cache_pages+0x760/0xe00 [ 82.622951][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.624084][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.625200][ T6472] do_writepages+0x2c4/0x50c [ 82.626231][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.627476][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.628770][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.629948][ T6472] vfs_fsync_range+0x168/0x188 [ 82.631069][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.632338][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.633599][ T6472] do_iter_write+0x520/0x93c [ 82.634701][ T6472] vfs_iter_write+0x88/0xac [ 82.635681][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.636847][ T6472] direct_splice_actor+0xe4/0x138 [ 82.637944][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.639098][ T6472] do_splice_direct+0x168/0x25c [ 82.640140][ T6472] do_sendfile+0x460/0xc8c [ 82.641059][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.642152][ T6472] invoke_syscall+0x98/0x290 [ 82.643160][ T6472] el0_svc_common+0x13c/0x258 [ 82.644218][ T6472] do_el0_svc+0x5c/0x134 [ 82.645190][ T6472] el0_svc+0x58/0x12c [ 82.646046][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.647124][ T6472] el0t_64_sync+0x18c/0x190 [ 82.650580][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.652334][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.655048][ T6472] CPU: 1 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.656708][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.659029][ T6472] Call trace: [ 82.659797][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.660897][ T6472] show_stack+0x2c/0x3c [ 82.661851][ T6472] __dump_stack+0x30/0x40 [ 82.662862][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.663868][ T6472] dump_stack+0x1c/0x5c [ 82.664767][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.665900][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.666996][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.668021][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.669282][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.670411][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.671544][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.672649][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.673749][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.675079][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.676092][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.677255][ T6472] write_cache_pages+0x760/0xe00 [ 82.678409][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.679518][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.680655][ T6472] do_writepages+0x2c4/0x50c [ 82.681702][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.682920][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.684288][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.685408][ T6472] vfs_fsync_range+0x168/0x188 [ 82.686477][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.687809][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.689043][ T6472] do_iter_write+0x520/0x93c [ 82.690164][ T6472] vfs_iter_write+0x88/0xac [ 82.691263][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.692539][ T6472] direct_splice_actor+0xe4/0x138 [ 82.693788][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.695143][ T6472] do_splice_direct+0x168/0x25c [ 82.696375][ T6472] do_sendfile+0x460/0xc8c [ 82.697475][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.698794][ T6472] invoke_syscall+0x98/0x290 [ 82.699937][ T6472] el0_svc_common+0x13c/0x258 [ 82.701131][ T6472] do_el0_svc+0x5c/0x134 [ 82.702154][ T6472] el0_svc+0x58/0x12c [ 82.703104][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.704285][ T6472] el0t_64_sync+0x18c/0x190 [ 82.707678][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.709419][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.712010][ T6472] CPU: 1 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.713420][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.715285][ T6472] Call trace: [ 82.715908][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.716892][ T6472] show_stack+0x2c/0x3c [ 82.717783][ T6472] __dump_stack+0x30/0x40 [ 82.718693][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.719660][ T6472] dump_stack+0x1c/0x5c [ 82.720540][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.721613][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.722708][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.723778][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.724955][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.726022][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.727070][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.728093][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.729088][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.730301][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.731307][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.732343][ T6472] write_cache_pages+0x760/0xe00 [ 82.733382][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.734420][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.735511][ T6472] do_writepages+0x2c4/0x50c [ 82.736538][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.737741][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.739060][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.740150][ T6472] vfs_fsync_range+0x168/0x188 [ 82.741243][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.742466][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.743605][ T6472] do_iter_write+0x520/0x93c [ 82.744687][ T6472] vfs_iter_write+0x88/0xac [ 82.745677][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.746960][ T6472] direct_splice_actor+0xe4/0x138 [ 82.748143][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.749382][ T6472] do_splice_direct+0x168/0x25c [ 82.750398][ T6472] do_sendfile+0x460/0xc8c [ 82.751333][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.752472][ T6472] invoke_syscall+0x98/0x290 [ 82.753494][ T6472] el0_svc_common+0x13c/0x258 [ 82.754505][ T6472] do_el0_svc+0x5c/0x134 [ 82.755404][ T6472] el0_svc+0x58/0x12c [ 82.756244][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.757305][ T6472] el0t_64_sync+0x18c/0x190 [ 82.760176][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.762126][ T6472] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 82.765430][ T6472] CPU: 0 PID: 6472 Comm: syz.1.669 Not tainted syzkaller #0 [ 82.767150][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 82.769497][ T6472] Call trace: [ 82.770246][ T6472] dump_backtrace+0x1c4/0x1f0 [ 82.771293][ T6472] show_stack+0x2c/0x3c [ 82.772219][ T6472] __dump_stack+0x30/0x40 [ 82.773207][ T6472] dump_stack_lvl+0xf4/0x15c [ 82.774228][ T6472] dump_stack+0x1c/0x5c [ 82.775115][ T6472] xfs_corruption_error+0x12c/0x188 [ 82.776241][ T6472] xfs_alloc_fixup_trees+0x5dc/0x770 [ 82.777355][ T6472] xfs_alloc_cur_finish+0xc0/0x550 [ 82.778307][ T6472] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 82.779523][ T6472] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 82.780651][ T6472] xfs_alloc_vextent+0x1208/0x1c00 [ 82.781731][ T6472] xfs_bmap_btalloc+0xadc/0x182c [ 82.782802][ T6472] xfs_bmapi_allocate+0x3fc/0xbfc [ 82.783973][ T6472] xfs_bmapi_convert_delalloc+0x690/0x129c [ 82.785279][ T6472] xfs_map_blocks+0x7d4/0x12bc [ 82.786315][ T6472] iomap_do_writepage+0x7e8/0x22c0 [ 82.787459][ T6472] write_cache_pages+0x760/0xe00 [ 82.788564][ T6472] iomap_writepages+0x6c/0x1f4 [ 82.789639][ T6472] xfs_vm_writepages+0x13c/0x1b0 [ 82.790748][ T6472] do_writepages+0x2c4/0x50c [ 82.791745][ T6472] filemap_fdatawrite_wbc+0x124/0x174 [ 82.792934][ T6472] file_write_and_wait_range+0x11c/0x1f4 [ 82.794144][ T6472] xfs_file_fsync+0x1b4/0x95c [ 82.795139][ T6472] vfs_fsync_range+0x168/0x188 [ 82.796194][ T6472] xfs_file_buffered_write+0x91c/0xa80 [ 82.797363][ T6472] xfs_file_write_iter+0x2b0/0x60c [ 82.798466][ T6472] do_iter_write+0x520/0x93c [ 82.799467][ T6472] vfs_iter_write+0x88/0xac [ 82.800452][ T6472] iter_file_splice_write+0x528/0xa38 [ 82.801647][ T6472] direct_splice_actor+0xe4/0x138 [ 82.802744][ T6472] splice_direct_to_actor+0x3ec/0x9e4 [ 82.803890][ T6472] do_splice_direct+0x168/0x25c [ 82.804932][ T6472] do_sendfile+0x460/0xc8c [ 82.805890][ T6472] __arm64_sys_sendfile64+0x138/0x374 [ 82.807080][ T6472] invoke_syscall+0x98/0x290 [ 82.808112][ T6472] el0_svc_common+0x13c/0x258 [ 82.809164][ T6472] do_el0_svc+0x5c/0x134 [ 82.810189][ T6472] el0_svc+0x58/0x12c [ 82.811121][ T6472] el0t_64_sync_handler+0x84/0xf0 [ 82.812264][ T6472] el0t_64_sync+0x18c/0x190 [ 82.815866][ T6472] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 82.833030][ T4331] XFS (loop1): Unmounting Filesystem [ 83.115992][ T4334] Bluetooth: hci5: command 0x1003 tx timeout [ 83.117898][ T4342] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 83.139630][ T6551] fuse: Bad value for 'fd' [ 83.170407][ T6553] device syzkaller0 entered promiscuous mode [ 83.183185][ T6558] jffs2: notice: (6558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.276339][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 83.391334][ T6574] loop1: detected capacity change from 0 to 32768 [ 83.469314][ T6574] XFS (loop1): Mounting V5 Filesystem [ 83.495998][ T6574] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 83.510549][ T6574] XFS (loop1): Starting recovery (logdev: internal) [ 83.524679][ T6574] XFS (loop1): Ending recovery (logdev: internal) [ 83.596453][ T6595] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x3a4/0x590, xfs_bnobt block 0x8 [ 83.599330][ T6595] XFS (loop1): Unmount and run xfs_repair [ 83.607604][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 83.610376][ T6574] CPU: 0 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 83.611863][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 83.614003][ T6574] Call trace: [ 83.614728][ T6574] dump_backtrace+0x1c4/0x1f0 [ 83.615923][ T6574] show_stack+0x2c/0x3c [ 83.616989][ T6574] __dump_stack+0x30/0x40 [ 83.618067][ T6574] dump_stack_lvl+0xf4/0x15c [ 83.619196][ T6574] dump_stack+0x1c/0x5c [ 83.620187][ T6574] xfs_corruption_error+0x12c/0x188 [ 83.621464][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 83.622703][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 83.623887][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 83.625224][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 83.626393][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 83.627621][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 83.628746][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 83.629897][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 83.631197][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 83.632380][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 83.633618][ T6574] write_cache_pages+0x760/0xe00 [ 83.634806][ T6574] iomap_writepages+0x6c/0x1f4 [ 83.635949][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 83.637149][ T6574] do_writepages+0x2c4/0x50c [ 83.638265][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 83.639551][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 83.640858][ T6574] xfs_file_fsync+0x1b4/0x95c [ 83.641931][ T6574] vfs_fsync_range+0x168/0x188 [ 83.643071][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 83.644351][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 83.645566][ T6574] do_iter_write+0x520/0x93c [ 83.646646][ T6574] vfs_iter_write+0x88/0xac [ 83.647658][ T6574] iter_file_splice_write+0x528/0xa38 [ 83.648921][ T6574] direct_splice_actor+0xe4/0x138 [ 83.649990][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 83.651108][ T6574] do_splice_direct+0x168/0x25c [ 83.652167][ T6574] do_sendfile+0x460/0xc8c [ 83.653167][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 83.654338][ T6574] invoke_syscall+0x98/0x290 [ 83.655400][ T6574] el0_svc_common+0x13c/0x258 [ 83.656505][ T6574] do_el0_svc+0x5c/0x134 [ 83.657492][ T6574] el0_svc+0x58/0x12c [ 83.658367][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 83.659491][ T6574] el0t_64_sync+0x18c/0x190 [ 83.662284][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 83.664179][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 83.669741][ T6574] CPU: 0 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 83.671378][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 83.673798][ T6574] Call trace: [ 83.674589][ T6574] dump_backtrace+0x1c4/0x1f0 [ 83.675728][ T6574] show_stack+0x2c/0x3c [ 83.676718][ T6574] __dump_stack+0x30/0x40 [ 83.677792][ T6574] dump_stack_lvl+0xf4/0x15c [ 83.678961][ T6574] dump_stack+0x1c/0x5c [ 83.679962][ T6574] xfs_corruption_error+0x12c/0x188 [ 83.681244][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 83.682599][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 83.683904][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 83.685339][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 83.686552][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 83.687796][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 83.688974][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 83.690181][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 83.691561][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 83.692639][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 83.693822][ T6574] write_cache_pages+0x760/0xe00 [ 83.694955][ T6574] iomap_writepages+0x6c/0x1f4 [ 83.696029][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 83.697114][ T6574] do_writepages+0x2c4/0x50c [ 83.698117][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 83.699263][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 83.700457][ T6574] xfs_file_fsync+0x1b4/0x95c [ 83.701458][ T6574] vfs_fsync_range+0x168/0x188 [ 83.702510][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 83.703851][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 83.705118][ T6574] do_iter_write+0x520/0x93c [ 83.706270][ T6574] vfs_iter_write+0x88/0xac [ 83.707351][ T6574] iter_file_splice_write+0x528/0xa38 [ 83.708592][ T6574] direct_splice_actor+0xe4/0x138 [ 83.709740][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 83.711081][ T6574] do_splice_direct+0x168/0x25c [ 83.712299][ T6574] do_sendfile+0x460/0xc8c [ 83.713402][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 83.714735][ T6574] invoke_syscall+0x98/0x290 [ 83.715859][ T6574] el0_svc_common+0x13c/0x258 [ 83.717054][ T6574] do_el0_svc+0x5c/0x134 [ 83.718110][ T6574] el0_svc+0x58/0x12c [ 83.719097][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 83.720300][ T6574] el0t_64_sync+0x18c/0x190 [ 83.724198][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 83.726006][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 83.729067][ T6574] CPU: 0 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 83.730578][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 83.732589][ T6574] Call trace: [ 83.733225][ T6574] dump_backtrace+0x1c4/0x1f0 [ 83.734184][ T6574] show_stack+0x2c/0x3c [ 83.735123][ T6574] __dump_stack+0x30/0x40 [ 83.736198][ T6574] dump_stack_lvl+0xf4/0x15c [ 83.737273][ T6574] dump_stack+0x1c/0x5c [ 83.738259][ T6574] xfs_corruption_error+0x12c/0x188 [ 83.739551][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 83.740799][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 83.742042][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 83.743484][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 83.744738][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 83.745981][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 83.747173][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 83.748375][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 83.749723][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 83.750910][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 83.752207][ T6574] write_cache_pages+0x760/0xe00 [ 83.753427][ T6574] iomap_writepages+0x6c/0x1f4 [ 83.754611][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 83.755679][ T6574] do_writepages+0x2c4/0x50c [ 83.756707][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 83.757937][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 83.759205][ T6574] xfs_file_fsync+0x1b4/0x95c [ 83.760263][ T6574] vfs_fsync_range+0x168/0x188 [ 83.761368][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 83.762551][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 83.763688][ T6574] do_iter_write+0x520/0x93c [ 83.764703][ T6574] vfs_iter_write+0x88/0xac [ 83.765750][ T6574] iter_file_splice_write+0x528/0xa38 [ 83.766985][ T6574] direct_splice_actor+0xe4/0x138 [ 83.768140][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 83.769291][ T6574] do_splice_direct+0x168/0x25c [ 83.770334][ T6574] do_sendfile+0x460/0xc8c [ 83.771291][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 83.772521][ T6574] invoke_syscall+0x98/0x290 [ 83.773585][ T6574] el0_svc_common+0x13c/0x258 [ 83.774653][ T6574] do_el0_svc+0x5c/0x134 [ 83.775549][ T6574] el0_svc+0x58/0x12c [ 83.776392][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 83.777471][ T6574] el0t_64_sync+0x18c/0x190 [ 83.780289][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 83.782075][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 83.784863][ T6574] CPU: 0 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 83.786354][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 83.788722][ T6574] Call trace: [ 83.789452][ T6574] dump_backtrace+0x1c4/0x1f0 [ 83.790513][ T6574] show_stack+0x2c/0x3c [ 83.791441][ T6574] __dump_stack+0x30/0x40 [ 83.792469][ T6574] dump_stack_lvl+0xf4/0x15c [ 83.793421][ T6574] dump_stack+0x1c/0x5c [ 83.794350][ T6574] xfs_corruption_error+0x12c/0x188 [ 83.795492][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 83.796775][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 83.798031][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 83.799383][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 83.800598][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 83.801806][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 83.802991][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 83.804166][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 83.805527][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 83.806640][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 83.807815][ T6574] write_cache_pages+0x760/0xe00 [ 83.808966][ T6574] iomap_writepages+0x6c/0x1f4 [ 83.810102][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 83.811239][ T6574] do_writepages+0x2c4/0x50c [ 83.812366][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 83.813673][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 83.814943][ T6574] xfs_file_fsync+0x1b4/0x95c [ 83.816023][ T6574] vfs_fsync_range+0x168/0x188 [ 83.817124][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 83.818356][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 83.819537][ T6574] do_iter_write+0x520/0x93c [ 83.820576][ T6574] vfs_iter_write+0x88/0xac [ 83.821596][ T6574] iter_file_splice_write+0x528/0xa38 [ 83.822887][ T6574] direct_splice_actor+0xe4/0x138 [ 83.824062][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 83.825347][ T6574] do_splice_direct+0x168/0x25c [ 83.826536][ T6574] do_sendfile+0x460/0xc8c [ 83.827601][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 83.828873][ T6574] invoke_syscall+0x98/0x290 [ 83.829928][ T6574] el0_svc_common+0x13c/0x258 [ 83.830994][ T6574] do_el0_svc+0x5c/0x134 [ 83.831924][ T6574] el0_svc+0x58/0x12c [ 83.832847][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 83.834024][ T6574] el0t_64_sync+0x18c/0x190 [ 83.835278][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 83.840328][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 83.843317][ T6574] CPU: 0 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 83.844872][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 83.847204][ T6574] Call trace: [ 83.847922][ T6574] dump_backtrace+0x1c4/0x1f0 [ 83.848956][ T6574] show_stack+0x2c/0x3c [ 83.849877][ T6574] __dump_stack+0x30/0x40 [ 83.850853][ T6574] dump_stack_lvl+0xf4/0x15c [ 83.851918][ T6574] dump_stack+0x1c/0x5c [ 83.852877][ T6574] xfs_corruption_error+0x12c/0x188 [ 83.854035][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 83.855192][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 83.856308][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 83.857545][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 83.858724][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 83.859925][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 83.861089][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 83.862240][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 83.863561][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 83.864760][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 83.866052][ T6574] write_cache_pages+0x760/0xe00 [ 83.867311][ T6574] iomap_writepages+0x6c/0x1f4 [ 83.868501][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 83.869667][ T6574] do_writepages+0x2c4/0x50c [ 83.870784][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 83.872094][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 83.873376][ T6574] xfs_file_fsync+0x1b4/0x95c [ 83.874406][ T6574] vfs_fsync_range+0x168/0x188 [ 83.875414][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 83.876668][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 83.877837][ T6574] do_iter_write+0x520/0x93c [ 83.878920][ T6574] vfs_iter_write+0x88/0xac [ 83.879971][ T6574] iter_file_splice_write+0x528/0xa38 [ 83.881249][ T6574] direct_splice_actor+0xe4/0x138 [ 83.882428][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 83.883713][ T6574] do_splice_direct+0x168/0x25c [ 83.884872][ T6574] do_sendfile+0x460/0xc8c [ 83.885926][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 83.887163][ T6574] invoke_syscall+0x98/0x290 [ 83.888255][ T6574] el0_svc_common+0x13c/0x258 [ 83.889345][ T6574] do_el0_svc+0x5c/0x134 [ 83.890360][ T6574] el0_svc+0x58/0x12c [ 83.891273][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 83.892445][ T6574] el0t_64_sync+0x18c/0x190 [ 83.897439][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 83.899336][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 83.902201][ T6574] CPU: 0 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 83.903644][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 83.905826][ T6574] Call trace: [ 83.906489][ T6574] dump_backtrace+0x1c4/0x1f0 [ 83.907486][ T6574] show_stack+0x2c/0x3c [ 83.908339][ T6574] __dump_stack+0x30/0x40 [ 83.909232][ T6574] dump_stack_lvl+0xf4/0x15c [ 83.910228][ T6574] dump_stack+0x1c/0x5c [ 83.911135][ T6574] xfs_corruption_error+0x12c/0x188 [ 83.912381][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 83.913561][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 83.914713][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 83.915988][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 83.917119][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 83.918242][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 83.919342][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 83.920453][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 83.921720][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 83.922776][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 83.923910][ T6574] write_cache_pages+0x760/0xe00 [ 83.925012][ T6574] iomap_writepages+0x6c/0x1f4 [ 83.926073][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 83.927159][ T6574] do_writepages+0x2c4/0x50c [ 83.928144][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 83.929265][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 83.930514][ T6574] xfs_file_fsync+0x1b4/0x95c [ 83.931624][ T6574] vfs_fsync_range+0x168/0x188 [ 83.932677][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 83.933874][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 83.935013][ T6574] do_iter_write+0x520/0x93c [ 83.936045][ T6574] vfs_iter_write+0x88/0xac [ 83.937053][ T6574] iter_file_splice_write+0x528/0xa38 [ 83.938266][ T6574] direct_splice_actor+0xe4/0x138 [ 83.939392][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 83.940598][ T6574] do_splice_direct+0x168/0x25c [ 83.941656][ T6574] do_sendfile+0x460/0xc8c [ 83.942611][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 83.943770][ T6574] invoke_syscall+0x98/0x290 [ 83.944781][ T6574] el0_svc_common+0x13c/0x258 [ 83.945859][ T6574] do_el0_svc+0x5c/0x134 [ 83.946813][ T6574] el0_svc+0x58/0x12c [ 83.947735][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 83.948876][ T6574] el0t_64_sync+0x18c/0x190 [ 83.953140][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 83.954991][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 83.961652][ T6574] CPU: 0 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 83.963319][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 83.965549][ T6574] Call trace: [ 83.966283][ T6574] dump_backtrace+0x1c4/0x1f0 [ 83.967379][ T6574] show_stack+0x2c/0x3c [ 83.968356][ T6574] __dump_stack+0x30/0x40 [ 83.969315][ T6574] dump_stack_lvl+0xf4/0x15c [ 83.970342][ T6574] dump_stack+0x1c/0x5c [ 83.970830][ T6599] fuse: Bad value for 'fd' [ 83.971275][ T6574] xfs_corruption_error+0x12c/0x188 [ 83.973520][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 83.974784][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 83.975963][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 83.977393][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 83.978647][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 83.979862][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 83.981032][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 83.982213][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 83.983595][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 83.984720][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 83.985987][ T6574] write_cache_pages+0x760/0xe00 [ 83.987192][ T6574] iomap_writepages+0x6c/0x1f4 [ 83.988365][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 83.989583][ T6574] do_writepages+0x2c4/0x50c [ 83.990711][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 83.991988][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 83.993350][ T6574] xfs_file_fsync+0x1b4/0x95c [ 83.994514][ T6574] vfs_fsync_range+0x168/0x188 [ 83.995681][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 83.997040][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 83.998305][ T6574] do_iter_write+0x520/0x93c [ 83.999320][ T6574] vfs_iter_write+0x88/0xac [ 84.000324][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.001501][ T6574] direct_splice_actor+0xe4/0x138 [ 84.002590][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.003737][ T6574] do_splice_direct+0x168/0x25c [ 84.004818][ T6574] do_sendfile+0x460/0xc8c [ 84.005845][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.007071][ T6574] invoke_syscall+0x98/0x290 [ 84.008151][ T6574] el0_svc_common+0x13c/0x258 [ 84.009251][ T6574] do_el0_svc+0x5c/0x134 [ 84.010238][ T6574] el0_svc+0x58/0x12c [ 84.011188][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.012377][ T6574] el0t_64_sync+0x18c/0x190 [ 84.019396][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.021541][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 84.024512][ T6574] CPU: 1 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 84.025901][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 84.028129][ T6574] Call trace: [ 84.028837][ T6574] dump_backtrace+0x1c4/0x1f0 [ 84.029896][ T6574] show_stack+0x2c/0x3c [ 84.030834][ T6574] __dump_stack+0x30/0x40 [ 84.031821][ T6574] dump_stack_lvl+0xf4/0x15c [ 84.032827][ T6574] dump_stack+0x1c/0x5c [ 84.033706][ T6574] xfs_corruption_error+0x12c/0x188 [ 84.034846][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 84.035998][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 84.037059][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 84.038266][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 84.039343][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 84.040457][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 84.041667][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 84.042892][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 84.044253][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 84.045293][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 84.046308][ T6574] write_cache_pages+0x760/0xe00 [ 84.047524][ T6574] iomap_writepages+0x6c/0x1f4 [ 84.048647][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 84.049837][ T6574] do_writepages+0x2c4/0x50c [ 84.050941][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 84.052213][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 84.053472][ T6574] xfs_file_fsync+0x1b4/0x95c [ 84.054448][ T6574] vfs_fsync_range+0x168/0x188 [ 84.055308][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 84.056468][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 84.057546][ T6574] do_iter_write+0x520/0x93c [ 84.058427][ T6574] vfs_iter_write+0x88/0xac [ 84.059368][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.060522][ T6574] direct_splice_actor+0xe4/0x138 [ 84.061555][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.062664][ T6574] do_splice_direct+0x168/0x25c [ 84.063705][ T6574] do_sendfile+0x460/0xc8c [ 84.064801][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.066083][ T6574] invoke_syscall+0x98/0x290 [ 84.067169][ T6574] el0_svc_common+0x13c/0x258 [ 84.068274][ T6574] do_el0_svc+0x5c/0x134 [ 84.069316][ T6574] el0_svc+0x58/0x12c [ 84.070266][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.071507][ T6574] el0t_64_sync+0x18c/0x190 [ 84.080991][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.082814][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 84.086143][ T6574] CPU: 1 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 84.087703][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 84.089846][ T6574] Call trace: [ 84.090574][ T6574] dump_backtrace+0x1c4/0x1f0 [ 84.091610][ T6574] show_stack+0x2c/0x3c [ 84.092486][ T6574] __dump_stack+0x30/0x40 [ 84.093416][ T6574] dump_stack_lvl+0xf4/0x15c [ 84.094414][ T6574] dump_stack+0x1c/0x5c [ 84.095366][ T6574] xfs_corruption_error+0x12c/0x188 [ 84.096630][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 84.097940][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 84.099156][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 84.100483][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 84.100716][ T6603] jffs2: notice: (6603) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.101629][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 84.101645][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 84.107682][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 84.108837][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 84.110205][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 84.111291][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 84.112459][ T6574] write_cache_pages+0x760/0xe00 [ 84.113592][ T6574] iomap_writepages+0x6c/0x1f4 [ 84.114636][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 84.115797][ T6574] do_writepages+0x2c4/0x50c [ 84.116913][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 84.118196][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 84.119503][ T6574] xfs_file_fsync+0x1b4/0x95c [ 84.120588][ T6574] vfs_fsync_range+0x168/0x188 [ 84.121744][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 84.123056][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 84.124255][ T6574] do_iter_write+0x520/0x93c [ 84.125320][ T6574] vfs_iter_write+0x88/0xac [ 84.126399][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.127597][ T6574] direct_splice_actor+0xe4/0x138 [ 84.128716][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.129872][ T6574] do_splice_direct+0x168/0x25c [ 84.130865][ T6574] do_sendfile+0x460/0xc8c [ 84.131767][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.132856][ T6574] invoke_syscall+0x98/0x290 [ 84.133779][ T6574] el0_svc_common+0x13c/0x258 [ 84.134737][ T6574] do_el0_svc+0x5c/0x134 [ 84.135604][ T6574] el0_svc+0x58/0x12c [ 84.136516][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.137701][ T6574] el0t_64_sync+0x18c/0x190 [ 84.138899][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.141336][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 84.144109][ T6574] CPU: 1 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 84.145619][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 84.147847][ T6574] Call trace: [ 84.148559][ T6574] dump_backtrace+0x1c4/0x1f0 [ 84.149586][ T6574] show_stack+0x2c/0x3c [ 84.150524][ T6574] __dump_stack+0x30/0x40 [ 84.151506][ T6574] dump_stack_lvl+0xf4/0x15c [ 84.152534][ T6574] dump_stack+0x1c/0x5c [ 84.153451][ T6574] xfs_corruption_error+0x12c/0x188 [ 84.154591][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 84.155744][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 84.156874][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 84.158120][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 84.159243][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 84.160413][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 84.161469][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 84.162553][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 84.163852][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 84.164916][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 84.166060][ T6574] write_cache_pages+0x760/0xe00 [ 84.167095][ T6574] iomap_writepages+0x6c/0x1f4 [ 84.168115][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 84.169240][ T6574] do_writepages+0x2c4/0x50c [ 84.170297][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 84.171538][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 84.172826][ T6574] xfs_file_fsync+0x1b4/0x95c [ 84.173863][ T6574] vfs_fsync_range+0x168/0x188 [ 84.174918][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 84.176095][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 84.177208][ T6574] do_iter_write+0x520/0x93c [ 84.178264][ T6574] vfs_iter_write+0x88/0xac [ 84.179276][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.180411][ T6574] direct_splice_actor+0xe4/0x138 [ 84.181519][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.182755][ T6574] do_splice_direct+0x168/0x25c [ 84.183832][ T6574] do_sendfile+0x460/0xc8c [ 84.184033][ T6608] device syzkaller0 entered promiscuous mode [ 84.184785][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.184806][ T6574] invoke_syscall+0x98/0x290 [ 84.188398][ T6574] el0_svc_common+0x13c/0x258 [ 84.189526][ T6574] do_el0_svc+0x5c/0x134 [ 84.190440][ T6574] el0_svc+0x58/0x12c [ 84.191372][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.192518][ T6574] el0t_64_sync+0x18c/0x190 [ 84.200943][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.202466][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 84.205216][ T6574] CPU: 1 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 84.206820][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 84.208884][ T6574] Call trace: [ 84.209608][ T6574] dump_backtrace+0x1c4/0x1f0 [ 84.210695][ T6574] show_stack+0x2c/0x3c [ 84.211657][ T6574] __dump_stack+0x30/0x40 [ 84.212670][ T6574] dump_stack_lvl+0xf4/0x15c [ 84.213715][ T6574] dump_stack+0x1c/0x5c [ 84.214676][ T6574] xfs_corruption_error+0x12c/0x188 [ 84.215868][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 84.217119][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 84.218326][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 84.219587][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 84.220726][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 84.221871][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 84.222968][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 84.224085][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 84.225363][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 84.226426][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 84.227492][ T6574] write_cache_pages+0x760/0xe00 [ 84.228504][ T6574] iomap_writepages+0x6c/0x1f4 [ 84.229502][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 84.230528][ T6574] do_writepages+0x2c4/0x50c [ 84.231519][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 84.232669][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 84.233872][ T6574] xfs_file_fsync+0x1b4/0x95c [ 84.234874][ T6574] vfs_fsync_range+0x168/0x188 [ 84.235898][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 84.237077][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 84.238165][ T6574] do_iter_write+0x520/0x93c [ 84.239103][ T6574] vfs_iter_write+0x88/0xac [ 84.240040][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.241173][ T6574] direct_splice_actor+0xe4/0x138 [ 84.242252][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.243423][ T6574] do_splice_direct+0x168/0x25c [ 84.244551][ T6574] do_sendfile+0x460/0xc8c [ 84.245591][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.246862][ T6574] invoke_syscall+0x98/0x290 [ 84.247956][ T6574] el0_svc_common+0x13c/0x258 [ 84.249053][ T6574] do_el0_svc+0x5c/0x134 [ 84.250057][ T6574] el0_svc+0x58/0x12c [ 84.251006][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.252143][ T6574] el0t_64_sync+0x18c/0x190 [ 84.260742][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.262505][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 84.268617][ T6574] CPU: 0 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 84.270206][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 84.272672][ T6574] Call trace: [ 84.273482][ T6574] dump_backtrace+0x1c4/0x1f0 [ 84.274619][ T6574] show_stack+0x2c/0x3c [ 84.275615][ T6574] __dump_stack+0x30/0x40 [ 84.276521][ T6574] dump_stack_lvl+0xf4/0x15c [ 84.277567][ T6574] dump_stack+0x1c/0x5c [ 84.278509][ T6574] xfs_corruption_error+0x12c/0x188 [ 84.279699][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 84.280911][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 84.282054][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 84.283364][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 84.284523][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 84.285663][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 84.286672][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 84.287807][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 84.289127][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 84.290194][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 84.291295][ T6574] write_cache_pages+0x760/0xe00 [ 84.292443][ T6574] iomap_writepages+0x6c/0x1f4 [ 84.293549][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 84.294655][ T6574] do_writepages+0x2c4/0x50c [ 84.295672][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 84.296825][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 84.298038][ T6574] xfs_file_fsync+0x1b4/0x95c [ 84.299055][ T6574] vfs_fsync_range+0x168/0x188 [ 84.300108][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 84.301298][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 84.302422][ T6574] do_iter_write+0x520/0x93c [ 84.303412][ T6574] vfs_iter_write+0x88/0xac [ 84.304391][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.305679][ T6574] direct_splice_actor+0xe4/0x138 [ 84.306833][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.307987][ T6574] do_splice_direct+0x168/0x25c [ 84.309114][ T6574] do_sendfile+0x460/0xc8c [ 84.310075][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.311313][ T6574] invoke_syscall+0x98/0x290 [ 84.312434][ T6574] el0_svc_common+0x13c/0x258 [ 84.313547][ T6574] do_el0_svc+0x5c/0x134 [ 84.314527][ T6574] el0_svc+0x58/0x12c [ 84.315461][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.316632][ T6574] el0t_64_sync+0x18c/0x190 [ 84.320633][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.322206][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 84.324892][ T6574] CPU: 0 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 84.326511][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 84.328768][ T6574] Call trace: [ 84.329505][ T6574] dump_backtrace+0x1c4/0x1f0 [ 84.330540][ T6574] show_stack+0x2c/0x3c [ 84.331415][ T6574] __dump_stack+0x30/0x40 [ 84.332352][ T6574] dump_stack_lvl+0xf4/0x15c [ 84.333364][ T6574] dump_stack+0x1c/0x5c [ 84.334276][ T6574] xfs_corruption_error+0x12c/0x188 [ 84.335457][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 84.336655][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 84.337884][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 84.339276][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 84.340443][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 84.341558][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 84.342657][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 84.343795][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 84.345113][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 84.346260][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 84.347474][ T6574] write_cache_pages+0x760/0xe00 [ 84.348671][ T6574] iomap_writepages+0x6c/0x1f4 [ 84.349813][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 84.350981][ T6574] do_writepages+0x2c4/0x50c [ 84.352068][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 84.353350][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 84.354668][ T6574] xfs_file_fsync+0x1b4/0x95c [ 84.355696][ T6574] vfs_fsync_range+0x168/0x188 [ 84.356845][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 84.358153][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 84.359282][ T6574] do_iter_write+0x520/0x93c [ 84.360299][ T6574] vfs_iter_write+0x88/0xac [ 84.361315][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.362544][ T6574] direct_splice_actor+0xe4/0x138 [ 84.363731][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.364920][ T6574] do_splice_direct+0x168/0x25c [ 84.366080][ T6574] do_sendfile+0x460/0xc8c [ 84.367104][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.368360][ T6574] invoke_syscall+0x98/0x290 [ 84.369343][ T6574] el0_svc_common+0x13c/0x258 [ 84.370479][ T6574] do_el0_svc+0x5c/0x134 [ 84.371502][ T6574] el0_svc+0x58/0x12c [ 84.372394][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.373512][ T6574] el0t_64_sync+0x18c/0x190 [ 84.375410][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.377378][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 84.380407][ T6574] CPU: 1 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 84.382203][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 84.384457][ T6574] Call trace: [ 84.385168][ T6574] dump_backtrace+0x1c4/0x1f0 [ 84.386167][ T6574] show_stack+0x2c/0x3c [ 84.387087][ T6574] __dump_stack+0x30/0x40 [ 84.387990][ T6574] dump_stack_lvl+0xf4/0x15c [ 84.389020][ T6574] dump_stack+0x1c/0x5c [ 84.390022][ T6574] xfs_corruption_error+0x12c/0x188 [ 84.391334][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 84.392572][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 84.393809][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 84.395213][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 84.396477][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 84.397718][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 84.398878][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 84.399998][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 84.401284][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 84.402372][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 84.403559][ T6574] write_cache_pages+0x760/0xe00 [ 84.404708][ T6574] iomap_writepages+0x6c/0x1f4 [ 84.405785][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 84.406872][ T6574] do_writepages+0x2c4/0x50c [ 84.407866][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 84.409040][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 84.410266][ T6574] xfs_file_fsync+0x1b4/0x95c [ 84.411288][ T6574] vfs_fsync_range+0x168/0x188 [ 84.412338][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 84.413547][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 84.414750][ T6574] do_iter_write+0x520/0x93c [ 84.415844][ T6574] vfs_iter_write+0x88/0xac [ 84.416910][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.418134][ T6574] direct_splice_actor+0xe4/0x138 [ 84.419289][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.420482][ T6574] do_splice_direct+0x168/0x25c [ 84.421571][ T6574] do_sendfile+0x460/0xc8c [ 84.422533][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.423728][ T6574] invoke_syscall+0x98/0x290 [ 84.424766][ T6574] el0_svc_common+0x13c/0x258 [ 84.425842][ T6574] do_el0_svc+0x5c/0x134 [ 84.426838][ T6574] el0_svc+0x58/0x12c [ 84.427791][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.428993][ T6574] el0t_64_sync+0x18c/0x190 [ 84.430782][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.432476][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 84.435468][ T6574] CPU: 1 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 84.437060][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 84.439471][ T6574] Call trace: [ 84.440233][ T6574] dump_backtrace+0x1c4/0x1f0 [ 84.441272][ T6574] show_stack+0x2c/0x3c [ 84.442202][ T6574] __dump_stack+0x30/0x40 [ 84.443123][ T6574] dump_stack_lvl+0xf4/0x15c [ 84.444136][ T6574] dump_stack+0x1c/0x5c [ 84.445046][ T6574] xfs_corruption_error+0x12c/0x188 [ 84.446254][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 84.447530][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 84.448714][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 84.450032][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 84.451219][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 84.452399][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 84.453556][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 84.454730][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 84.456098][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 84.457198][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 84.458343][ T6574] write_cache_pages+0x760/0xe00 [ 84.459481][ T6574] iomap_writepages+0x6c/0x1f4 [ 84.460577][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 84.461713][ T6574] do_writepages+0x2c4/0x50c [ 84.462755][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 84.463913][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 84.465088][ T6574] xfs_file_fsync+0x1b4/0x95c [ 84.466062][ T6574] vfs_fsync_range+0x168/0x188 [ 84.467062][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 84.468203][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 84.469272][ T6574] do_iter_write+0x520/0x93c [ 84.470223][ T6574] vfs_iter_write+0x88/0xac [ 84.471166][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.472308][ T6574] direct_splice_actor+0xe4/0x138 [ 84.473357][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.474541][ T6574] do_splice_direct+0x168/0x25c [ 84.475596][ T6574] do_sendfile+0x460/0xc8c [ 84.476504][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.477622][ T6574] invoke_syscall+0x98/0x290 [ 84.478584][ T6574] el0_svc_common+0x13c/0x258 [ 84.479595][ T6574] do_el0_svc+0x5c/0x134 [ 84.480547][ T6574] el0_svc+0x58/0x12c [ 84.481398][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.482468][ T6574] el0t_64_sync+0x18c/0x190 [ 84.483655][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.485193][ T6574] XFS (loop1): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 84.489220][ T6574] CPU: 1 PID: 6574 Comm: syz.1.698 Not tainted syzkaller #0 [ 84.490751][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 84.492850][ T6574] Call trace: [ 84.493542][ T6574] dump_backtrace+0x1c4/0x1f0 [ 84.494607][ T6574] show_stack+0x2c/0x3c [ 84.495540][ T6574] __dump_stack+0x30/0x40 [ 84.496487][ T6574] dump_stack_lvl+0xf4/0x15c [ 84.497496][ T6574] dump_stack+0x1c/0x5c [ 84.498403][ T6574] xfs_corruption_error+0x12c/0x188 [ 84.499531][ T6574] xfs_alloc_fixup_trees+0x5dc/0x770 [ 84.500695][ T6574] xfs_alloc_cur_finish+0xc0/0x550 [ 84.501799][ T6574] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 84.503032][ T6574] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 84.504111][ T6574] xfs_alloc_vextent+0x1208/0x1c00 [ 84.505210][ T6574] xfs_bmap_btalloc+0xadc/0x182c [ 84.506244][ T6574] xfs_bmapi_allocate+0x3fc/0xbfc [ 84.507301][ T6574] xfs_bmapi_convert_delalloc+0x690/0x129c [ 84.508515][ T6574] xfs_map_blocks+0x7d4/0x12bc [ 84.509514][ T6574] iomap_do_writepage+0x7e8/0x22c0 [ 84.510587][ T6574] write_cache_pages+0x760/0xe00 [ 84.511601][ T6574] iomap_writepages+0x6c/0x1f4 [ 84.512591][ T6574] xfs_vm_writepages+0x13c/0x1b0 [ 84.513618][ T6574] do_writepages+0x2c4/0x50c [ 84.514481][ T6574] filemap_fdatawrite_wbc+0x124/0x174 [ 84.515572][ T6574] file_write_and_wait_range+0x11c/0x1f4 [ 84.516727][ T6574] xfs_file_fsync+0x1b4/0x95c [ 84.517700][ T6574] vfs_fsync_range+0x168/0x188 [ 84.518687][ T6574] xfs_file_buffered_write+0x91c/0xa80 [ 84.519837][ T6574] xfs_file_write_iter+0x2b0/0x60c [ 84.520928][ T6574] do_iter_write+0x520/0x93c [ 84.521909][ T6574] vfs_iter_write+0x88/0xac [ 84.522859][ T6574] iter_file_splice_write+0x528/0xa38 [ 84.524023][ T6574] direct_splice_actor+0xe4/0x138 [ 84.525128][ T6574] splice_direct_to_actor+0x3ec/0x9e4 [ 84.526291][ T6574] do_splice_direct+0x168/0x25c [ 84.527359][ T6574] do_sendfile+0x460/0xc8c [ 84.528296][ T6574] __arm64_sys_sendfile64+0x138/0x374 [ 84.529473][ T6574] invoke_syscall+0x98/0x290 [ 84.530461][ T6574] el0_svc_common+0x13c/0x258 [ 84.531468][ T6574] do_el0_svc+0x5c/0x134 [ 84.532376][ T6574] el0_svc+0x58/0x12c [ 84.533211][ T6574] el0t_64_sync_handler+0x84/0xf0 [ 84.534376][ T6574] el0t_64_sync+0x18c/0x190 [ 84.545107][ T6574] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 84.558190][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 84.574485][ T4331] XFS (loop1): Unmounting Filesystem [ 84.715814][ T4342] Bluetooth: hci6: command 0x1003 tx timeout [ 84.715837][ T4337] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 84.754952][ T6634] fuse: Bad value for 'fd' [ 84.765266][ T6636] jffs2: notice: (6636) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.801139][ T6643] device syzkaller0 entered promiscuous mode [ 84.985084][ T6651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.987942][ T6651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.989903][ T6651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.497053][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 85.563938][ T6664] loop2: detected capacity change from 0 to 32768 [ 85.582320][ T6664] XFS (loop2): Mounting V5 Filesystem [ 85.609981][ T6664] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 85.620385][ T6664] XFS (loop2): Starting recovery (logdev: internal) [ 85.625614][ T6664] XFS (loop2): Ending recovery (logdev: internal) [ 85.697392][ T6681] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3a4/0x590, xfs_bnobt block 0x8 [ 85.703906][ T6681] XFS (loop2): Unmount and run xfs_repair [ 85.755733][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 85.758983][ T6664] CPU: 1 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 85.760438][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 85.762540][ T6664] Call trace: [ 85.763186][ T6664] dump_backtrace+0x1c4/0x1f0 [ 85.764160][ T6664] show_stack+0x2c/0x3c [ 85.765024][ T6664] __dump_stack+0x30/0x40 [ 85.765960][ T6664] dump_stack_lvl+0xf4/0x15c [ 85.767019][ T6664] dump_stack+0x1c/0x5c [ 85.767968][ T6664] xfs_corruption_error+0x12c/0x188 [ 85.769184][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 85.770393][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 85.771591][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 85.772893][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 85.774042][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 85.775217][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 85.776328][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 85.777478][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 85.778870][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 85.779997][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 85.781160][ T6664] write_cache_pages+0x760/0xe00 [ 85.782318][ T6664] iomap_writepages+0x6c/0x1f4 [ 85.783406][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 85.784553][ T6664] do_writepages+0x2c4/0x50c [ 85.785630][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 85.786906][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 85.788255][ T6664] xfs_file_fsync+0x1b4/0x95c [ 85.789320][ T6664] vfs_fsync_range+0x168/0x188 [ 85.790450][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 85.791680][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 85.792811][ T6664] do_iter_write+0x520/0x93c [ 85.793806][ T6664] vfs_iter_write+0x88/0xac [ 85.794810][ T6664] iter_file_splice_write+0x528/0xa38 [ 85.795918][ T6664] direct_splice_actor+0xe4/0x138 [ 85.797009][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 85.798167][ T6664] do_splice_direct+0x168/0x25c [ 85.799215][ T6664] do_sendfile+0x460/0xc8c [ 85.800192][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 85.801327][ T6664] invoke_syscall+0x98/0x290 [ 85.802343][ T6664] el0_svc_common+0x13c/0x258 [ 85.803345][ T6664] do_el0_svc+0x5c/0x134 [ 85.804256][ T6664] el0_svc+0x58/0x12c [ 85.805106][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 85.806182][ T6664] el0t_64_sync+0x18c/0x190 [ 85.810098][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 85.811844][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 85.820767][ T6686] fuse: Bad value for 'fd' [ 85.822416][ T6664] CPU: 0 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 85.823902][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 85.825991][ T6664] Call trace: [ 85.826737][ T6664] dump_backtrace+0x1c4/0x1f0 [ 85.827842][ T6664] show_stack+0x2c/0x3c [ 85.828825][ T6664] __dump_stack+0x30/0x40 [ 85.829238][ T6689] jffs2: notice: (6689) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 85.829891][ T6664] dump_stack_lvl+0xf4/0x15c [ 85.834687][ T6664] dump_stack+0x1c/0x5c [ 85.835639][ T6664] xfs_corruption_error+0x12c/0x188 [ 85.836890][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 85.838156][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 85.839399][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 85.840769][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 85.841983][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 85.843159][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 85.844316][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 85.845486][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 85.846820][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 85.847931][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 85.849146][ T6664] write_cache_pages+0x760/0xe00 [ 85.850316][ T6664] iomap_writepages+0x6c/0x1f4 [ 85.851455][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 85.852597][ T6664] do_writepages+0x2c4/0x50c [ 85.853595][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 85.854732][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 85.855923][ T6664] xfs_file_fsync+0x1b4/0x95c [ 85.856922][ T6664] vfs_fsync_range+0x168/0x188 [ 85.857933][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 85.859147][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 85.860398][ T6664] do_iter_write+0x520/0x93c [ 85.861461][ T6664] vfs_iter_write+0x88/0xac [ 85.862527][ T6664] iter_file_splice_write+0x528/0xa38 [ 85.863806][ T6664] direct_splice_actor+0xe4/0x138 [ 85.864985][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 85.866188][ T6664] do_splice_direct+0x168/0x25c [ 85.867321][ T6664] do_sendfile+0x460/0xc8c [ 85.868350][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 85.869576][ T6664] invoke_syscall+0x98/0x290 [ 85.870664][ T6664] el0_svc_common+0x13c/0x258 [ 85.871841][ T6664] do_el0_svc+0x5c/0x134 [ 85.872914][ T6664] el0_svc+0x58/0x12c [ 85.873905][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 85.875141][ T6664] el0t_64_sync+0x18c/0x190 [ 85.995928][ T4345] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 86.162020][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.175845][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.178627][ T6664] CPU: 0 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.180182][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.182179][ T6664] Call trace: [ 86.182869][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.184005][ T6664] show_stack+0x2c/0x3c [ 86.184995][ T6664] __dump_stack+0x30/0x40 [ 86.186013][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.187079][ T6664] dump_stack+0x1c/0x5c [ 86.188036][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.189274][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.190480][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.191536][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.191604][ T6695] device syzkaller0 entered promiscuous mode [ 86.192823][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.192838][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.196369][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.197355][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.198481][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.199041][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.199785][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.199800][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.202316][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.202428][ T6664] write_cache_pages+0x760/0xe00 [ 86.203742][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.205018][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.208484][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.209564][ T6664] do_writepages+0x2c4/0x50c [ 86.210549][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.211735][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.212997][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.213997][ T6664] vfs_fsync_range+0x168/0x188 [ 86.215005][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.216079][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.217150][ T6664] do_iter_write+0x520/0x93c [ 86.218076][ T6664] vfs_iter_write+0x88/0xac [ 86.218987][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.220156][ T6664] direct_splice_actor+0xe4/0x138 [ 86.221240][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.222425][ T6664] do_splice_direct+0x168/0x25c [ 86.223567][ T6664] do_sendfile+0x460/0xc8c [ 86.224573][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.225795][ T6664] invoke_syscall+0x98/0x290 [ 86.226855][ T6664] el0_svc_common+0x13c/0x258 [ 86.227912][ T6664] do_el0_svc+0x5c/0x134 [ 86.228878][ T6664] el0_svc+0x58/0x12c [ 86.229747][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.230893][ T6664] el0t_64_sync+0x18c/0x190 [ 86.238708][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.240723][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.255791][ T6664] CPU: 1 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.257591][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.259986][ T6664] Call trace: [ 86.260766][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.261948][ T6664] show_stack+0x2c/0x3c [ 86.262998][ T6664] __dump_stack+0x30/0x40 [ 86.264027][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.265121][ T6664] dump_stack+0x1c/0x5c [ 86.266101][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.267311][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.268526][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.269707][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.270979][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.272108][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.273189][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.274110][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.275143][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.276379][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.277374][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.278431][ T6664] write_cache_pages+0x760/0xe00 [ 86.279353][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.280348][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.281394][ T6664] do_writepages+0x2c4/0x50c [ 86.282373][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.283465][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.284640][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.285615][ T6664] vfs_fsync_range+0x168/0x188 [ 86.286632][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.287798][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.288894][ T6664] do_iter_write+0x520/0x93c [ 86.289885][ T6664] vfs_iter_write+0x88/0xac [ 86.290859][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.292027][ T6664] direct_splice_actor+0xe4/0x138 [ 86.293111][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.294130][ T6664] do_splice_direct+0x168/0x25c [ 86.295129][ T6664] do_sendfile+0x460/0xc8c [ 86.296085][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.297219][ T6664] invoke_syscall+0x98/0x290 [ 86.298169][ T6664] el0_svc_common+0x13c/0x258 [ 86.299186][ T6664] do_el0_svc+0x5c/0x134 [ 86.300137][ T6664] el0_svc+0x58/0x12c [ 86.301021][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.302078][ T6664] el0t_64_sync+0x18c/0x190 [ 86.303822][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.307219][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.310066][ T6664] CPU: 0 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.311505][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.313676][ T6664] Call trace: [ 86.314393][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.315442][ T6664] show_stack+0x2c/0x3c [ 86.316411][ T6664] __dump_stack+0x30/0x40 [ 86.317440][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.318518][ T6664] dump_stack+0x1c/0x5c [ 86.319490][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.320696][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.321929][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.323122][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.324411][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.325600][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.326769][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.327904][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.329084][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.330435][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.331537][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.332762][ T6664] write_cache_pages+0x760/0xe00 [ 86.333948][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.335104][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.336256][ T6664] do_writepages+0x2c4/0x50c [ 86.337328][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.338575][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.339943][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.341037][ T6664] vfs_fsync_range+0x168/0x188 [ 86.342192][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.343529][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.344750][ T6664] do_iter_write+0x520/0x93c [ 86.345790][ T6664] vfs_iter_write+0x88/0xac [ 86.346833][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.348069][ T6664] direct_splice_actor+0xe4/0x138 [ 86.349257][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.350500][ T6664] do_splice_direct+0x168/0x25c [ 86.351636][ T6664] do_sendfile+0x460/0xc8c [ 86.352686][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.353993][ T6664] invoke_syscall+0x98/0x290 [ 86.355120][ T6664] el0_svc_common+0x13c/0x258 [ 86.356273][ T6664] do_el0_svc+0x5c/0x134 [ 86.357315][ T6664] el0_svc+0x58/0x12c [ 86.358330][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.359550][ T6664] el0t_64_sync+0x18c/0x190 [ 86.361422][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.373132][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.376064][ T6664] CPU: 0 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.377665][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.380076][ T6664] Call trace: [ 86.380848][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.381938][ T6664] show_stack+0x2c/0x3c [ 86.382909][ T6664] __dump_stack+0x30/0x40 [ 86.383867][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.384926][ T6664] dump_stack+0x1c/0x5c [ 86.385849][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.387045][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.388319][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.389603][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.391033][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.392156][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.393257][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.394326][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.395413][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.396662][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.397692][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.398822][ T6664] write_cache_pages+0x760/0xe00 [ 86.399946][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.401024][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.402128][ T6664] do_writepages+0x2c4/0x50c [ 86.403185][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.404332][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.405598][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.406674][ T6664] vfs_fsync_range+0x168/0x188 [ 86.407784][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.409040][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.410264][ T6664] do_iter_write+0x520/0x93c [ 86.411373][ T6664] vfs_iter_write+0x88/0xac [ 86.412390][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.413666][ T6664] direct_splice_actor+0xe4/0x138 [ 86.414855][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.416074][ T6664] do_splice_direct+0x168/0x25c [ 86.417237][ T6664] do_sendfile+0x460/0xc8c [ 86.418282][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.419557][ T6664] invoke_syscall+0x98/0x290 [ 86.420674][ T6664] el0_svc_common+0x13c/0x258 [ 86.421842][ T6664] do_el0_svc+0x5c/0x134 [ 86.422874][ T6664] el0_svc+0x58/0x12c [ 86.423846][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.425036][ T6664] el0t_64_sync+0x18c/0x190 [ 86.426764][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.429279][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.432525][ T6664] CPU: 0 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.434125][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.436505][ T6664] Call trace: [ 86.437302][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.438410][ T6664] show_stack+0x2c/0x3c [ 86.439400][ T6664] __dump_stack+0x30/0x40 [ 86.440428][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.441475][ T6664] dump_stack+0x1c/0x5c [ 86.442471][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.443686][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.444806][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.445930][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.447173][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.448291][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.449377][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.450451][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.451518][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.452799][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.453742][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.454889][ T6664] write_cache_pages+0x760/0xe00 [ 86.455933][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.456948][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.457995][ T6664] do_writepages+0x2c4/0x50c [ 86.458978][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.460139][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.461341][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.462351][ T6664] vfs_fsync_range+0x168/0x188 [ 86.463394][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.464587][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.465692][ T6664] do_iter_write+0x520/0x93c [ 86.466673][ T6664] vfs_iter_write+0x88/0xac [ 86.467616][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.468746][ T6664] direct_splice_actor+0xe4/0x138 [ 86.469794][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.470918][ T6664] do_splice_direct+0x168/0x25c [ 86.471919][ T6664] do_sendfile+0x460/0xc8c [ 86.472821][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.474006][ T6664] invoke_syscall+0x98/0x290 [ 86.475001][ T6664] el0_svc_common+0x13c/0x258 [ 86.476040][ T6664] do_el0_svc+0x5c/0x134 [ 86.476932][ T6664] el0_svc+0x58/0x12c [ 86.477785][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.478830][ T6664] el0t_64_sync+0x18c/0x190 [ 86.480396][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.482915][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.486037][ T6664] CPU: 0 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.487541][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.489904][ T6664] Call trace: [ 86.490671][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.491776][ T6664] show_stack+0x2c/0x3c [ 86.492778][ T6664] __dump_stack+0x30/0x40 [ 86.493806][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.494911][ T6664] dump_stack+0x1c/0x5c [ 86.495915][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.497092][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.498259][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.499404][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.500660][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.501851][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.503029][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.504111][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.505172][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.506444][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.507506][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.508672][ T6664] write_cache_pages+0x760/0xe00 [ 86.509815][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.510905][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.512023][ T6664] do_writepages+0x2c4/0x50c [ 86.513073][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.514282][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.515404][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.516264][ T6664] vfs_fsync_range+0x168/0x188 [ 86.517290][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.518491][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.519653][ T6664] do_iter_write+0x520/0x93c [ 86.520650][ T6664] vfs_iter_write+0x88/0xac [ 86.521629][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.522831][ T6664] direct_splice_actor+0xe4/0x138 [ 86.524011][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.525290][ T6664] do_splice_direct+0x168/0x25c [ 86.526447][ T6664] do_sendfile+0x460/0xc8c [ 86.527454][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.528706][ T6664] invoke_syscall+0x98/0x290 [ 86.529758][ T6664] el0_svc_common+0x13c/0x258 [ 86.530846][ T6664] do_el0_svc+0x5c/0x134 [ 86.531851][ T6664] el0_svc+0x58/0x12c [ 86.532794][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.533981][ T6664] el0t_64_sync+0x18c/0x190 [ 86.535992][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.538099][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.555764][ T6664] CPU: 1 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.557329][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.559682][ T6664] Call trace: [ 86.560495][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.561623][ T6664] show_stack+0x2c/0x3c [ 86.562639][ T6664] __dump_stack+0x30/0x40 [ 86.563706][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.564771][ T6664] dump_stack+0x1c/0x5c [ 86.565732][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.566948][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.568194][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.569418][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.570791][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.571996][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.573181][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.574325][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.575429][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.576791][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.577886][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.579150][ T6664] write_cache_pages+0x760/0xe00 [ 86.580338][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.581499][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.582680][ T6664] do_writepages+0x2c4/0x50c [ 86.583768][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.585021][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.586338][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.587441][ T6664] vfs_fsync_range+0x168/0x188 [ 86.588561][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.589902][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.591174][ T6664] do_iter_write+0x520/0x93c [ 86.592286][ T6664] vfs_iter_write+0x88/0xac [ 86.593378][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.594684][ T6664] direct_splice_actor+0xe4/0x138 [ 86.595944][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.597283][ T6664] do_splice_direct+0x168/0x25c [ 86.598417][ T6664] do_sendfile+0x460/0xc8c [ 86.599452][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.600646][ T6664] invoke_syscall+0x98/0x290 [ 86.601667][ T6664] el0_svc_common+0x13c/0x258 [ 86.602758][ T6664] do_el0_svc+0x5c/0x134 [ 86.603713][ T6664] el0_svc+0x58/0x12c [ 86.604589][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.605699][ T6664] el0t_64_sync+0x18c/0x190 [ 86.611344][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.613139][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.632115][ T6664] CPU: 1 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.633634][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.635688][ T6664] Call trace: [ 86.636441][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.637520][ T6664] show_stack+0x2c/0x3c [ 86.638481][ T6664] __dump_stack+0x30/0x40 [ 86.639460][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.640438][ T6664] dump_stack+0x1c/0x5c [ 86.641416][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.642564][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.643692][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.644863][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.646118][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.647302][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.648506][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.649663][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.650834][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.652106][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.653141][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.654223][ T6664] write_cache_pages+0x760/0xe00 [ 86.655287][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.656289][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.657352][ T6664] do_writepages+0x2c4/0x50c [ 86.658323][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.659472][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.660641][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.661639][ T6664] vfs_fsync_range+0x168/0x188 [ 86.662657][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.663821][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.664890][ T6664] do_iter_write+0x520/0x93c [ 86.665852][ T6664] vfs_iter_write+0x88/0xac [ 86.666800][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.667922][ T6664] direct_splice_actor+0xe4/0x138 [ 86.669007][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.670117][ T6664] do_splice_direct+0x168/0x25c [ 86.671138][ T6664] do_sendfile+0x460/0xc8c [ 86.672062][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.673156][ T6664] invoke_syscall+0x98/0x290 [ 86.674081][ T6664] el0_svc_common+0x13c/0x258 [ 86.675041][ T6664] do_el0_svc+0x5c/0x134 [ 86.675904][ T6664] el0_svc+0x58/0x12c [ 86.676708][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.677685][ T6664] el0t_64_sync+0x18c/0x190 [ 86.690569][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.692424][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.695172][ T6664] CPU: 1 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.696835][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.699053][ T6664] Call trace: [ 86.699796][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.700883][ T6664] show_stack+0x2c/0x3c [ 86.701839][ T6664] __dump_stack+0x30/0x40 [ 86.702855][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.703944][ T6664] dump_stack+0x1c/0x5c [ 86.704919][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.706102][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.707334][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.708473][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.709770][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.710963][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.712095][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.713220][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.714386][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.715734][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.716863][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.718134][ T6664] write_cache_pages+0x760/0xe00 [ 86.719359][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.720445][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.721563][ T6664] do_writepages+0x2c4/0x50c [ 86.722626][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.723817][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.725094][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.726171][ T6664] vfs_fsync_range+0x168/0x188 [ 86.727300][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.728589][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.729842][ T6664] do_iter_write+0x520/0x93c [ 86.730950][ T6664] vfs_iter_write+0x88/0xac [ 86.732016][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.733278][ T6664] direct_splice_actor+0xe4/0x138 [ 86.734437][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.735685][ T6664] do_splice_direct+0x168/0x25c [ 86.736821][ T6664] do_sendfile+0x460/0xc8c [ 86.737794][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.739112][ T6664] invoke_syscall+0x98/0x290 [ 86.740238][ T6664] el0_svc_common+0x13c/0x258 [ 86.741293][ T6664] do_el0_svc+0x5c/0x134 [ 86.742241][ T6664] el0_svc+0x58/0x12c [ 86.743195][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.744353][ T6664] el0t_64_sync+0x18c/0x190 [ 86.748000][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.749764][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.752414][ T6664] CPU: 1 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.753867][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.755962][ T6664] Call trace: [ 86.756716][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.757822][ T6664] show_stack+0x2c/0x3c [ 86.758793][ T6664] __dump_stack+0x30/0x40 [ 86.759783][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.760834][ T6664] dump_stack+0x1c/0x5c [ 86.761769][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.762976][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.764174][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.765320][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.766543][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.767644][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.768793][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.769841][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.770972][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.772422][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.773605][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.774788][ T6664] write_cache_pages+0x760/0xe00 [ 86.775956][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.777084][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.778261][ T6664] do_writepages+0x2c4/0x50c [ 86.779332][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.780610][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.781963][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.783080][ T6664] vfs_fsync_range+0x168/0x188 [ 86.784194][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.785432][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.786630][ T6664] do_iter_write+0x520/0x93c [ 86.787738][ T6664] vfs_iter_write+0x88/0xac [ 86.788839][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.790128][ T6664] direct_splice_actor+0xe4/0x138 [ 86.791339][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.792676][ T6664] do_splice_direct+0x168/0x25c [ 86.793871][ T6664] do_sendfile+0x460/0xc8c [ 86.794913][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.796154][ T6664] invoke_syscall+0x98/0x290 [ 86.797252][ T6664] el0_svc_common+0x13c/0x258 [ 86.798395][ T6664] do_el0_svc+0x5c/0x134 [ 86.799434][ T6664] el0_svc+0x58/0x12c [ 86.800312][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.801551][ T6664] el0t_64_sync+0x18c/0x190 [ 86.812260][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.813978][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.819385][ T6664] CPU: 1 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.820893][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.823172][ T6664] Call trace: [ 86.823917][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.824977][ T6664] show_stack+0x2c/0x3c [ 86.825963][ T6664] __dump_stack+0x30/0x40 [ 86.827039][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.828127][ T6664] dump_stack+0x1c/0x5c [ 86.829109][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.830392][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.831725][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.832955][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.834193][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.835322][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.836427][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.837492][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.838584][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.839835][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.840848][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.841939][ T6664] write_cache_pages+0x760/0xe00 [ 86.843024][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.844025][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.845114][ T6664] do_writepages+0x2c4/0x50c [ 86.846179][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.847362][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.848627][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.849664][ T6664] vfs_fsync_range+0x168/0x188 [ 86.850745][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.851973][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.853037][ T6664] do_iter_write+0x520/0x93c [ 86.854051][ T6664] vfs_iter_write+0x88/0xac [ 86.855004][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.856136][ T6664] direct_splice_actor+0xe4/0x138 [ 86.857195][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.858503][ T6664] do_splice_direct+0x168/0x25c [ 86.859664][ T6664] do_sendfile+0x460/0xc8c [ 86.860724][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.861989][ T6664] invoke_syscall+0x98/0x290 [ 86.863084][ T6664] el0_svc_common+0x13c/0x258 [ 86.864256][ T6664] do_el0_svc+0x5c/0x134 [ 86.865306][ T6664] el0_svc+0x58/0x12c [ 86.866303][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.867492][ T6664] el0t_64_sync+0x18c/0x190 [ 86.871093][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.873381][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.876736][ T6664] CPU: 1 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.878228][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.880442][ T6664] Call trace: [ 86.881153][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.882195][ T6664] show_stack+0x2c/0x3c [ 86.883121][ T6664] __dump_stack+0x30/0x40 [ 86.884117][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.885155][ T6664] dump_stack+0x1c/0x5c [ 86.886134][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.887328][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.888575][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.889787][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.891112][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.892279][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.893478][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.894607][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.895755][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.897056][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.898136][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.899314][ T6664] write_cache_pages+0x760/0xe00 [ 86.900424][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.901525][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.902632][ T6664] do_writepages+0x2c4/0x50c [ 86.903650][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.904855][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.906122][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.907217][ T6664] vfs_fsync_range+0x168/0x188 [ 86.908264][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.909497][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.910566][ T6664] do_iter_write+0x520/0x93c [ 86.911583][ T6664] vfs_iter_write+0x88/0xac [ 86.912576][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.913729][ T6664] direct_splice_actor+0xe4/0x138 [ 86.914741][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.915871][ T6664] do_splice_direct+0x168/0x25c [ 86.916973][ T6664] do_sendfile+0x460/0xc8c [ 86.917973][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.919142][ T6664] invoke_syscall+0x98/0x290 [ 86.920256][ T6664] el0_svc_common+0x13c/0x258 [ 86.921395][ T6664] do_el0_svc+0x5c/0x134 [ 86.922459][ T6664] el0_svc+0x58/0x12c [ 86.923334][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.924413][ T6664] el0t_64_sync+0x18c/0x190 [ 86.927673][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.929290][ T6664] xfs_discard_folio: 35 callbacks suppressed [ 86.929299][ T6664] XFS (loop2): page discard on page 00000000afad1987, inode 0x1146, pos 2150400. [ 86.930666][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 86.932470][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.937536][ T6664] CPU: 1 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.939110][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.941413][ T6664] Call trace: [ 86.942111][ T6664] dump_backtrace+0x1c4/0x1f0 [ 86.943131][ T6664] show_stack+0x2c/0x3c [ 86.944101][ T6664] __dump_stack+0x30/0x40 [ 86.945191][ T6664] dump_stack_lvl+0xf4/0x15c [ 86.946328][ T6664] dump_stack+0x1c/0x5c [ 86.947315][ T6664] xfs_corruption_error+0x12c/0x188 [ 86.948473][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 86.949676][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 86.950801][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 86.952072][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 86.953212][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 86.954370][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 86.955502][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 86.956647][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 86.957914][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 86.958993][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 86.960096][ T6664] write_cache_pages+0x760/0xe00 [ 86.961177][ T6664] iomap_writepages+0x6c/0x1f4 [ 86.962219][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 86.963295][ T6664] do_writepages+0x2c4/0x50c [ 86.964288][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 86.965426][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 86.966633][ T6664] xfs_file_fsync+0x1b4/0x95c [ 86.967617][ T6664] vfs_fsync_range+0x168/0x188 [ 86.968670][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 86.969874][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 86.970997][ T6664] do_iter_write+0x520/0x93c [ 86.972016][ T6664] vfs_iter_write+0x88/0xac [ 86.972988][ T6664] iter_file_splice_write+0x528/0xa38 [ 86.974154][ T6664] direct_splice_actor+0xe4/0x138 [ 86.975272][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 86.976445][ T6664] do_splice_direct+0x168/0x25c [ 86.977577][ T6664] do_sendfile+0x460/0xc8c [ 86.978590][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 86.979851][ T6664] invoke_syscall+0x98/0x290 [ 86.980906][ T6664] el0_svc_common+0x13c/0x258 [ 86.981991][ T6664] do_el0_svc+0x5c/0x134 [ 86.982993][ T6664] el0_svc+0x58/0x12c [ 86.983913][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 86.985051][ T6664] el0t_64_sync+0x18c/0x190 [ 86.989145][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 86.990921][ T6664] XFS (loop2): page discard on page 0000000098e0fcbe, inode 0x1146, pos 2154496. [ 86.992896][ T6664] XFS (loop2): Internal error i != 1 at line 498 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x534/0x770 [ 86.995954][ T6664] CPU: 0 PID: 6664 Comm: syz.2.725 Not tainted syzkaller #0 [ 86.997626][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 86.999929][ T6664] Call trace: [ 87.000685][ T6664] dump_backtrace+0x1c4/0x1f0 [ 87.001809][ T6664] show_stack+0x2c/0x3c [ 87.002802][ T6664] __dump_stack+0x30/0x40 [ 87.003828][ T6664] dump_stack_lvl+0xf4/0x15c [ 87.004892][ T6664] dump_stack+0x1c/0x5c [ 87.005841][ T6664] xfs_corruption_error+0x12c/0x188 [ 87.006996][ T6664] xfs_alloc_fixup_trees+0x5dc/0x770 [ 87.008185][ T6664] xfs_alloc_cur_finish+0xc0/0x550 [ 87.009400][ T6664] xfs_alloc_ag_vextent_near+0xbd8/0x11e4 [ 87.010653][ T6664] xfs_alloc_ag_vextent+0xa8/0x7c4 [ 87.011850][ T6664] xfs_alloc_vextent+0x1208/0x1c00 [ 87.013081][ T6664] xfs_bmap_btalloc+0xadc/0x182c [ 87.014262][ T6664] xfs_bmapi_allocate+0x3fc/0xbfc [ 87.015447][ T6664] xfs_bmapi_convert_delalloc+0x690/0x129c [ 87.016829][ T6664] xfs_map_blocks+0x7d4/0x12bc [ 87.017951][ T6664] iomap_do_writepage+0x7e8/0x22c0 [ 87.019138][ T6664] write_cache_pages+0x760/0xe00 [ 87.020275][ T6664] iomap_writepages+0x6c/0x1f4 [ 87.021468][ T6664] xfs_vm_writepages+0x13c/0x1b0 [ 87.022665][ T6664] do_writepages+0x2c4/0x50c [ 87.023788][ T6664] filemap_fdatawrite_wbc+0x124/0x174 [ 87.025084][ T6664] file_write_and_wait_range+0x11c/0x1f4 [ 87.026406][ T6664] xfs_file_fsync+0x1b4/0x95c [ 87.027521][ T6664] vfs_fsync_range+0x168/0x188 [ 87.028690][ T6664] xfs_file_buffered_write+0x91c/0xa80 [ 87.030010][ T6664] xfs_file_write_iter+0x2b0/0x60c [ 87.031251][ T6664] do_iter_write+0x520/0x93c [ 87.032334][ T6664] vfs_iter_write+0x88/0xac [ 87.033295][ T6664] iter_file_splice_write+0x528/0xa38 [ 87.034564][ T6664] direct_splice_actor+0xe4/0x138 [ 87.035807][ T6664] splice_direct_to_actor+0x3ec/0x9e4 [ 87.037029][ T6664] do_splice_direct+0x168/0x25c [ 87.038118][ T6664] do_sendfile+0x460/0xc8c [ 87.039139][ T6664] __arm64_sys_sendfile64+0x138/0x374 [ 87.040441][ T6664] invoke_syscall+0x98/0x290 [ 87.041447][ T6664] el0_svc_common+0x13c/0x258 [ 87.042548][ T6664] do_el0_svc+0x5c/0x134 [ 87.043446][ T6664] el0_svc+0x58/0x12c [ 87.044313][ T6664] el0t_64_sync_handler+0x84/0xf0 [ 87.045417][ T6664] el0t_64_sync+0x18c/0x190 [ 87.049483][ T6664] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 87.051338][ T6664] XFS (loop2): page discard on page 0000000089d1cc07, inode 0x1146, pos 2158592. [ 87.066035][ T4336] XFS (loop2): Unmounting Filesystem [ 87.122990][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.125322][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.129640][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.208195][ T6733] fuse: Bad value for 'fd' [ 87.209345][ T6732] loop0: detected capacity change from 0 to 32768 [ 87.213175][ T6732] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.746 (6732) [ 87.227462][ T6732] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 87.229710][ T6732] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 87.231670][ T6732] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 87.233761][ T6732] BTRFS info (device loop0): use zstd compression, level 3 [ 87.235287][ T6732] BTRFS info (device loop0): force clearing of disk cache [ 87.236975][ T6732] BTRFS info (device loop0): enabling disk space caching [ 87.238379][ T6732] BTRFS info (device loop0): disk space caching is enabled [ 87.306937][ T6734] page:0000000081ae421e refcount:4 mapcount:1 mapping:0000000094222ece index:0x0 pfn:0x13d9c2 [ 87.309429][ T6734] memcg:ffff0000d0834000 [ 87.310380][ T6734] aops:shmem_aops ino:44f [ 87.311312][ T6734] flags: 0x5ffd80000080015(locked|uptodate|lru|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 87.313438][ T6734] raw: 05ffd80000080015 ffff0000c3428258 fffffc0003eb5008 ffff0000c37a0368 [ 87.315306][ T6734] raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000d0834000 [ 87.317140][ T6734] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 87.318723][ T6734] ------------[ cut here ]------------ [ 87.319879][ T6734] kernel BUG at mm/filemap.c:153! [ 87.321061][ T6734] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 87.322578][ T6734] Modules linked in: [ 87.323389][ T6734] CPU: 1 PID: 6734 Comm: syz.4.747 Not tainted syzkaller #0 [ 87.324879][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 87.326921][ T6734] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 87.328513][ T6734] pc : filemap_unaccount_folio+0x44c/0x4f0 [ 87.329697][ T6734] lr : filemap_unaccount_folio+0x44c/0x4f0 [ 87.330920][ T6734] sp : ffff800027a771f0 [ 87.331792][ T6734] x29: ffff800027a771f0 x28: ffff800027a77520 x27: 0000000000000000 [ 87.333481][ T6734] x26: dfff800000000000 x25: ffff700004f4ee4c x24: 1fffff80007ece11 [ 87.335148][ T6734] x23: ffff800027a77280 x22: ffff0000c37a0368 x21: fffffc0003f67098 [ 87.336850][ T6734] x20: ffff0000c37a0368 x19: fffffc0003f67080 x18: 0000000000000000 [ 87.338541][ T6734] x17: 0000000000000000 x16: ffff800011ba16d0 x15: 0000000000000000 [ 87.340292][ T6734] x14: 0000000000000001 x13: 1fffe00033c259a3 x12: 0000000000000000 [ 87.341986][ T6734] x11: ff008000087d0634 x10: 0000000000000000 x9 : ffff8000087d0634 [ 87.343707][ T6734] x8 : ffff0000f424b800 x7 : 0000000000000001 x6 : 0000000000000001 [ 87.345501][ T6734] x5 : ffff800027a76c38 x4 : ffff8000164c4fa0 x3 : ffff800008545104 [ 87.347298][ T6734] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000039 [ 87.349133][ T6734] Call trace: [ 87.349855][ T6734] filemap_unaccount_folio+0x44c/0x4f0 [ 87.351014][ T6734] __filemap_remove_folio+0xc4/0x4fc [ 87.352161][ T6734] filemap_remove_folio+0xd0/0x1c0 [ 87.353272][ T6734] truncate_inode_folio+0x6c/0x84 [ 87.354376][ T6734] shmem_undo_range+0x3c8/0x14a8 [ 87.355436][ T6734] shmem_evict_inode+0x200/0x8b0 [ 87.356496][ T6734] evict+0x3d8/0x81c [ 87.357368][ T6734] iput+0x728/0x7e8 [ 87.358236][ T6734] dentry_unlink_inode+0x360/0x438 [ 87.359412][ T6734] __dentry_kill+0x318/0x590 [ 87.360459][ T6734] dentry_kill+0xcc/0x24c [ 87.361430][ T6734] dput+0x228/0x444 [ 87.362256][ T6734] __fput+0x480/0x7b0 [ 87.363144][ T6734] ____fput+0x20/0x30 [ 87.364025][ T6734] task_work_run+0x1f4/0x280 [ 87.365005][ T6734] do_notify_resume+0x20f8/0x2c84 [ 87.365995][ T6734] el0_svc+0x9c/0x12c [ 87.366878][ T6734] el0t_64_sync_handler+0x84/0xf0 [ 87.368041][ T6734] el0t_64_sync+0x18c/0x190 [ 87.369112][ T6734] Code: 9004b441 91218021 aa1303e0 940381b2 (d4210000) [ 87.370750][ T6734] ---[ end trace 0000000000000000 ]--- [ 87.405724][ T6732] BTRFS info (device loop0): enabling ssd optimizations [ 87.407681][ T6732] BTRFS info (device loop0): rebuilding free space tree [ 87.410574][ T6732] BTRFS info (device loop0): disabling free space tree [ 87.412198][ T6732] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.414333][ T6732] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.681639][ T6734] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 87.683160][ T6734] SMP: stopping secondary CPUs [ 87.684161][ T6734] Kernel Offset: disabled [ 87.685044][ T6734] CPU features: 0x050000,000f0097,a65bfea7 [ 87.686287][ T6734] Memory Limit: none [ 87.991424][ T6734] Rebooting in 86400 seconds..