last executing test programs: 2.731110401s ago: executing program 3 (id=5635): r0 = syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0x58b4, &(0x7f0000005980)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJIgEFCCCy4UYKGlpagf0EJq0WhRBatESuRlE1ZRitWltpBa3UU/+BTykBLIQ1k+5qmZvqfTc6fv3J7unpDA71fJ3D6nb//PueeevtP/Mz3TAQAAgNeE3ddv2XvOUR/41RdHX7rmwz/bcG3oL4/XV+MOA+n2ileqhxxIvZVF49vsvHjTVT/489DF7/vl3X3ff3nXmmPX/v79h118/2fO3Hnbtx96ce69/3ymKG6cTyfuLyfPJSFUf77n61/a9diRY3VJCKGcDGwPYUGy8KEFSSbE8N9DCGvSwqLMnfe8dMrase21N/VOqJ+f2c98f22rpvNs297LTwp/eO+q636z+Mc/6tnx7Pb9uyTVhvkUwrwLGx/fE0KYnf4fE2dbnI9x0q4MIfQ1PO6Mgn4d12L/l+WUj063s9Jtf0GceP+STLmU2S9bjnoy276C9jqV14929ysyJ1POXow6ldfPWL8g3f403Z44zfjl+D8JpSRU6t1fn+yfI6HhvCUhGT+X1Xq5VD+3IT3+TDnJlEuZcrknc1zj7aYTrZwkE+vjfpn6eDmupPXHNl6rmzg3p/716baaPlFfjuWQvVHTP+lG/bjGxX7tmaIvB0Kp4RrUrL5+4tOT0Z/W9ScLJz1mXxPxvl2rbl5aXv3w7oGcfiR3J2n8pK342369YM6nfnjjZdnv6/X4F5bS+KW24v/xrMefP//G730rN/6tMX65rfgnP9D33FmPXL8kd3z2xPGptBV/5JlHb1l8+EU7cvt/e4xfbSv+ip2P987d+8CDuf0fjuMzu634T7/zg3+668n7ns2NH2L8vrbir9656cu9g3tPyI3/YByf/vbmzws7Tn9qcPAvQ3nxn4jx57YV/87tt73jjvk3nZl7flfG8RloK/7Zx99/3Zy99x2Td+1Mbu/Wd06A16bD0tdYN6TldvPMTjXkC98cqtRe881J/8/tZkMZY+3Mm8H4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALw2HXHS//zQ///4wHOVtNyb3ni6VNvG+lkhJLNDCFu2jmzeum7jJUOfufSyzRtH1g+NbB0a3bh185VDp75laPPopvUjV47dO/zWU2qPWxiS2jY5ZlLb+/bt21camFgX2/tPx+/4w9Iz/uWvIQwf8bvBSm7/l9224Y7Dm3zNSFbse8+Gy8753WnfTY9rIO3XQE6/Qk6//vW8f9zx1T1/PiGE4ddN1a9Hn373LyZ0aLxif5xUqTfUOtSb9DXtR73XaX/ieFXWrls/Olw8vuWc4/jPVz3797VXfOUftfGt5h5Hi+M7e8W+9aVvrDr7379xda3iYD3vReMdjyL2L45fNR3veelxzcs5rkrOcV3/mwef/PlRN764PQxXXlg8ue2i4+pJJ0BP8vqW2o0t9CULJtRX0/3jGY+PW7Z1w6ZlW67c9tZ1G0YuGb1kdOPbl5+6/PTh004/bdn4kS/r8vHH9t/Y4vEfmPk0/3Pbfxq/tjafivpVNB5j/Soej8Ye5T3/+s790tfeftsj59QqiuZ53Lt+PUm3fWPneXlomG+Tx6rZcRWNQwhhqNk4PP/imeHI/7PuuqLrUOOZafyakazY99iSv333jO8selet4oBc5xs71OZ1vt7r/f0ZH69qej4O1vHtDeX0uPqb9mv5Y4/03Lz7r5+v92/WrHDFyNatm5fXvs5JezonObppv7K18bgWj38th3RYQn2aNpmvY3pCrX/Z62fcPTuq/el9/cnCpseVFe/btermpeXVD+/OG+nk7lqLs8Pc2jZ5Q86e6zMPLNc73Kz9Q3V+DH7oO/d+/N6fnDppfpxc+1p0XEnOcf34yTu/9v2v/NefdO+4PvTuxwf+9n8/vbRWcahcV+q9TvuTNF5XTg6h6Pm3ODQ/jtznX6n58RQ9/7Lt7N+/ebyhTLk/lNt6vp78QN9zZz1y/ZLc5+ueVp+vV08olQuerwfL/Hnlnl8TJkqyYt8vbzhs+0PXrDyqVlE0r+t7N5vXp7SQf+Qc1y/Of2rw0qH/8r+7d934wVvuueD3Iyu+UKs4WM57NR3fas741nsd887G8X3bxZeuX1OrP3hf/6bbgvwnXkq2XLntsyPr149u3tLacbX6/TS2kx3ldr+fxqvbwoLjKk06rpm70cp4tfp8i/1f0/Z4TXy+9Yekre8L2369YM6nfnjjZQOTHpU2dGEpjV9qK/4fz3r8+fNv/N63cuPfGuNX2oo/8syjtyw+/KIdufFvT9L41bbir9j5eO/cvQ88mBt/OPZ/dlvxn37nB/9015P3PZsbP8T4/e2N/ws7Tn9qcPAvufGfSNJ2xl4jhXDPS6esrZWT0JM+32I/eib0K2TLSaZcypTLjeVSba213kA5SSbWx/3S+mMb+tLMJ3Lq46uw6qLa9uVYDtkbU9cfbEoN1/5m9UWvUwEAXu3iz//ja9D48//R9IVS/koD7NdpHrYoJ27Mw/av58yacP+iNH58fFwHHHxbGB7bXjtUe6E/3XXO+HzIrnPGdk44bmKMdtc5i9bfl2TKsV+19fJKQx6ampzXVEIL6++T25l6/T1z+MXr40M3TOrWUMO6Vfb89aQrZs3e75Dpb2UsQt78yK6LxfdzDM4LK8fba3F+ZN9HE89D9n00sZ2jMhfOdt9H0+n8iN2eYn6Md7n45xuTz1+YYnz3n7/m0bLnbxrnuzq2/0z/fPbQXzec2Z+HWZfMiZ8+wQ72dcNYH4+j0uJ64sdz6ru1nhgvF7Ffe6boy4FgPRF4tYr5f/weMZb/j70A/7fMfkWvQ7OvGmO83PcJlZv3pyjvmPw+vb62vo+v3rnpy72De0/IfZ3zYKvv+9k0odRX8L6fonFcmikXjmPOAk1Rvpdtp2jcs+/L6A9z2xr3O7ff9o475t90Zu64r6x9Iy0e969NKM0tGHf5Qk58+cJBkS/M9PrZK5aPpG98mql85GM59dPNR/om3agf17hDLh/pObD9AgAOHTH/r//8LM3//19mv6K89cRMOcbLzVtzXp/k5a0fSbdXZPbvT3+jYrqvm88+/v7r5uy975jcvOX2VvPQ/zahNFCYh3aWN+fmESu7837x3Dyinmd1lifm9r+eJ3aWp+fGr+fpneXRueNTz6M7WwfIjV9fBzjU89yZXa971ebR6a/PzlQefW5O/XTz6P5JN+rHNU4eDQDwyor5f3wZF/P/RzL7dfq6PTcv6NLr9uzfA6nHf+JA5ZUznffNdN4603n9TK9LHOp58UyvC83sOpm8OC2H7I0aeTEAAAeDmP/PTsv5+X9n+Ulu/lbPT+TnTePLzw+S/PxQX/+S/8v/i8n/AQBe3WL+H3/tMf79v/+RlrN/t16enhNfni5Pn2r+tJynz/Q6m3UA6wDFrAMAALy69IxnSpN/z/6T6Tb7e/Z5v5d/fs7+raqM/459CBdt3Tw6esFlm9aMbB29YOOla0a3XHD55nVbt45urO3Xad6Ym7ekeWNPqKTj0Xy/bN42P/17CPNz/h5Cdv8Y9ujxG5P/HkK22dkFf0dg//lrrb955680xf7N5kfe+c6L/4mc/aP6+b/40ydfsHbLBes2rtu6bmT9um2jE/cby1r7pvG5mXFYpvW5mZkvk5Sm//md3elHaVI/etLxyPt89iTTjwVpTxbkff5BTr9/9b+++rnj9/3jrhCGjyi/oaPxS1bs++/njX5k6+7fbRrrf2nK/tf3TPtV9Hml2f3j8VTWX7pl60lrL71sY/YTJdsT1zNK9fIMrWekT/9yi+sTq3Pqp7s+UZ504+DU8voEAAATxJ//x9ez8eeHX0lfQMX61vP0zn5+nJunD7eWp2c/l6woT8/uH4+31Ty92mGenm2/KE9vtn+zPD0v786L/7Gc/aer9XnS2fs8cufJha3Nk+znGRTNk+z+050nSYfzJNt+0Txptn+zeZJ33vPifzRn/zytz4fO3peTOx9ubW0+vDlTLpoP2f2nOx9KHc6HbPtF86HZ/s3mQ975zYt/Ts7+rZo4P8Ymxvi8GL3g8ks3f7Zhv5n+/IvO+zezn//Rrtb7P7Pv+5r5/s/s+8pmvv+dva8st/9PdLYS1nr/Z/bzXdp1wNZr0zebFb3/rGgdd1VO/XTXcWdNunFwso4Lr5yY/8cf98T8/6Z02+0fAx36n5Pmc8yaxu/S55gVvY7x/XyKxg4Cvp8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtKa3smh8u/v6LXvPOeoDv/ri6EvXfPhnG65901U/+PPQxe/75d19339515pj1/7+/YddfP9nztx527cfenHuvf98pjDwQG1zYlqshpA8l4RQ/fmer39p12NHjtUlIYRyMrA9hAXJwocWJJkIw38PIayp93Pinfe8dMrase21N/VOqJ+fCZI9rtBfjv2Z0M9wReERcQiqpvNs297LTwp/eO+q636z+Mc/6tnx7Pb9uyTVhvkUwrwLGx/fE0KYnf4fE2fbovjgdLsyhNDX8LgzCvp1XIv9X5ZTPjrdzkq3/QVx4v1LMuVSZr9sOerJbPsK2utUXj/a3a/InEw5ezHqVF4/Y/2CdPvTdHviNOOX4/8klJJQqXd/fbJ/joSG85aEZPxcVuvlUv3chvT4M+UkUy5lyuWezHGNt5tOtHKSTKyP+2Xq4+W4ktYf23itbuLcnPrXp9tq+kR9OZZD9kZN/6Qb9eMaF/u1Z4q+HAilhmtQs/r6iU9PRn9a158snPSYfU3E+3atunlpefXDuwdy+pHcnaTxk7bib/v1gjmf+uGNly3Ki39hKY1faiv+H896/Pnzb/zet3Lj3xrjl9uKf/IDfc+d9cj1S3LHZ08cn0pb8UeeefSWxYdftCO3/7fH+NW24q/Y+Xjv3L0PPJjb/+E4PrPbiv/0Oz/4p7uevO/Z3Pghxu9rK/7qnZu+3Du494Tc+A/G8elvb/68sOP0pwYH/zKUF/+JGH9uW/Hv3H7bO+6Yf9OZued3ZRyfgbbin338/dfN2XvfMXnXzuT2bn3nBHhtOix9jXVDWm43z+xUQ77wzaFK7TXfnPT/3G42lDHWzrwZjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKvTb68+9ZPnveejqypJCEnOPvuaiPeVZ61YMdRGuyPPPHrL4sMv2tFYt6iNOAAAAECxmIeX6jXVsChcnswORzfdP64RHB1LycT67BpCjJNdI2g3TqlLccpdilPpUpyeLsWZ1aU4vV2KUy2IUw2txZk9ZZxSy/3p61Kc/i7FmdOlOHO7FGdel+LM71KcgSnjtD4PF3QpzsIuxTmsS3EO71KcI7oU53VdinNkl+Jk15SnOw/npnselRdn/Ea5ME4lKdfvaLaeHts5psN2+ltsJ/f7cYvtzG6xneMyjytNs51qi+28scN2khbbeXOH7ZQK2onz9ops/2I7sdTi/L+yS3G2dSnOVV2Kc3WX4ny+S3G+0KU413QYB6BVMf/fn+8NhN7Ku0JfesXJrgLEfHfx+NfJ3+/yLkgx3hsy9bOy8bJhsol6Jt7i6fYvu4CQibckU98zIV6lno9MEa/aGG9p5s5Jx5vtX3ZBIdO/EzP1vUXxsgsLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCDfnv1qZ887z0fXRWSMPavqX1NxPvKs1asGGqj3V2rbl5aXv3w7sa63kobgQAAAIBCMQ/vqddUQ29leehNZk3Yr5quA1TTcnmgth2cF1aObZOh0ni5L1kw5eMq6eOWbd2wadmWK7e9dd2GkUtGLxnd+Pblpy4/ffi0009btnbd+tHh2tcQegvihRDGlx+2XLntsyPr149u3lKrzPZ/Ufq4RWk5SR83+LYwPLa9Nu3/woL2SpPam7kbxWcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2DX/kLdPOs4gD9vkpNkZ6uN7F9W1tPQP6Pq0LZm0ulYXhAcbG3pYSDJ9DiKa3F4upatHXXGreA2WxRho1AqvanU4ebwZn/cEPeHQmVWC55aZBu6C71QNp10oxfSEek5eXOSNGlO41i37vO5eN/keX7P88uTiwPf9wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA/WVL08Ua2M10ajEKI+NY0ekrl0No5LQ/T9+vNbf5wbO7m8fSyXGWIjAAAAYKAkh4+0RvIhl0mHdLhq+t3i0DYRZnM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw8TNVL09UK+O1i6MQoj41jR6SuXQ2jktD9H3jnSe/8OrY2D/ax4pD7AMAAAAMluTwVGskH4phSRiJruqoS54NLOha312X7LNwjnXdzw761S2ZY901c6z71IC6dc37jgAAAAAffUn+z7RGCiGXmdc3/w/K9Undoq66dPM+zG8FAAAAgP9Pkv9zrZFiyGWKrbw+17y/uKsuWT/o//bJ+mV91g/6f/7a5t3/6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgo2OqXp6oVsZr6SiEqE9No4dkLp2N49IQfVe9MPqvWw49tLh9LJcZYiMAAABgoCSHz0bvfMhlRsNIuHg694/dtP/prz79bDmEMBPzs9mwY8O2bXevmrkmdSuPHBr50eG3vndG3cqZ63k7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L6ZqpcnqpXx2kVRCFGfmkYPyVw6G8elIfq+/qWv/O3x48+92T5WHGIfAAAAYLAkh89m/3wohmzIhium37Vn/dNSXev7PTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhz3fOe+b2+YnNx4txdeeOFF68X5/ssEAAC83xaFKDTO0ZXrz/enBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgym6uWJamW8lo9CiPrUNHpI5tLZOC4N0Td+/mhu3skXXmofKw6xDwAAADBYksNns38+FMNIGAmXT7/r9UxgOv8XPsAPCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyoTNXLE9XKeG1eFELUp6bRQzKXzsZxaYi+j+3c98WD8394c/tYLjPERgAAAMBASQ7PtkbyIZf5dMiFq5vvJzsXROnmvfdzgdl1WzuWjc55Xb1jXXrO63Z1nSzTPM3MunyyX2Hm3lpXOnNdqW1dMbTalzrWhT0dq+YN+JwBAAAAzqMk/+daI4WQy+Tacu7PO+oLci4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0MdUvTxRrYzXoiiEqE9No4dkLp2N49IQfe/7/Scv+cYvdm9vHysOsQ8AAAAwWJLDZ7N/PhTDwvCJsHA694dCZ31S9+/qqYOP/ufvy0NYccWxsUzf/X/7+o0vdl9CSHUWpUKY3+wX9en3uz8+eu/SxqnHQ1hxefrqc+3XuWXceKa6ce22w8e2nuWLAQAAgAtIkv9HWiOFkMvc1Tf/J8n7nPL//Ht3/uqy5rWZyLtWpArNfqk+/b689Mm/Llv9z7dO5/+z9fvcvs0HL+toODPSJYoblc3b1x277kAqOfVM/3RX/+R7+dp33/zvph2PnJrpnw/55viCTK/+Z167XBQ3JlN7a2ve21vv7J/pc/6H/vDS8d8s2P3u6f7vLBpt9b/mLOc/e//RWx/ec/2+Q+s6+4cQSr36v/3uzeHKP9/5YPf5R7s2bv/m269dorhxZPGJA6v3F2/o7B919U++/18ef2zPzx75wbNJ/+S3IsuXzLV/qqv/K7su3fnyA+sXdPZP9Tn/i7e9Oral9P0/dZ//jqHP/8S1T93+2ob4/u4pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC8tUvTxRrYzXUlEIUZ+aRg/JXDobx6Uh+r5xy9G3b9v905+0jxWH2AcAAAAYLMnhs9k/H4ohG7JhdDr3P1PduHbb4WNbQ2FmNmreM5Nb7tn2mU1btt91x3n65AAAAMBcJfk/0xophFxmaRhp5v/K5u3rjl13IJXk/1SS/zfdOblxRWjVvbLr0p0vP7B+Qes5QQjTPwvIn677/GzdTTceLZz4y7eW9axbNVt3ZPGJA6v3F29I6kJ73crQej7xxLVP3f7ahvj+1udrr/vsN7dMNh9PJPuO3vrwnuv3HVrXOkfzPtrcN6mbTO2trXlvbz2pSzfv+ea5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAzTdXLE9XKeC2kQ4j61DR6SObS2TguDdF3zdJfP3jJyecWto/lMkNsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs101oHVUfB+Bz7k3e3OYmbdK+YFRM06oodWFRENGNioq0IgVXlSLV1i5EQRBR6sJUWrFUxY1gdVNEBTVKQcHGYmmVVPwqblyooFBdCKUY0IbiQiXJObc304xXJ1VQnweGc8+Zmd/8Z87J5F4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4R+npGpppD++4f+qWc2746NG7Tjxy0zv3brvo4Ve/G9l03Yd7e186ObF5xZYvr1+2af/da8Z3P3/op/63fjnaMfih2WZV6jZCiMdjCI13J595bOLjs6bHYgihHgdGQxiMSw8NxkLC6p9DCJtbdc7d+eaJy7dMt9t29cwZX1IIKd5XaNZzPbMG5tbLv0sjrbOtUw9eEr6+dv32T5e/8Xr32LHRU4fERtt6CmHxxvbzu0MIi9I2La+2oXxyateFEHrbzruyQ13n/8H6Ly3pn5va/6W22SEn719Z6NcKxxX7WXeh7e1wvYUqq6PqcZ30FfrFl9FCldWZxwdT+3ZqV/3J/HreYqjF0NUq/554ao2EtnmLIc7MZaPVr7XmNqT7L/RjoV8r9OvdhfuauW5aaPUY547n4wrj+XXclcZXtL+r53FryfjZqW2kP9STuR+KH2Y1T/vQuq8Zua7J36nl71BrewfNN96a+DQZzTTWjEtPO+fXeeR9E+ufuLC+4b3DAyV1xL0x5cdK+Vs/Gey7/bWdDwyV5W+spfxapfxv1h754badLzxXmv90zq9Xyr/sQO/xte/vWFn6fCbz8+mqlH/H0Q+eXP7/O8dK69+T8xuV8q8ZP9LTP3XgYGn9q/PzWVQp/6urb/z2lc/3HSvNDzm/t1L+hvH7nuoZnrq4NP9gfj7Nauvnx7Ervhge/n6kLP+znN9fKf/l0d1Xvbhk15rS+V2Xn89ApfybL9i/vW9q33ll786450z95wT4b1qWvmM9nvpVf2cuVNvvhWdHuma/8/Wlrf9MXqhg+jqL/8J8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngoAAP//pkA1WQ==") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4020bc0c, &(0x7f0000000000)={0x20, 0x8001, 0x3c17ab2b, 0x4, 0x864, 0x6}) 2.257129095s ago: executing program 3 (id=5659): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x40, 0x4855}, 0x24000052) 2.007267235s ago: executing program 1 (id=5675): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) 1.951904233s ago: executing program 1 (id=5679): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept4(r0, 0x0, 0x0, 0x800) 1.910445756s ago: executing program 1 (id=5683): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_MM(0x41555856, 0x4eee7b633b603c4a, &(0x7f0000ffe000/0x1000)=nil) 1.876241332s ago: executing program 1 (id=5686): pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x80800) vmsplice(r0, 0xffffffffffffffff, 0x1, 0xf) 1.857272268s ago: executing program 1 (id=5689): syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000002080)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000059c0)={{}, {}, [{0x2, 0x5}], {}, [], {}, {0x20, 0x2}}, 0x2c, 0x1) 821.880761ms ago: executing program 3 (id=5734): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [], 0xa, "8039945662448065119db0ad127e1fd369fa6b1e4013dd15417a054ca148845f768700ecdfa52201fe046dc94b8660af4eb2f9c7a4000d2fe172ea53a26b01372775ebc95fb2908b85f5f64119059d3957d27f350c0ef8b4c3d961292d7aec2b996244376d68c00789b21ad9d3828b9bad19f702cb15656d91d7f312b82d79970aee2bfe9c3a939485d09d18d9b0feb345561014d1789a4ebb2a440792c48328f5d396c6a26012b9218d49e2914b1eaf58733e559d8c62100ec066b6503b2b2e2baf78b03e7da603226d1e96f856a6ecb2ed0a758b6cff6797315e5047eedbcb84d8256245d7117f44f09998cab4b03cd69b47c4a1409826321a3667ad7c782355df9b3920ad02115f24a35411e6bd5fc0b3e57630e34f700770956e549b7de7b83ea7c299d3677465d6044aa64e4e54d61e79cfc2f7e24325ed0bfe01f0f288fa4830622ed2305061ff4f45ce0e11730aba4745a46b8f13366e46f1decb6db48e273102b7e64e38a0ee0535182cf995ba9e51da1d262bc24fb7862caa7ca08af5730a3addbf262e1f9ed015289d115037c45a8007019ba9426ccb1cabf635d55497524a3c1e5103970e604a74966c400c3cca185882f2f29f0b46258d7d7c9812d6b2a3eed8739e6400aeb5e03b121e042c43dc8a5c64a365b3d3e63ef417d254db50b9eaacb497da4ef627702109962f2cf7a64e914cfc24267ba10c442de32b4ca1eddb36a4fdb3b7d24454f01bd5525a2571a7ae3b6ee68728134f1f5a9872d2a81f32e2305770e89b823e078cc7307402e5890761ecde50768ce8b26e4e5b90a40183a00cce492879c34779e7bb24bab5db0a434a7025878996c60b9191ac9f11a98924d1a1b1e61c586ffe9fd6aefa46721695fb8fb3a53aa77e9d8c6f1cbb8a307f3f272ac6bd80d2b30a2cee3def3aaf3aebef07a009f2738029d539c6238eb932978d219f38ade42249308ca8d4cc5e5935d315ddf9378dc560c205a35174378018897ca5b9e519a8191829b209d87db853450475571267e25ad21d0c302ae0161df0e97303ccad973da85d2964ef223285fa6fc21f5588ebf44afe6ac6f29906604a6d8a6d080ced2bf386566aa13f7a3e47b3be196e227f801e4685cb0a64ef4db15edc041e2069f60c0c857d48338b3149c888cf39e2711ad310a055d648bc9a86a6dc77e8414098ef45eaa25545421bc63ee87f90273fbf9d3d9ac0f4d6880c55aa95c9dc9b7d836b51459116418cd994d911465470f4ece5571556bcdf457d096166b7efe1f6ccf2628d968b4d2861824d17d2bb82c2a69326376d5168826b3b5007f04fc082919de0f40d683225c2abc38fe52a8cb08ffdbfb4d9d78445a86e7303e32f50babef57da4f52c915dacdad9332ce5909648a30e9cbd44b63cde8165a2466c3b04f3ab0ae166b031e2b2c733553e2078a4cc13fcf47baf2c418389927e2269c91f5834573b34de4a1cf953ea79d193968a69c4055c090d9017edddabb46dce4f5d929e2372c8a894c053f01712b0ea5c1581c860e8d63632e040c823167ff7aa047ab1033d97fb24d90997abcd5719f5856e7c1b928b90317be7197af6bbc3e4175a95f097c0329b84c47b3b32bedc2cbbd81cdd24edb14823bd3105c1adc9937880b415cc173b45e7a769e8b1dc44d794651b4df331980eee3430cc76919503fcaa61b7e1ec495cabccdc61d8908716cc1323498005b7f256f6645ca9ab3e998b4f66abb9fa4bee1a403721193e8baded462e12382f25acd185d6a196b4fe999ac337e0fed66d7fa12be6226f95baed64da2c712d7020e3c96fd3666b032242c1d459bbd1c1da09611498668cb6b02f29e15dd8a9af6b5f62a576f9a35eeb3cafa392770f3486c6e35df15303c7d4b1aa30afaa539da9beb2b13d631ade5e819abddff2c5d8f969b8dbb08a436b08e39e4f791bc92f31028524762219d664062078f4d38534ca0a70c29bd79364de436436a11abca22421e93523583f50de4622c7e4a25b6c213d796c86b9d5fb903aad4b91546ba25ff8e06e4d4660991d847084aa05ef4877db29b472184b06b8d5c299e7fc78d5c2d1680077712ab52b059a376568da964644ccebcf76a3fe1c328670a77b0176da916b23a19ed90820817adfa8bba9c37c4d0e54d3ee745236c03f2eea6e4e4f3fefebdd7ced13be553d7e02ba217e96a245a67433634c9590d2d1be930d95a9451fb1d0889c4abb066aee1f5f02cdd541c90b3d7fa92589ee828453b22e3454ebc3a465c394997002d9a4553b911103cf8b7179e493a23a57034eadbad46d75043aec416e2eadac35273bd3a6b44fa8794dfcd90eeff3ac6cef6fe47d51dc93c4e2f84d6e4f4462b43cd5025913e36437e575da4c35082aadf4c8eb28cc79919f027d42909d38cca594b45e4eceec67c7390178191b9e7a8ea2f3ed9f3c907f7af3c2422f69d40fead03058897ebcab704796e33ca92f06e1e6ddb61589568bde6a01fdf191236c9194b33b8673933dbbc138d50c527b1ee0b5e7952d9ced41d16a823e21497f0955326aa0e6cb5b97abebbcc73e547d9ad52250a24b3b263689f93b0ad1dd0f8a2f1b22376a4d07e1975f60e9f1a1dbd569f4b11c319731f382134fe2df165e23228945bc33b005a1d38dee8b883229545d67b3d1c7690131e699fb44e05097c47d19d8a7688b95487f664e85a8fae55edc5e0999ab4f64bb08dcf372d2b14edfe81c92025b8d866359a840e9a0711718135e6d85adacb18c23e997b23e671467ac47b1a7ddeea572fa57dd2eccd40941af43e32d7918fd1e694d5e779a32f10381af1be7c025705b8aeab65d1ac3cdb2534f06d1724621e1cc5a7cb93b7bf90e4d04aec25970f677c858d788b7c68cb4a63edf4490f116f3359c2f861c6dec98a35139919a1ce5641cfb1ff4576c4f38df18cc529c5ea01e6814ec33396809a99f6f5ab50a26d16d7a56e50b8174dc2bbdb58ccab36cc3e17203830287cbaafb57e3d45ad7db5bad41906723d1536994e461b8302a82004591be6a6a789bf17f91dc696ef245ffa4768c0e2fa72ce527974fd76bb4fe34db673136d721f2b5ebc9ca7e689b7925a584131a721cf73b3d616d6f443190e17126fe0e037e3ae119f1b8b4a817beaf811894637b45e0a16b6afaf46b7b4b64a9ace7994b5d7a813e68ea168ae2c8c1776c66266c678ede5df2f19499399db8353e823824ad5e2582ee295160e556aa58c74234c9ee44a6a60215f0d68ed2029579469a6825f09231485b9d2e137d59dd2c361448a1bbe87b3b963ed9ce2b9c5f57df3e4e5d2c7c3a090f7056d059091165fef728dd696feb907d266f3f60b2afd77c53d69ca5e06ebf70f1123d47a97fa3aad8905402ea8bb03e7901f6c51c2d18c3cf886c515dbec74f029efb8619ab314d86a9bff636c7a2e27eb5a9187b899db297df0db7b71443ba8742b9bcdfcc3bc71a2878fcc71ee07ae6af00cc6ca7b9d4f6fa897a1b5dc7a629a3f53732b5fe14899636a88e3e81a5897b1118f0961a14d943cbdca41f8442a15df71193e310fb6c414542d85d9d7283c1da4683c9545fd8f81eb56dc77985f3f026bf0011dd7f6cd896c47739e05cafff0c96e2cd425ef4723003ac52eeb4bccdc53444fded5775673c2e3142742c891647109bc32a8aaeaf7b92be692b577efffe3f87264a0d3c58112bded0890fe0e39cf13ad66be2b833a4d778bdef3e3f7fe035d87b08af040a9d295987ad9fb58104533bde1bd231f5fd419b8ddcead0141edb29392938b826f5bc893cd794a19efd9ca481c01d80bf11c8a0d636fc9889db7a86f6df83bd1853e9e275cacf843aae7c9d51cfbfc9a2f422f81f02b5d4be8a5c7aae3720f7c74ef20fffbf7fd65425f57cc373697f01322827201bea137cc111bc662228438070b1043c6e5cae565b2cecfb1546d28e33fb2ea1271bdb1f3bffec08dd6ed2f4f059f2ce35e9ca25800731260feb82ea1277de69f19504c6bebc18fb62a5da3a52d26e164de31f38192addf1e586a2d2e1bd6d992c8bb76bdf0988072951f7153d5aefb05bbff0b79cb7"}, 0xb4b) 766.326921ms ago: executing program 3 (id=5737): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) 752.033287ms ago: executing program 3 (id=5740): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x45, &(0x7f00000007c0), 0x4) 749.967364ms ago: executing program 1 (id=5741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x28000) 733.431317ms ago: executing program 3 (id=5742): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) 546.935191ms ago: executing program 2 (id=5750): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$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") listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 360.336096ms ago: executing program 0 (id=5757): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180066e1d3752ae6e4984b4d643", @ANYRES8=r0, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x24004040) 316.453803ms ago: executing program 0 (id=5759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) 278.31229ms ago: executing program 2 (id=5761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf8df803362adb335}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 226.483289ms ago: executing program 0 (id=5763): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=@base={0xa, 0x9, 0xd, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 226.219416ms ago: executing program 0 (id=5764): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x1, 0xd, 0x4, 0x0, 0x0, {0x77359400}, {0x7f3b646bf0f3829e, 0x8, 0x3, 0x5, 0xf, 0xc8, "4af107a1"}, 0xab, 0x4, {0x0}, 0x200}) 226.046375ms ago: executing program 4 (id=5765): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x418, 0x220, 0x0, 0x220, 0x330, 0x418, 0x330, 0x4, 0x0, {[{{@arp={@remote, @remote, 0x0, 0x0, 0x0, 0xfd, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast2, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 218.767164ms ago: executing program 0 (id=5766): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_netdev_private(r0, 0x8970, &(0x7f00000002c0)="2ee9f3bec5a27c74ae7d133a") 186.865183ms ago: executing program 4 (id=5767): r0 = syz_open_dev$sndctrl(&(0x7f0000004340), 0xe79b, 0x500) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000043c0)={{0x5, 0x2, 0x7, 0x8, '\x00', 0x7ff}, 0x1, 0x20000000, 0xfffffad5, 0x0, 0x0, 0x10000, 'syz0\x00', 0x0}) 167.792766ms ago: executing program 2 (id=5768): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x4, 0x2, 0x3, "6198d3fa5b803fe6e05e48cd02c53d5f64c9d8f9b9f72023190065b5569bbfca", 0x3631564e}) 152.925947ms ago: executing program 0 (id=5769): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4448, &(0x7f000000cd00)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 108.066636ms ago: executing program 4 (id=5770): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0) writev(r0, &(0x7f0000003600)=[{&(0x7f0000002400)='\n', 0x1}], 0x1) 107.782533ms ago: executing program 2 (id=5771): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80), 0x8000, 0x0) preadv(r0, 0x0, 0x0, 0x6, 0x1) 82.680194ms ago: executing program 4 (id=5772): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [0x6, 0x0, 0x0, 0x3], [0x1000, 0x0, 0xdf3]}) 23.6834ms ago: executing program 2 (id=5773): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a00000800028004"], 0x76}}, 0xc000) 22.831858ms ago: executing program 4 (id=5774): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) 919.583µs ago: executing program 4 (id=5775): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000540)={0x21, 0x3, 0xb, 0x8, 0xffffffff, 0x81}) 0s ago: executing program 2 (id=5776): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000280)={[{@namecase}, {}, {@errors_continue}, {@sys_tz}, {@gid}, {@sys_tz}, {@umask={'umask', 0x3d, 0x400}}, {@time_offset={'time_offset', 0x3d, 0x14}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp857'}}]}, 0x1, 0x1527, &(0x7f0000001f80)="$eJzs3AuYTtUaOPD3XWvtMSbxNcllWGu9my+5LJMkuSTJJUkqSZJbQpLkSELFEJI0JCG5DEkMIblMTBr3+/0akqRJktxyS9b/mfB3Op3z71z65zxn3t/z7GfWO3uvtd/9vd/+vrX3fPN912VwzUa1qjUgIviP4IUfSQAQCwD9ASAPAAQAUC6+XHzW+pwSk/6znbA/1kOpVzoDdiVx/bM3rn/2xvXP3rj+2RvXP3vj+mdvXP/sjevPWHa2YUrBa3jJvgvf/8/O+P3/f0hm6dFfrSp9XVeAmH+2C9c/e+P6/88K/pmNuP7ZG9c/u4q90gmw/wJ8/mcHOf7hGq5/9sb1Zyw7u9L3n6/0ApH/ssfgcM4Lhfmzjp8xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGPsTnPaXKQC41L7SeTHGGGOMMcYYY+yP43Nc6QwYY4wxxhhjjDH2/x+CAAkKAoiBHBALOSEOBABcDbkhD0TgGoiHayEvXAf5ID8UgIKQAIWgMGgwYIEghCJQFKJwPRSDG6A4lICSUAoclIZEuBHKwE1QFm6GcnALlIdboQJUhEpQGW6DKnA7VIU7oBrcCdWhBtSEWnAX1Ia7oQ7cA3XhXqgH98H98ADUhwehATwEDeFhaASPQGN4FJpAU2gGzaHFv9X/BXgRXoIe0BOSoBf0hpehD/SFfvAK9IdXYQC8BgPhdUiGQTAY3oAh8CYMhbdgGAyHEfA2jIR3YBSMhjEwFlJgHIyHd2ECvAcT4X2YBJMhFabAVPgApsF0mAEfwkz4CGbBbJgDcyENPoZ5MB/S4RNYAJ9CBiyERbAYlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB3wGO2EX7IbPYQ988S/2P/U3/bsiIKBAgQoVxmAMxmIsxmEc5sJcmBtzYwQjGI/xmBfzYj7MhwWwACZgAhbGwmjQICFhESyCUYxiMSyGxbE4lsSS6NBhIiZiGbwJy2JZLIflsDyWxwpYEStiZayMVbAKVsWqWA2rYXWsjjWxJt6Fd2EvrIN1sC7WxXpY79LtKWyADbAhNsRG2AgbY2Nsgk2wGTbDFtgCW2JLbIWtsA22wbbYNnLpid0BO2BH7IidsBN2xs7YBbtgV+yG3TJfyAH4Er6EPbG66IW9sTf2weQc/fAVfAVfxQH4Gr6Gr2MyDsLB+Aa+gW/iUDyJw3A4jsARWEW8g6NwNJIYiymYguNxPE7ACZi10/dxMqbiFJyKU3EaTsfp+CHOxI/wI5yNs3EupmEazsP5mI7puABPYQYuxEW4GJfgUlyCy3EFLsdVuBpX4Vpci+txPW7EjbgZN+NW3IrbUQHgZ7gLd2Ey7sE9uBf34j7ch/txP2ZiJh7AA3gQD+IhPISH8TAewaN4DI/iCTyBJ/EUnsbTeBbP4jl8LuGbhttLrEwGkUUJJWJEjIgVsSJOxIlcIpfILXKLiIiIeBEv8oq8Ip/IJwqIAiJBJIjCorAwwggSYQwAiKiIimKimCguiouSoqRwwolEkSjKiDKirCgryolbRHlxq6ggKorWrrKoLKqINq6quENUE9VEdVFD1BS1RC1RW9QWdUQdUVfUFfVEPXG/eEDUF72wHz4ksirTSAzCxmIwNhFNhbxY6JZiKLYSrUUb8YQYjsOwnWjp2ounRQcxCjuKv4jR+KzoLMZiF/G86Cq6ie7iBfGiaOV6iJ5iIvYSvcVk7CP6in7iFTENa4gPcWbOmuJ1kSwGicHiDTEX3xRDxVtimBguRoi3xUjxjhglRosxYqxIEePEePGumCDeExPF+2KSmCxSxRQxVXwgponpYob4UMwUH4lZYraYI+aKNPGxmCfmi3TxiVggPhUZYqFYJBaLJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CRiYYvYKraJ7WKH+EzsFLvEbvG52CO+EHvFl2Kf+ErsF1+LTPGNOCC+FQfFd+KQ+F4cFj+II+KoOCaOixPiR3FSnBKnxRlxVvwkzomfxXnhBUiUQkqpZCBjZA4ZK3PKOHmVzCWDi4/uNTJeXivzyutkPplfFpAFZYIsJAtLLY20kmQoi8iiMiqvl8XkDbK4LCFLylLSydIyUd4oy8ibZFl5sywnb5Hl5a2ygqwoK8nK8jZZRd4u4eK5Wl3WkDVlLXmXTIK7ZR15j6wr75X15H3yfvmArC8flA3kQ7KhfFg2ko/IxvJR2UQ2lc1kc9lCPiZbysdlK9latpFPyLbySdlOPiXby6dlB+kvPkWelZ3lc7KLfF52ld1kd/mzPC+97CF7SugFsrd8WfaRfWW/WACQr8oB8jU5UL4uk+UgOVi+IYfIN+VQ+ZYcJofLEfJtOVK+I0fJ0XKMHCtT5Dg5Xr4rJ8j35ET5vpwkJ8tUOUX2k/1/GWmGlL/b/92/6e/xQtaD5Hq5QW6Um+RmuUVuldvkdrlD7pA75U65W+6We+QeuVfulfvkPrlf7peZMlMekAfkQXlQHpKH5GF5WB7JeVSekcflCfmjPClPyVPyjDwrz8pzFx8DUKiEkkqpQMWoHCpW5VRx6iqVS12tcqs8KqKuUfHqWpVXXafyqfyqgCqoElQhVVhpZZRVpEJVRBVVUXX9xaxBlVSllFOlVaK68V/pr4qpG1RxVeJX/S/ll/QP8muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqrupU5e/MBjD5WkklRv9bLqo/qqfuoV1V+9qgaoAWqgGqiSVbIarAarIWqIGqqGqmFqmBqhRqiRaqQapUapMWqMSlEparwaryaoCWqimqgmqUkqVaWqqWqqmqamqRlqhpqpZqpZapaao+aoNJWm5ql5Kl2lqwVqgcpQC9VCtVgtVkvVUrVcLVcr1Uq1Wq1Wa9ValaE2qA1qk9qktqgtapvapnaoHWqn2Kl2q91qj9qj9qq9ap/ap/ar/SpTZaoD6oA6qA6qQ+qQOqwOqyPqiDqmjqkT6oQ6qU6q0+q0OqvOqnPqnDqvzmdN+wIRiEAFKogJYoLYIDaIC+KCXEGuIHeQO4gEkSA+iA/yBtcF+YL8QYGgYJAQFAoKBzowgQ3ExaJHg+uDYsENQfGgRFAyKBW4oHSQGNwYlAluCsoGNwflgluC8sGtQYWgYlApqBzcFlQJbg+qBncE1YI7g+pBjaBmUCu4K6gd3B3UCe4J6gb3BvWC+4L7gweC+sGDQYPgoaBh8HDQKHgkaBw8GjQJmgbNguZBiz90fO9P5n/c9dA9dZLupXvrl3Uf3Vf306/o/vpVPUC/pgfq13WyHqQH6zf0EP2mHqrf0sP0cD1Cv61H6nf0KD1aj9FjdYoep8frd/UE/Z6eqN/Xk/Rknaqn6Kn6Az1NT9cz9Id6pv5Iz9Kz9Rw9V6fpj/U8PV+n60/0Av2pztAL9SK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79Cf6Z16l96tP9d79Bd6r/5S79Nf6f36a52pv9EH9Lf6oP5OH9Lf68P6B31EH9XH9HF9Qv+oT+pT+rQ+o8/qn/Q5/bM+r33W5D7r7d0oo0yMiTGxJtbEmTiTy+QyuU1uEzERE2/iTV6T1+Qz+UwBU8AkmART2BQ2WciQKWKKmKiJmmKmmCluipuSpqRxxplEk2jKmDKmrClryplyprwpbyqYCqaSqWRuM7eZ283t5g5zh7nT3GlqmBqmlqllapvapo6pY+qauqaeqWfuN/eb+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadaW/amw6mg+loOppOppPpbDqbLqaL6Wq6mu6mu3nRvGh6mB4mySSZ3qa36WP6mH6mn+lv+psBZoAZaAaaZJNsBpvBZogZYoaaoWaYGW5GZE1UzTtmlBltxpixJsWkmPFmvJlgJpiJZqKZZCaZVJNqppqpZpqZZmaYGWammWlmmVlmjplj0kyamWfmmXSTbhaYBSbDZJhFZpFZYpaYZWaZWWFWmFVmlVkDa8w6s85sMBvMJrPJbDFbzDazzewwO8xOs9PsNrvNHrPH7DV7zT6zz+w3+02myTQHzAFz0Bw0h8whc9gcNkfMEXPMHDMnzAlz0pw0p81pc9bkv/h+6U2szWnj7FU2l73a5rZ57N/GBWxBm2AL2cJW23w2/69iY60tbkvYkraUdba0TbQ3/iauYCvaSrayvc1Wsbfbqr+Ja9u7bR17j61r77W17F2/iuvZ+2zW7KQ+IoBtahva5raRfcQ2to/aJrapbWab27b2SdvOPmXb26dtB/vMb+J5dr5dYVfaVXa13Wl32dP2jD1ov7Nn7U+2h+1p+9tX7QD7mh1oX7fJdtBv4hH2bTvSvmNH2dF2jB37m3iSnWxT7RQ71X5gp9npv4nT7Md2pk23s+xsO8fO/SXOyindfmIX2E9thg1gkV1sl9ildpldfilXn8eutevservDfmY32c12i91qt12aCNtddrf93O6xX9gD9lu7z35l99tDNtN+80ucdXyH7Pf2sP3BHrFH7TF73J6wP6pLvbOO/bj92Z633gIhAUlSFFAM5aBYyklxdBXloqspN+WhCF1D8XQt5aXrKB/lpwJUkBKoEBUmTYYsEYVUhIpSlK6nS+mVpFLkqDQl0o1Uhm6isnQzlaNbqDzdShWoIlWiynQbVaHbqSrdQdXoTqpONagm1aK7qDbdTXXoHqpL91I9uo/upweoPj1IDeghakgPUyN6hBrTo9SEmlIzak4t6DFqSY9TK2pNbegJaktPUjt6itrT09SBnqGO9BfqRM9SZ3qOutDz1JW6UXd6gV6kl6gH9aQk6kW96WXqQ32pH71C/elVGkCv0UB6nZJpEA2mN2gIvUlD6S0aRsNpBL1NI+kdGkWjaQyNpRQaR+PpXZpA79FEep8m0WRKpSk0lT6gaTSdZtCHNJM+olk0m+bQXEqjj2kezad0+oQW0KeUQQtpES2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/RTtpFu+lz2kNfENKXtI++ov30NWXSN3SAvqWD9B0dou99T/qBjtBROkbH6QT9SCfpFJ2mM3SWfqJz9DOdJ08QYihCGaowCGPCHGFsmDOMC68Kc4VXh7nDPGEkvCaMD68N84bXhfnC/GGBsGCYEBYKC4c6NKENKQzDImHRMBpeHxYLbwiLhyXCkmGp0IWlw8TwxrBMeFNYNrw5LBfeEpYPbw0rhBXDR+6tHN4WVglvD6uGd4TVwjvD6mGNsGZYK7wrrB3eHdYJ7wnrhveGZcP7wvvDB8L64YNhg/ChsGH4cNgofCRsHD4aNgmbhs3C5mGL8LGwZfh42CpsHbYJnwjbhk+G7cKnwvbh02GH8Jlf1t83/x+vTwp7hb3Dl8OXQ+/vkXOic6Np0Y+j86Lzo+nRT6ILop9GM6ILo4uii6NLokujy6LLoyuiK6Oroquja6Jro+ui66Pe18oBDp1w0ikXuBiXw8W6nC7OXeVyuatdbpfHRdw1Lt5d6/K661w+l98VcAVdgivkCjvtjLOOXOiKuKIu6q53xdwNrrgr4Uq6Us650i7RNXctXAvX0j3uWrnWro17wj3hnnRPuqfcU+5p18E94zq6v7hO7lnX2T3nnnPPu66um+vuXnAvunG5L5yTSa636+36uD6un+vn+rv+boAb4Aa6gS7ZJbvBbrAb4oa4oW6oG+aGuRFuhBvpRrpRbpQb48a4FJfixrvxboKb4Ca6iW6Sm+RSXaqb6qa6aW6aqzL9wl5muVlujpvj0lyam+ey5ozpboFb4DJchlvkFrklbolb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+a2uR1uh9vp81wY1O1xe91et8/tc/vd1y7TfeMOuG/dQfedO+S+d4fdD+6IO+qOuePuhPvRnXSn3Gl3xp11P7lz7md33nmXEhkXGR95NzIh8l5kYuT9yKTI5EhqZEpkauSDyLTI9MiMyIc5L754ReZE5kbSIh9H5kXmR9Ijn0QWRD6NZEQWRhZFFkeWRJZGvC+0KfRFfFEf9df7Yv4GX9yX8CV9Ke98aZ/ob/Rl/E2+rL/Zl/O3+PL+Vl/BV/SV/KO+iW/qm/nmvoV/zLf0j/tWvrVv45/wbf2Tvp1/yrf3T/sO/hnf0f/Fd/LP+s7+Od/FP++7+m6+u3/Bv+hf8j18T5/ke/ne/mXfx/f1/fwrvr9/1Q/wr/mB/nWf7Af5wf4NP8S/6Yf6t/wwP9yPiHnbj7x0iQxjfYof58f7d/0E/56f6N/3k/xkn+qn+Kn+Az/NT/cz/Id+pv/Iz/Kz/Rw/16f5j/08P9+n+0/8Av+pz/ALL91U9sv8cr/Cr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Ha/w3/md/pdfrf/3O/xX/i9/ku/z3/l9/uvfab/xh/w3/qD/jt/yH/vD/sf/BF/1B/zx/0J/6M/6U/50/6MP+t/8uf8z/48/88aY4wxxtg/Zdzlpvj1mgu383v9nT7irzbuDQBXby6Y+dfrs2aUa/JdaPcVCb/8Qfbpnl0eurRUr56UlHRx2wwJQdHZWfPry/1j4HK8ENrAk9AeWkOZv5t/X9HtLP3O+NFbAOL+qk8sXI4vj/8lACb9nfEfe2LEvPLh6fj/x/izAYoXvdwn65LhUrwQ2vxyf6U1lP0H+edv+Tv55/wqBaDVX/XJBZfjy/knwuPwDLT/1ZaMMcYYY4wxxtgFfUWlTpeuPy994vPvXZ8nqMt9csDl+PeuzxljjDHGGGOMMXblPdut+1OPtW/futO/3qj6+9uof2/kXxqN4d9NjBv/VsN7gP9bOAD4DwcEyGrIP/MoNv4p+0q+eOr87aolZ3wA/x2l/CMaV/iFiTHGGGOMMfaHuzzp//Xv1ZVKiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4b+0+94g3/iW/qu9DEyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9r/CQAA//8OCvjj") syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) kernel console output (not intermixed with test programs): -04d79d8b4eeb [ 202.123522][T17655] loop3: detected capacity change from 0 to 8 [ 202.234374][T17669] loop0: detected capacity change from 0 to 1024 [ 202.261251][T17669] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.266102][T17669] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 202.266224][T17669] EXT4-fs (loop0): orphan cleanup on readonly fs [ 202.267326][T17669] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.4786: Invalid inode table block 0 in block_group 0 [ 202.267545][T17669] EXT4-fs (loop0): Remounting filesystem read-only [ 202.267554][T17669] Quota error (device loop0): write_blk: dquota write failed [ 202.267577][T17669] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 202.267618][T17669] EXT4-fs (loop0): 1 truncate cleaned up [ 202.268183][T17669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.327289][ T6646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.388301][T17667] loop1: detected capacity change from 0 to 32768 [ 202.453737][T17690] loop4: detected capacity change from 0 to 256 [ 202.463710][T17681] loop0: detected capacity change from 0 to 32768 [ 202.486497][T17690] FAT-fs (loop4): Directory bread(block 64) failed [ 202.486527][T17690] FAT-fs (loop4): Directory bread(block 65) failed [ 202.486550][T17690] FAT-fs (loop4): Directory bread(block 66) failed [ 202.486561][T17690] FAT-fs (loop4): Directory bread(block 67) failed [ 202.486581][T17690] FAT-fs (loop4): Directory bread(block 68) failed [ 202.486591][T17690] FAT-fs (loop4): Directory bread(block 69) failed [ 202.486611][T17690] FAT-fs (loop4): Directory bread(block 70) failed [ 202.486620][T17690] FAT-fs (loop4): Directory bread(block 71) failed [ 202.486642][T17690] FAT-fs (loop4): Directory bread(block 72) failed [ 202.486652][T17690] FAT-fs (loop4): Directory bread(block 73) failed [ 202.514087][T17677] loop2: detected capacity change from 0 to 32768 [ 202.520317][T17677] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4789 (17677) [ 202.532750][T17677] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.532815][T17677] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 202.605691][T17667] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc [ 202.611314][T17667] allowing incompatible features above 0.0: (unknown version) [ 202.611724][T17667] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 202.611741][T17667] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 202.612105][T17667] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad nr_required in entry journal: 4/1 [0], fixing [ 202.612158][T17667] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 202.612219][T17667] bcachefs (loop1): Version upgrade required: [ 202.612219][T17667] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 202.612219][T17667] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 202.612219][T17667] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 202.612313][T17667] bcachefs (loop1): dropping and reconstructing all alloc info [ 202.616511][T17667] bcachefs (loop1): btree node read error at btree extents level 0/0 [ 202.616518][T17667] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 202.616523][T17667] loop1 node offset 0/16 bset u64s 0: incorrect max key U64_MAX:U64_MAX:4278190080 [ 202.616527][T17667] loop1 btree validate error [ 202.616530][T17667] flagging btree extents lost data [ 202.616533][T17667] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 202.616536][T17667] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 202.616540][T17667] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 202.616543][T17667] ret btree_node_read_err_bad_node [ 202.616717][T17667] bcachefs (loop1): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 202.617666][T17667] bcachefs (loop1): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: -> 9223090562414936065 type unknown [ 202.617673][T17667] dirent has stray data after name's NUL, deleting [ 202.619946][T17667] bcachefs (loop1): btree node read error at btree snapshots level 0/0 [ 202.619952][T17667] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 202.619957][T17667] loop1 node offset 0/16 bset u64s 0: invalid bkey format: incorrect key_u64s: got 3, should be 4 [ 202.619961][T17667] u64s 3 fields 64:0, 64:0, 32:0, 30:0, 0:0, 0:0 [ 202.619964][T17667] loop1 btree validate error [ 202.619967][T17667] flagging btree snapshots lost data [ 202.619970][T17667] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 202.619974][T17667] ret btree_node_read_err_bad_node [ 202.620013][T17667] bcachefs (loop1): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 202.626058][T17667] bcachefs (loop1): check_topology... [ 202.626073][T17667] bcachefs (loop1): btree root extents unreadable, must recover from scan [ 202.626093][T17667] bcachefs (loop1): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 202.626105][T17667] bcachefs (loop1): bch2_check_root(): error restart_recovery [ 202.626111][T17667] bcachefs (loop1): scan_for_btree_nodes... [ 202.650669][T17667] bcachefs (loop1): btree node scan found 1 nodes after overwrites [ 202.650770][T17667] done [ 202.650776][T17667] bcachefs (loop1): check_topology... [ 202.650790][T17667] bcachefs (loop1): btree root extents unreadable, must recover from scan [ 202.650822][T17667] bcachefs (loop1): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 202.650857][T17667] bcachefs (loop1): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190080 len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 202.652152][T17667] bcachefs (loop1): btree node with incorrect max_key [ 202.652159][T17667] at: btree=extents level=1 [ 202.652163][T17667] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 202.652166][T17667] child: u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190080 len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 202.652197][T17667] bcachefs (loop1): bch2_get_scanned_nodes(): recovery btree=extents level=0 U64_MAX:U64_MAX:4278190081 - SPOS_MAX [ 202.652293][T17667] bcachefs (loop1): set_node_max(): u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190080 len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 -> SPOS_MAX [ 202.652382][T17667] bcachefs (loop1): btree root snapshots unreadable, must recover from scan [ 202.652400][T17667] bcachefs (loop1): no nodes found for btree snapshots, continuing [ 202.652546][T17667] done [ 202.652551][T17667] bcachefs (loop1): accounting_read... [ 202.653363][T17677] BTRFS info (device loop2): enabling ssd optimizations [ 202.653375][T17677] BTRFS info (device loop2): enabling free space tree [ 202.701007][T17726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4800'. [ 202.718424][T17667] done [ 202.718446][T17667] bcachefs (loop1): alloc_read... done [ 202.718537][T17667] bcachefs (loop1): snapshots_read... done [ 202.718643][T17667] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 202.718771][T17667] bcachefs (loop1): done starting filesystem [ 202.773176][ T6649] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.795703][T17667] process 'syz.1.4785' launched './file1' with NULL argv: empty string added [ 202.855354][ T6647] bcachefs (loop1): shutting down [ 202.954664][T17750] loop2: detected capacity change from 0 to 512 [ 202.955536][ T6647] bcachefs (loop1): shutdown complete [ 202.957176][T17753] loop4: detected capacity change from 0 to 256 [ 202.991698][T17750] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 202.991754][T17750] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 202.991765][T17750] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4813: Failed to acquire dquot type 1 [ 202.993817][T17750] EXT4-fs (loop2): 1 truncate cleaned up [ 202.994270][T17750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.053461][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4820'. [ 203.091127][ T6649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.123695][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4824'. [ 203.123731][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4824'. [ 203.136779][T17775] bridge2: entered promiscuous mode [ 203.137774][T17775] bridge2: entered allmulticast mode [ 203.153595][T17778] loop2: detected capacity change from 0 to 1024 [ 203.200783][ T42] hfsplus: b-tree write err: -5, ino 4 [ 203.352253][T17797] loop0: detected capacity change from 0 to 1024 [ 203.405407][ T4511] hfsplus: b-tree write err: -5, ino 8 [ 203.435352][T17786] loop2: detected capacity change from 0 to 40427 [ 203.448366][T17786] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 203.448408][T17786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 203.464209][T17786] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 203.465981][T17786] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 203.466013][T17786] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 203.490976][T17786] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 203.612495][T17823] vlan0: entered promiscuous mode [ 203.692990][T17833] netlink: 'syz.3.4850': attribute type 3 has an invalid length. [ 203.816008][T17841] loop2: detected capacity change from 0 to 16384 [ 203.860847][T17845] loop3: detected capacity change from 0 to 32768 [ 203.906269][T17845] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.910215][T17847] loop0: detected capacity change from 0 to 32768 [ 203.936318][T17845] XFS (loop3): Ending clean mount [ 203.967207][T17845] XFS (loop3): syz.3.4855 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 203.976634][ T6657] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.991511][T17841] bcachefs (loop2): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,recovery_pass_last=scan_for_btree_nodes,read_only [ 203.991539][T17841] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 203.991789][T17841] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 203.991867][T17841] bcachefs (loop2): recovering from clean shutdown, journal seq 15 [ 203.991897][T17841] bcachefs (loop2): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 203.991897][T17841] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 203.993112][T17841] bcachefs (loop2): sb invalid before write: Invalid superblock section downgrade: downgrade entry overruns end of superblock section [ 203.993121][T17841] downgrade (size 120): [ 203.993125][T17841] version: 1.9: disk_accounting_v2 [ 203.993128][T17841] recovery passes: check_allocations [ 203.993132][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,bkey_version_in_future [ 203.993148][T17841] version: 1.10: disk_accounting_v3 [ 203.993152][T17841] recovery passes: check_allocations [ 203.993155][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,accounting_replicas_not_marked,bkey_version_in_future [ 203.993162][T17841] [ 203.993164][T17841] emergency read only at seq 0 [ 203.997399][T17841] bcachefs (loop2): sb invalid before write: Invalid superblock section downgrade: downgrade entry overruns end of superblock section [ 203.997407][T17841] downgrade (size 120): [ 203.997411][T17841] version: 1.9: disk_accounting_v2 [ 203.997415][T17841] recovery passes: check_allocations [ 203.997418][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,bkey_version_in_future [ 203.997425][T17841] version: 1.10: disk_accounting_v3 [ 203.997428][T17841] recovery passes: check_allocations [ 203.997431][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,accounting_replicas_not_marked,bkey_version_in_future [ 203.997438][T17841] [ 203.997463][T17841] bcachefs (loop2): btree node read error at btree extents level 0/0 [ 203.997467][T17841] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c70ab18f40f86f94 written 24 min_key POS_MIN durability: 1 ptr: 0:167:0 gen 0 [ 203.997472][T17841] loop2 node offset 16/24 bset u64s 0: empty bset [ 203.997475][T17841] loop2 btree validate error [ 203.997478][T17841] flagging btree extents lost data [ 203.997481][T17841] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 203.997484][T17841] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 203.997487][T17841] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 203.997491][T17841] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 203.997494][T17841] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 203.997498][T17841] ret fsck_errors_not_fixed [ 203.997638][T17841] bcachefs (loop2): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 203.998622][T17841] bcachefs (loop2): sb invalid before write: Invalid superblock section downgrade: downgrade entry overruns end of superblock section [ 203.998629][T17841] downgrade (size 120): [ 203.998632][T17841] version: 1.9: disk_accounting_v2 [ 203.998635][T17841] recovery passes: check_allocations [ 203.998638][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,bkey_version_in_future [ 203.998644][T17841] version: 1.10: disk_accounting_v3 [ 203.998647][T17841] recovery passes: check_allocations [ 203.998650][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,accounting_replicas_not_marked,bkey_version_in_future [ 203.998656][T17841] [ 203.998672][T17841] bcachefs (loop2): btree node read error at btree snapshots level 0/0 [ 203.998676][T17841] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 3196d4ed4f54a98a written 16 min_key POS_MIN durability: 1 ptr: 0:155:0 gen 0 [ 203.998680][T17841] loop2 node offset 0/16 bset u64s 0: checksum error, type none: got should be [ 203.998683][T17841] loop2 btree validate error [ 203.998686][T17841] flagging btree snapshots lost data [ 203.998689][T17841] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 203.998692][T17841] ret fsck_errors_not_fixed [ 203.998727][T17841] bcachefs (loop2): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 203.999582][T17841] bcachefs (loop2): invalid bkey in btree_node btree=bucket_gens level=0: u64s 37 type bucket_gens 0:0:100663296 len 0 ver 0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 0 1 0 1 0 1 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 203.999592][T17841] nonzero snapshot, deleting [ 203.999724][T17841] bcachefs (loop2): sb invalid before write: Invalid superblock section downgrade: downgrade entry overruns end of superblock section [ 203.999729][T17841] downgrade (size 120): [ 203.999732][T17841] version: 1.9: disk_accounting_v2 [ 203.999735][T17841] recovery passes: check_allocations [ 203.999738][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,bkey_version_in_future [ 203.999744][T17841] version: 1.10: disk_accounting_v3 [ 203.999747][T17841] recovery passes: check_allocations [ 203.999750][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,accounting_replicas_not_marked,bkey_version_in_future [ 203.999756][T17841] [ 203.999797][T17841] bcachefs (loop2): error reading btree root btree=bucket_gens level=0: btree_node_read_error, fixing [ 204.000300][T17841] bcachefs (loop2): invalid bkey in btree_node btree=accounting level=0: u64s 8 type accounting POS_MIN len 0 ver 21474838808: nr_inodes 287 0 0 [ 204.000305][T17841] accounting key with 3 counters, should be 1, deleting [ 204.000444][T17841] bcachefs (loop2): sb invalid before write: Invalid superblock section downgrade: downgrade entry overruns end of superblock section [ 204.000448][T17841] downgrade (size 120): [ 204.000451][T17841] version: 1.9: disk_accounting_v2 [ 204.000454][T17841] recovery passes: check_allocations [ 204.000457][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,bkey_version_in_future [ 204.000463][T17841] version: 1.10: disk_accounting_v3 [ 204.000466][T17841] recovery passes: check_allocations [ 204.000469][T17841] errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,accounting_replicas_not_marked,bkey_version_in_future [ 204.000484][T17841] [ 204.000526][T17841] bcachefs (loop2): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 204.019182][T17841] bcachefs (loop2): done starting filesystem [ 204.051631][T17847] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 204.051642][T17847] allowing incompatible features above 0.0: (unknown version) [ 204.051646][T17847] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 204.051656][T17847] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 204.051672][T17847] bcachefs (loop0): initializing new filesystem [ 204.053216][T17847] bcachefs (loop0): going read-write [ 204.095601][T17841] bcachefs (loop2): /file1 offset 0: read error -2327 from btree lookup [ 204.101627][T17841] bcachefs (loop2): /file1 offset 0: read error -2327 from btree lookup [ 204.111853][T17847] bcachefs (loop0): marking superblocks [ 204.113985][T17847] bcachefs (loop0): initializing freespace [ 204.115099][T17847] bcachefs (loop0): done initializing freespace [ 204.115598][T17847] bcachefs (loop0): reading snapshots table [ 204.115617][T17847] bcachefs (loop0): reading snapshots done [ 204.146590][T17847] bcachefs (loop0): done starting filesystem [ 204.199142][ T6649] bcachefs (loop2): shutting down [ 204.201221][ T6646] bcachefs (loop0): shutting down [ 204.201245][ T6646] bcachefs (loop0): going read-only [ 204.201259][ T6646] bcachefs (loop0): finished waiting for writes to stop [ 204.204305][ T6139] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 204.223814][ T6649] bcachefs (loop2): shutdown complete [ 204.227458][ T6646] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 204.280778][ T6646] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 204.285293][ T6646] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 204.285753][ T6646] bcachefs (loop0): marking filesystem clean [ 204.315682][ T6646] bcachefs (loop0): shutdown complete [ 204.882856][T17943] loop2: detected capacity change from 0 to 32768 [ 204.892065][T17943] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.935376][T17943] XFS (loop2): Ending clean mount [ 205.021202][ T6649] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.082490][T17924] loop4: detected capacity change from 0 to 131072 [ 205.086946][T17924] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 205.086996][T17924] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 205.100691][T17973] loop1: detected capacity change from 0 to 256 [ 205.103437][T17924] F2FS-fs (loop4): invalid crc value [ 205.131280][T17973] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 205.145223][T17924] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.154582][T17924] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 205.154618][T17924] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 205.180553][T17983] loop2: detected capacity change from 0 to 256 [ 205.182073][T17983] exfat: Deprecated parameter 'namecase' [ 205.183046][T17983] exfat: Deprecated parameter 'namecase' [ 205.193851][T17983] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 205.225410][T17983] fuse: Bad value for 'fd' [ 205.288815][T17980] loop3: detected capacity change from 0 to 40427 [ 205.290312][T17980] F2FS-fs: heap/no_heap options were deprecated [ 205.302376][T17980] F2FS-fs (loop3): invalid crc value [ 205.302405][T17980] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 205.323826][T17990] netlink: 'syz.1.4897': attribute type 31 has an invalid length. [ 205.334545][T17980] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.334793][T17980] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 205.719565][T18031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.728807][T18035] loop3: detected capacity change from 0 to 8 [ 205.740489][T18028] loop1: detected capacity change from 0 to 4096 [ 205.741180][T18035] SQUASHFS error: zlib decompression failed, data probably corrupt [ 205.741192][T18035] SQUASHFS error: Failed to read block 0x9b: -5 [ 205.741201][T18035] SQUASHFS error: Unable to read metadata cache entry [99] [ 205.741207][T18035] SQUASHFS error: Unable to read inode 0x127 [ 205.765235][T18035] devtmpfs: Unknown parameter 'dirsyncH]}V¾Â_¼l–ì!¹R_ðŒ9BÿxÐû§.BÔÐï¢;½}nʨh§;¹Ñ@ÐÒužGÅ÷¿9D±/"iKë3’ü£ÎÌØ×g¢…¾à9ù[85šmÍhFç¥%jL¾tNY“3Ãô%›\*î [ 205.765235][T18035] §~* ¿Ê*ˆºy¬õøQƒvE:eíÕ²©@vƒŽ”¶\L›cu90xffffffffffffffffÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿ' [ 205.771929][T18028] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 205.780056][T18028] ntfs3(loop1): ino=19, mi_enum_attr [ 205.780084][T18028] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 205.809893][T18025] loop2: detected capacity change from 0 to 32768 [ 205.811809][T18025] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4914 (18025) [ 205.830754][T18025] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.830811][T18025] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 205.830835][T18025] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 205.842799][T18028] ntfs3(loop1): failed to convert "c46c" to maccroatian [ 205.842962][T18028] ntfs3(loop1): ino=20, mi_enum_attr [ 205.878592][T18025] BTRFS info (device loop2): rebuilding free space tree [ 205.900097][T18025] BTRFS info (device loop2): disabling free space tree [ 205.900144][T18025] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.900155][T18025] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.922803][T18025] BTRFS info (device loop2): enabling ssd optimizations [ 205.922833][T18025] BTRFS info (device loop2): enabling disk space caching [ 205.922853][T18025] BTRFS info (device loop2): force clearing of disk cache [ 205.922859][T18025] BTRFS info (device loop2): enabling auto defrag [ 205.922866][T18025] BTRFS info (device loop2): max_inline set to 0 [ 206.034902][ T6649] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.090600][T18086] loop3: detected capacity change from 0 to 512 [ 206.095395][T18088] __nla_validate_parse: 1 callbacks suppressed [ 206.095437][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4936'. [ 206.157051][T18084] loop4: detected capacity change from 0 to 32768 [ 206.163637][T18086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.164527][T18084] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4935 (18084) [ 206.175828][T18084] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.175901][T18084] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 206.180244][T18086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.217609][ T6657] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.270115][T18084] BTRFS info (device loop4): enabling ssd optimizations [ 206.271719][T18084] BTRFS info (device loop4): enabling free space tree [ 206.287627][T18115] loop1: detected capacity change from 0 to 4096 [ 206.328553][ T6659] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.372131][T18104] loop0: detected capacity change from 0 to 32768 [ 206.379682][T18115] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB [ 206.399866][T18104] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.475714][T18104] XFS (loop0): Ending clean mount [ 206.587890][T18174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4967'. [ 206.593913][T18175] loop3: detected capacity change from 0 to 2048 [ 206.601703][ T6646] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.602607][T18175] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 206.630394][T18175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.668494][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4972'. [ 206.766586][T18202] openvswitch: netlink: IP tunnel TTL not specified. [ 206.815045][T18210] veth0_to_bond: entered allmulticast mode [ 206.987590][T18239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4995'. [ 207.007746][T18248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5001'. [ 207.012504][T18248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5001'. [ 207.014056][T18248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5001'. [ 207.090428][T18261] xt_hashlimit: max too large, truncated to 1048576 [ 207.143194][T18266] loop3: detected capacity change from 0 to 2048 [ 207.191322][T18266] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.291552][T18273] loop4: detected capacity change from 0 to 32768 [ 207.295680][T18273] btrfs: Deprecated parameter 'usebackuproot' [ 207.297059][T18273] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 207.300435][T18273] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5013 (18273) [ 207.312692][T18273] BTRFS info (device loop4 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 207.312765][T18273] BTRFS info (device loop4 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 207.312807][T18273] BTRFS warning (device loop4 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 207.312835][T18273] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 207.313321][T18273] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 207.322900][T18273] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 207.329607][T18273] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 207.329944][T18273] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 207.330134][T18273] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 207.330314][T18273] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 207.344632][T18291] ipt_REJECT: TCP_RESET invalid for non-tcp [ 207.363483][T18273] BTRFS info (device loop4 state CS): enabling ssd optimizations [ 207.363514][T18273] BTRFS info (device loop4 state CS): turning off barriers [ 207.363540][T18273] BTRFS info (device loop4 state CS): disabling tree log [ 207.363555][T18273] BTRFS info (device loop4 state CS): disabling log replay at mount time [ 207.363568][T18273] BTRFS info (device loop4 state CS): enabling disk space caching [ 207.363578][T18273] BTRFS info (device loop4 state CS): force clearing of disk cache [ 207.363588][T18273] BTRFS info (device loop4 state CS): trying to use backup root at mount time [ 207.363598][T18273] BTRFS info (device loop4 state CS): ignoring bad roots [ 207.363606][T18273] BTRFS info (device loop4 state CS): ignoring data csums [ 207.363612][T18273] BTRFS info (device loop4 state CS): ignoring meta csums [ 207.363619][T18273] BTRFS info (device loop4 state CS): ignoring unknown super block flags [ 207.440118][T18273] btrfs: Deprecated parameter 'usebackuproot' [ 207.440157][T18273] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 207.440221][T18273] BTRFS warning (device loop4 state MCS): remount supports changing free space tree only from RO to RW [ 207.440232][T18273] BTRFS info (device loop4 state MCS): enabling free space tree [ 207.440240][T18273] BTRFS info (device loop4 state MCS): force clearing of disk cache [ 207.440248][T18273] BTRFS info (device loop4 state MCS): trying to use backup root at mount time [ 207.440255][T18273] BTRFS info (device loop4 state MCS): disabling disk space caching [ 207.471459][T18289] loop0: detected capacity change from 0 to 40427 [ 207.472914][T18289] F2FS-fs: heap/no_heap options were deprecated [ 207.475163][T18289] F2FS-fs (loop0): invalid crc value [ 207.475200][T18289] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 207.489035][ T6659] BTRFS info (device loop4 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 207.515575][T18289] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 207.524602][T18289] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.547771][T18289] F2FS-fs: heap/no_heap options were deprecated [ 207.548016][T18289] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 207.599073][T18332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5029'. [ 207.662114][T18345] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 207.739578][T18358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.992352][T18399] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5065'. [ 208.018908][T18361] loop1: detected capacity change from 0 to 40427 [ 208.019268][T18361] F2FS-fs: heap/no_heap options were deprecated [ 208.034271][T18361] F2FS-fs (loop1): build fault injection rate: 23 [ 208.034293][T18361] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 208.037241][T18361] F2FS-fs (loop1): invalid crc value [ 208.049021][T18361] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 208.100884][T18361] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 208.101738][T18361] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.107205][T18414] loop4: detected capacity change from 0 to 256 [ 208.151604][T18361] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x158/0x868 [ 208.326260][T18397] loop2: detected capacity change from 0 to 32768 [ 208.412597][T18449] loop0: detected capacity change from 0 to 2048 [ 208.422064][T18449] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 208.422105][T18449] NILFS (loop0): mounting unchecked fs [ 208.422134][T18449] NILFS (loop0): recovery required for readonly filesystem [ 208.422158][T18449] NILFS (loop0): write access will be enabled during recovery [ 208.423745][T18449] NILFS (loop0): recovery complete [ 208.426938][T18459] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.452762][T18397] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,recovery_pass_last=scan_for_btree_nodes,nojournal_transaction_names,reconstruct_alloc [ 208.452790][T18397] allowing incompatible features above 0.0: (unknown version) [ 208.452808][T18397] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 208.452821][T18397] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 208.452879][T18397] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 208.452932][T18397] bcachefs (loop2): Version upgrade required: [ 208.452932][T18397] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 208.452932][T18397] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 208.452932][T18397] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 208.464598][T18397] bcachefs (loop2): dropping and reconstructing all alloc info [ 208.466788][T18397] bcachefs (loop2): btree node read error at btree extents level 0/0 [ 208.466795][T18397] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 65535 min_key R POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 208.466799][T18397] loop2 node offset 16/65535: btree node data missing: expected 65535 sectors, found 16 [ 208.466803][T18397] loop2 btree validate error [ 208.466807][T18397] flagging btree extents lost data [ 208.466810][T18397] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 208.466813][T18397] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 208.466817][T18397] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 208.466820][T18397] ret fsck_errors_not_fixed [ 208.466922][T18397] bcachefs (loop2): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 208.467724][T18397] bcachefs (loop2): btree node read error at btree dirents level 0/0 [ 208.467730][T18397] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 208.467734][T18397] loop2 node offset 8/24: btree node data missing: expected 24 sectors, found 8 [ 208.467738][T18397] loop2 btree validate error [ 208.467741][T18397] flagging btree dirents lost data [ 208.467744][T18397] ret fsck_errors_not_fixed [ 208.467779][T18397] bcachefs (loop2): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 208.468579][T18397] bcachefs (loop2): btree node read error at btree xattrs level 0/0 [ 208.468589][T18397] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 208.468596][T18397] loop2 node offset 0/16: incorrect min_key: got 0:0:458752 should be POS_MIN [ 208.468599][T18397] loop2 btree validate error [ 208.468603][T18397] flagging btree xattrs lost data [ 208.468606][T18397] ret btree_node_read_err_bad_node [ 208.469384][T18397] bcachefs (loop2): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 208.501055][T18464] loop3: detected capacity change from 0 to 2048 [ 208.502161][T18397] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 208.502556][T18397] bcachefs (loop2): scanning for old btree nodes: min_version 0.24: unwritten_extents [ 208.502567][T18397] bcachefs (loop2): going read-write [ 208.539220][ T1661] bcachefs (loop2): bucket 0:38 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 208.539245][ T1661] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 208.540189][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.540196][ T1661] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 208.542627][T18464] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.605495][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.605520][ T1661] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 208.615463][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.615487][ T1661] u64s 5 type deleted 0:27:0 len 0 ver 0, , continuing [ 208.615634][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.615639][ T1661] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 208.622258][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.622277][ T1661] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 208.623459][ T1661] bcachefs (loop2): bucket 0:35 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 208.623466][ T1661] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 208.623534][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.623539][ T1661] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 208.624210][ T1661] bcachefs (loop2): bucket 0:32 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 208.624218][ T1661] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 208.624290][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.624294][ T1661] u64s 5 type deleted 0:31:0 len 0 ver 0, , continuing [ 208.628779][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.628785][ T1661] u64s 13 type alloc_v4 0:32:0 len 0 ver 0: [ 208.628789][ T1661] gen 0 oldest_gen 0 data_type free [ 208.628793][ T1661] journal_seq_nonempty 0 [ 208.628796][ T1661] journal_seq_empty 0 [ 208.628799][ T1661] need_discard 0 [ 208.628802][ T1661] need_inc_gen 0 [ 208.628805][ T1661] dirty_sectors 0 [ 208.628808][ T1661] stripe_sectors 0 [ 208.628810][ T1661] cached_sectors 0 [ 208.628813][ T1661] stripe 0 [ 208.628816][ T1661] stripe_redundancy 0 [ 208.628819][ T1661] io_time[READ] 0 [ 208.628822][ T1661] io_time[WRITE] 0 [ 208.628824][ T1661] fragmentation 0 [ 208.628827][ T1661] bp_start 8 [ 208.628830][ T1661] , , continuing [ 208.629354][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.629360][ T1661] u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing [ 208.634244][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.634251][ T1661] u64s 5 type deleted 0:34:0 len 0 ver 0, , continuing [ 208.634752][ T1661] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 208.634758][ T1661] u64s 13 type alloc_v4 0:35:0 len 0 ver 0: [ 208.634762][ T1661] gen 0 oldest_gen 0 data_type free [ 208.634765][ T1661] journal_seq_nonempty 0 [ 208.634768][ T1661] journal_seq_empty 0 [ 208.634771][ T1661] need_discard 0 [ 208.634774][ T1661] need_inc_gen 0 [ 208.634777][ T1661] dirty_sectors 0 [ 208.634780][ T1661] stripe_sectors 0 [ 208.634783][ T1661] cached_sectors 0 [ 208.634785][ T1661] stripe 0 [ 208.634788][ T1661] stripe_redundancy 0 [ 208.634791][ T1661] io_time[READ] 0 [ 208.634794][ T1661] io_time[WRITE] 0 [ 208.634797][ T1661] fragmentation 0 [ 208.634800][ T1661] bp_start 8 [ 208.634802][ T1661] , , continuing [ 208.634805][ T1661] Ratelimiting new instances of previous error [ 208.636951][ T1661] bcachefs (loop2): bucket 0:42 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 208.636957][ T1661] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 208.648491][T18397] bcachefs (loop2): scanning for old btree nodes done [ 208.648527][T18397] bcachefs (loop2): done starting filesystem [ 208.657067][T18477] autofs4:pid:18477:validate_dev_ioctl: path string terminator missing for cmd(0xc0189373) [ 208.682727][T18456] loop4: detected capacity change from 0 to 32768 [ 208.692875][T18397] bcachefs (loop2): bch2_evict_inode(): error VFS incorrectly tried to delete inode 1:4101 btree_node_read_error [ 208.700939][T18456] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5092 (18456) [ 208.720988][T18483] netlink: 'syz.1.5101': attribute type 1 has an invalid length. [ 208.721019][T18483] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5101'. [ 208.732775][T18456] BTRFS info (device loop4 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 208.732855][T18456] BTRFS info (device loop4 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 208.748881][ T6649] bcachefs (loop2): shutting down [ 208.750105][ T6649] bcachefs (loop2): going read-only [ 208.751608][ T6649] bcachefs (loop2): finished waiting for writes to stop [ 208.776603][T18456] BTRFS info (device loop4 state S): setting nodatasum [ 208.776628][T18456] BTRFS info (device loop4 state S): setting nodatacow [ 208.776649][T18456] BTRFS info (device loop4 state S): enabling ssd optimizations [ 208.776663][T18456] BTRFS info (device loop4 state S): turning on flush-on-commit [ 208.776675][T18456] BTRFS info (device loop4 state S): turning on async discard [ 208.776686][T18456] BTRFS info (device loop4 state S): enabling free space tree [ 208.776698][T18456] BTRFS info (device loop4 state S): ignoring bad roots [ 208.776710][T18456] BTRFS info (device loop4 state S): ignoring meta csums [ 208.776721][T18456] BTRFS info (device loop4 state S): ignoring unknown super block flags [ 208.805679][ T6649] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 208.807988][ T6649] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 208.826298][ T6649] bcachefs (loop2): unclean shutdown complete, journal seq 13 [ 208.830390][ T6649] bcachefs (loop2): done going read-only, filesystem not clean [ 208.854712][ T6659] BTRFS info (device loop4 state S): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 208.890628][ T6649] bcachefs (loop2): shutdown complete [ 209.046130][T18535] [U] [ 209.046156][T18535] [U] [ 209.046167][T18535] [U] [ 209.046177][T18535] [U] [ 209.048250][T18535] [U] [ 209.048265][T18535] [U] [ 209.048275][T18535] [U] [ 209.048285][T18535] [U] [ 209.048351][T18535] [U] [ 209.048362][T18535] [U] [ 209.048371][T18535] [U] [ 209.048381][T18535] [U] [ 209.048420][T18535] [U] [ 209.048431][T18535] [U] [ 209.048440][T18535] [U] [ 209.048450][T18535] [U] [ 209.048500][T18535] [U] [ 209.048510][T18535] [U] [ 209.048520][T18535] [U] [ 209.048529][T18535] [U] [ 209.048567][T18535] [U] [ 209.048577][T18535] [U] [ 209.048587][T18535] [U] [ 209.048596][T18535] [U] [ 209.048641][T18535] [U] [ 209.048651][T18535] [U] [ 209.048660][T18535] [U] [ 209.048670][T18535] [U] [ 209.048708][T18535] [U] [ 209.048718][T18535] [U] [ 209.048728][T18535] [U] [ 209.048737][T18535] [U] [ 209.048781][T18535] [U] [ 209.048791][T18535] [U] [ 209.048800][T18535] [U] [ 209.048809][T18535] [U] [ 209.048847][T18535] [U] [ 209.048857][T18535] [U] [ 209.048867][T18535] [U] [ 209.048876][T18535] [U] [ 209.048920][T18535] [U] [ 209.048930][T18535] [U] [ 209.048939][T18535] [U] [ 209.048949][T18535] [U] [ 209.048986][T18535] [U] [ 209.048996][T18535] [U] [ 209.049006][T18535] [U] [ 209.049015][T18535] [U] [ 209.049058][T18535] [U] [ 209.049069][T18535] [U] [ 209.049078][T18535] [U] [ 209.049087][T18535] [U] [ 209.049125][T18535] [U] [ 209.049135][T18535] [U] [ 209.049145][T18535] [U] [ 209.049157][T18535] [U] [ 209.049200][T18535] [U] [ 209.049211][T18535] [U] [ 209.049220][T18535] [U] [ 209.049229][T18535] [U] [ 209.049267][T18535] [U] [ 209.049277][T18535] [U] [ 209.049286][T18535] [U] [ 209.049295][T18535] [U] [ 209.049338][T18535] [U] [ 209.049348][T18535] [U] [ 209.049358][T18535] [U] [ 209.049367][T18535] [U] [ 209.049404][T18535] [U] [ 209.049415][T18535] [U] [ 209.049424][T18535] [U] [ 209.049433][T18535] [U] [ 209.049475][T18535] [U] [ 209.049486][T18535] [U] [ 209.049495][T18535] [U] [ 209.049504][T18535] [U] [ 209.049542][T18535] [U] [ 209.049552][T18535] [U] [ 209.049561][T18535] [U] [ 209.049570][T18535] [U] [ 209.049613][T18535] [U] [ 209.049623][T18535] [U] [ 209.049632][T18535] [U] [ 209.049641][T18535] [U] [ 209.049679][T18535] [U] [ 209.049689][T18535] [U] [ 209.049698][T18535] [U] [ 209.049707][T18535] [U] [ 209.049750][T18535] [U] [ 209.049760][T18535] [U] [ 209.049770][T18535] [U] [ 209.049779][T18535] [U] [ 209.049816][T18535] [U] [ 209.049827][T18535] [U] [ 209.049836][T18535] [U] [ 209.049845][T18535] [U] [ 209.049887][T18535] [U] [ 209.049898][T18535] [U] [ 209.049907][T18535] [U] [ 209.049916][T18535] [U] [ 209.049954][T18535] [U] [ 209.049963][T18535] [U] [ 209.049973][T18535] [U] [ 209.049982][T18535] [U] [ 209.050024][T18535] [U] [ 209.050035][T18535] [U] [ 209.050044][T18535] [U] [ 209.050053][T18535] [U] [ 209.050091][T18535] [U] [ 209.050101][T18535] [U] [ 209.050110][T18535] [U] [ 209.050119][T18535] [U] [ 209.050166][T18535] [U] [ 209.050176][T18535] [U] [ 209.050185][T18535] [U] [ 209.050194][T18535] [U] [ 209.050232][T18535] [U] [ 209.050242][T18535] [U] [ 209.050251][T18535] [U] [ 209.050260][T18535] [U] [ 209.050303][T18535] [U] [ 209.050313][T18535] [U] [ 209.050322][T18535] [U] [ 209.050331][T18535] [U] [ 209.050363][T18535] [U] [ 209.050373][T18535] [U] [ 209.050383][T18535] [U] [ 209.111305][T18534] [U] [ 209.225749][T18544] loop3: detected capacity change from 0 to 40427 [ 209.277680][T18544] F2FS-fs (loop3): invalid crc value [ 209.298089][T18546] loop4: detected capacity change from 0 to 32768 [ 209.298449][T18544] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 209.300456][T18544] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 209.305627][T18546] (syz.4.5124,18546,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.305977][T18546] (syz.4.5124,18546,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.312262][T18546] JBD2: Ignoring recovery information on journal [ 209.340516][T18546] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 209.396299][ T6659] ocfs2: Unmounting device (7,4) on (node local) [ 209.563087][T18586] binder: binder_mmap: 18585 20002000-20005000 bad vm_flags failed -1 [ 209.631379][T18595] vlan0: entered promiscuous mode [ 209.692193][T18600] netlink: 'syz.3.5145': attribute type 1 has an invalid length. [ 209.714485][T18590] loop4: detected capacity change from 0 to 32768 [ 209.725950][T18590] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.734686][T18612] loop3: detected capacity change from 0 to 1024 [ 209.741506][T18612] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 209.741561][T18612] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 209.741654][T18612] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 209.744966][T18612] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: inode #32: comm syz.3.5149: iget: special inode unallocated [ 209.745181][T18612] EXT4-fs (loop3): no journal found [ 209.745191][T18612] EXT4-fs (loop3): can't get journal size [ 209.746894][T18612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.786624][T18612] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 209.788247][T18590] XFS (loop4): Ending clean mount [ 209.818718][ T6659] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.836448][ T6657] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.997759][T18639] netlink: 'syz.3.5161': attribute type 9 has an invalid length. [ 210.104756][T18660] loop4: detected capacity change from 0 to 1024 [ 210.343161][T18680] loop1: detected capacity change from 0 to 4096 [ 210.345706][T18680] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 210.345939][T18680] ntfs3(loop1): ino=3, mi_enum_attr [ 210.366250][T18691] loop2: detected capacity change from 0 to 64 [ 210.374660][T18665] loop0: detected capacity change from 0 to 32768 [ 210.378585][T18665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5173 (18665) [ 210.389487][T18665] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.389561][T18665] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 210.414236][T18680] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 210.414408][T18680] ntfs3(loop1): ino=1f, "file2" failed to open parent directory r=5 to update [ 210.433319][T18708] loop3: detected capacity change from 0 to 256 [ 210.443993][T18665] BTRFS info (device loop0): enabling ssd optimizations [ 210.444023][T18665] BTRFS info (device loop0): enabling free space tree [ 210.461109][ T42] ntfs3(loop1): ino=1f, failed to open parent directory r=5 to update [ 210.481025][T18708] FAT-fs (loop3): Directory bread(block 64) failed [ 210.481055][T18708] FAT-fs (loop3): Directory bread(block 65) failed [ 210.481086][T18708] FAT-fs (loop3): Directory bread(block 66) failed [ 210.481097][T18708] FAT-fs (loop3): Directory bread(block 67) failed [ 210.481116][T18708] FAT-fs (loop3): Directory bread(block 68) failed [ 210.481126][T18708] FAT-fs (loop3): Directory bread(block 69) failed [ 210.481149][T18708] FAT-fs (loop3): Directory bread(block 70) failed [ 210.481160][T18708] FAT-fs (loop3): Directory bread(block 71) failed [ 210.481179][T18708] FAT-fs (loop3): Directory bread(block 72) failed [ 210.481189][T18708] FAT-fs (loop3): Directory bread(block 73) failed [ 210.523367][ T6646] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.591658][T18725] xt_TPROXY: Can be used only with -p tcp or -p udp [ 210.623730][T18730] netlink: 'syz.0.5193': attribute type 1 has an invalid length. [ 210.623765][T18730] netlink: 'syz.0.5193': attribute type 1 has an invalid length. [ 210.853747][T18763] loop4: detected capacity change from 0 to 256 [ 210.886987][T18763] exFAT-fs (loop4): error, data size is invalid(34359738378) [ 210.887016][T18763] exFAT-fs (loop4): Filesystem has been set read-only [ 211.020435][T18783] Scaler: ================= START STATUS ================= [ 211.020465][T18783] Scaler: ================== END STATUS ================== [ 211.030271][T18788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.233013][T18735] loop1: detected capacity change from 0 to 65566 [ 211.285010][T18790] loop3: detected capacity change from 0 to 32768 [ 211.286698][T18790] XFS: attr2 mount option is deprecated. [ 211.287049][T18735] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 211.302165][T18735] XFS (loop1): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c. Caller xlog_header_check_mount+0xac/0xf4 [ 211.302225][T18735] CPU: 0 UID: 0 PID: 18735 Comm: syz.1.5197 Not tainted syzkaller #0 PREEMPT [ 211.302238][T18735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 211.302245][T18735] Call trace: [ 211.302248][T18735] show_stack+0x2c/0x3c (C) [ 211.302261][T18735] __dump_stack+0x30/0x40 [ 211.302269][T18735] dump_stack_lvl+0xd8/0x12c [ 211.302277][T18735] dump_stack+0x1c/0x28 [ 211.302284][T18735] xfs_corruption_error+0x12c/0x188 [ 211.302294][T18735] xlog_header_check_mount+0xe4/0xf4 [ 211.302301][T18735] xlog_find_verify_log_record+0x2dc/0x48c [ 211.302309][T18735] xlog_find_head+0x478/0x668 [ 211.302315][T18735] xlog_find_tail+0x50/0x70c [ 211.302322][T18735] xlog_recover+0x4c/0x3e8 [ 211.302328][T18735] xfs_log_mount+0x208/0x394 [ 211.302338][T18735] xfs_mountfs+0xad8/0x1c04 [ 211.302345][T18735] xfs_fs_fill_super+0xe74/0x11f0 [ 211.302353][T18735] get_tree_bdev_flags+0x360/0x414 [ 211.302362][T18735] get_tree_bdev+0x2c/0x3c [ 211.302370][T18735] xfs_fs_get_tree+0x28/0x38 [ 211.302377][T18735] vfs_get_tree+0x90/0x28c [ 211.302385][T18735] do_new_mount+0x278/0x7f4 [ 211.302393][T18735] path_mount+0x5b4/0xde0 [ 211.302400][T18735] __arm64_sys_mount+0x3e8/0x468 [ 211.302408][T18735] invoke_syscall+0x98/0x254 [ 211.302415][T18735] el0_svc_common+0x130/0x23c [ 211.302423][T18735] do_el0_svc+0x48/0x58 [ 211.302430][T18735] el0_svc+0x5c/0x254 [ 211.302437][T18735] el0t_64_sync_handler+0x84/0x12c [ 211.302444][T18735] el0t_64_sync+0x198/0x19c [ 211.302452][T18735] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 211.302457][T18735] XFS (loop1): log has mismatched uuid - can't recover [ 211.302583][T18735] XFS (loop1): failed to find log head [ 211.302601][T18735] XFS (loop1): log mount/recovery failed: error -117 [ 211.306860][T18790] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.312114][T18735] XFS (loop1): log mount failed [ 211.334523][T18790] XFS (loop3): Ending clean mount [ 211.339129][T18790] XFS (loop3): Quotacheck needed: Please wait. [ 211.347642][T18790] XFS (loop3): Quotacheck: Done. [ 211.454341][T18844] netlink: 'syz.2.5245': attribute type 2 has an invalid length. [ 211.471802][ T6657] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.522524][T18852] loop2: detected capacity change from 0 to 1024 [ 211.539718][T18850] loop1: detected capacity change from 0 to 8192 [ 211.584701][T18852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.588564][T18861] __nla_validate_parse: 11 callbacks suppressed [ 211.590600][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5253'. [ 211.605208][T18850] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 211.605238][T18850] FAT-fs (loop1): Filesystem has been set read-only [ 211.605294][T18850] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068) [ 211.605311][T18850] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068) [ 211.635967][T18869] loop4: detected capacity change from 0 to 256 [ 211.638357][T18869] exfat: Deprecated parameter 'utf8' [ 211.652618][ T6649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.674674][T18869] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 211.754302][T18866] loop3: detected capacity change from 0 to 32768 [ 211.791657][T18872] loop2: detected capacity change from 0 to 4096 [ 211.825243][T18883] netlink: 'syz.0.5263': attribute type 8 has an invalid length. [ 211.840885][T18883] bridge1: entered allmulticast mode [ 211.845125][T18872] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 211.863640][T18872] ntfs3(loop2): Failed to load $Extend (-22). [ 211.863669][T18872] ntfs3(loop2): Failed to initialize $Extend. [ 212.111439][T18916] loop2: detected capacity change from 0 to 64 [ 212.144426][T18898] loop1: detected capacity change from 0 to 32768 [ 212.175783][T18891] loop3: detected capacity change from 0 to 32768 [ 212.178357][T18891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5266 (18891) [ 212.182261][T18891] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.182311][T18891] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 212.235586][T18891] BTRFS info (device loop3): enabling ssd optimizations [ 212.235614][T18891] BTRFS info (device loop3): enabling free space tree [ 212.298683][ T6657] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.309336][T18898] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,recovery_pass_last=scan_for_btree_nodes,nojournal_transaction_names,reconstruct_alloc [ 212.309364][T18898] allowing incompatible features above 0.0: (unknown version) [ 212.309374][T18898] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 212.309388][T18898] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 212.309442][T18898] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 212.309500][T18898] bcachefs (loop1): Version upgrade required: [ 212.309500][T18898] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 212.309500][T18898] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 212.309500][T18898] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 212.310595][T18898] bcachefs (loop1): dropping and reconstructing all alloc info [ 212.312547][T18898] bcachefs (loop1): btree node read error at btree extents level 0/0 [ 212.312555][T18898] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 65535 min_key R POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 212.312561][T18898] loop1 node offset 16/65535: btree node data missing: expected 65535 sectors, found 16 [ 212.312565][T18898] loop1 btree validate error [ 212.312568][T18898] flagging btree extents lost data [ 212.312572][T18898] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 212.312576][T18898] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 212.312579][T18898] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 212.312583][T18898] ret fsck_errors_not_fixed [ 212.312727][T18898] bcachefs (loop1): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 212.313519][T18898] bcachefs (loop1): btree node read error at btree dirents level 0/0 [ 212.313525][T18898] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 212.313530][T18898] loop1 node offset 8/24: btree node data missing: expected 24 sectors, found 8 [ 212.313534][T18898] loop1 btree validate error [ 212.313537][T18898] flagging btree dirents lost data [ 212.313540][T18898] ret fsck_errors_not_fixed [ 212.313579][T18898] bcachefs (loop1): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 212.314050][T18898] bcachefs (loop1): btree node read error at btree xattrs level 0/0 [ 212.314054][T18898] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 212.314059][T18898] loop1 node offset 0/16: incorrect min_key: got 0:0:458752 should be POS_MIN [ 212.314062][T18898] loop1 btree validate error [ 212.314066][T18898] flagging btree xattrs lost data [ 212.314069][T18898] ret btree_node_read_err_bad_node [ 212.314102][T18898] bcachefs (loop1): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 212.316292][T18898] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 212.316693][T18898] bcachefs (loop1): scanning for old btree nodes: min_version 0.24: unwritten_extents [ 212.316702][T18898] bcachefs (loop1): going read-write [ 212.333857][ T42] bcachefs (loop1): bucket 0:38 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 212.333867][ T42] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 212.334634][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.334642][ T42] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 212.386184][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.386207][ T42] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 212.386896][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.386903][ T42] u64s 5 type deleted 0:27:0 len 0 ver 0, , continuing [ 212.387040][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.387045][ T42] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 212.391349][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.391357][ T42] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 212.391882][ T42] bcachefs (loop1): bucket 0:35 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 212.391889][ T42] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 212.391953][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.391958][ T42] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 212.392220][ T42] bcachefs (loop1): bucket 0:32 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 212.392226][ T42] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 212.392288][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.392292][ T42] u64s 5 type deleted 0:31:0 len 0 ver 0, , continuing [ 212.392837][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.392843][ T42] u64s 13 type alloc_v4 0:32:0 len 0 ver 0: [ 212.392847][ T42] gen 0 oldest_gen 0 data_type free [ 212.392851][ T42] journal_seq_nonempty 0 [ 212.392854][ T42] journal_seq_empty 0 [ 212.392857][ T42] need_discard 0 [ 212.392861][ T42] need_inc_gen 0 [ 212.392864][ T42] dirty_sectors 0 [ 212.392867][ T42] stripe_sectors 0 [ 212.392870][ T42] cached_sectors 0 [ 212.392873][ T42] stripe 0 [ 212.392877][ T42] stripe_redundancy 0 [ 212.392880][ T42] io_time[READ] 0 [ 212.392883][ T42] io_time[WRITE] 0 [ 212.392886][ T42] fragmentation 0 [ 212.392889][ T42] bp_start 8 [ 212.392892][ T42] , , continuing [ 212.395725][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.395732][ T42] u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing [ 212.398298][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.398305][ T42] u64s 5 type deleted 0:34:0 len 0 ver 0, , continuing [ 212.402721][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 212.402728][ T42] u64s 13 type alloc_v4 0:35:0 len 0 ver 0: [ 212.402732][ T42] gen 0 oldest_gen 0 data_type free [ 212.402736][ T42] journal_seq_nonempty 0 [ 212.402739][ T42] journal_seq_empty 0 [ 212.402742][ T42] need_discard 0 [ 212.402745][ T42] need_inc_gen 0 [ 212.402748][ T42] dirty_sectors 0 [ 212.402751][ T42] stripe_sectors 0 [ 212.402754][ T42] cached_sectors 0 [ 212.402757][ T42] stripe 0 [ 212.402760][ T42] stripe_redundancy 0 [ 212.402763][ T42] io_time[READ] 0 [ 212.402766][ T42] io_time[WRITE] 0 [ 212.402768][ T42] fragmentation 0 [ 212.402771][ T42] bp_start 8 [ 212.402774][ T42] , , continuing [ 212.402777][ T42] Ratelimiting new instances of previous error [ 212.452735][ T42] bcachefs (loop1): bucket 0:42 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 212.452756][ T42] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 212.470858][T18898] bcachefs (loop1): scanning for old btree nodes done [ 212.470915][T18898] bcachefs (loop1): done starting filesystem [ 212.608034][T18977] netlink: 'syz.0.5296': attribute type 1 has an invalid length. [ 212.608067][T18977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5296'. [ 212.617927][T18898] bcachefs (loop1): bch2_evict_inode(): error VFS incorrectly tried to delete inode 1:4101 btree_node_read_error [ 212.680545][ T6647] bcachefs (loop1): shutting down [ 212.680591][ T6647] bcachefs (loop1): going read-only [ 212.680618][ T6647] bcachefs (loop1): finished waiting for writes to stop [ 212.693292][ T6647] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 212.697330][T18964] loop4: detected capacity change from 0 to 32768 [ 212.699204][ T6647] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 212.704644][ T6647] bcachefs (loop1): unclean shutdown complete, journal seq 13 [ 212.705661][ T6647] bcachefs (loop1): done going read-only, filesystem not clean [ 212.741061][T18979] loop2: detected capacity change from 0 to 32768 [ 212.747107][T18979] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 212.747148][T18979] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 212.764408][T18979] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 212.765707][T18964] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 212.777241][ T6647] bcachefs (loop1): shutdown complete [ 212.797401][T18979] ocfs2: Unmounting device (7,2) on (node local) [ 212.798065][ T6659] ocfs2: Unmounting device (7,4) on (node local) [ 212.866380][T19001] loop3: detected capacity change from 0 to 4096 [ 212.867339][T19001] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 212.881405][T19001] ntfs3(loop3): ino=19, mi_enum_attr [ 212.884761][T19001] ntfs3(loop3): failed to convert "076c" to cp949 [ 212.886167][T19001] ntfs3(loop3): ino=20, mi_enum_attr [ 212.951489][T18995] loop0: detected capacity change from 0 to 32768 [ 212.954640][T18995] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5303 (18995) [ 212.996425][T19013] xt_l2tp: v2 doesn't support IP mode [ 213.008666][T19011] loop4: detected capacity change from 0 to 4096 [ 213.009308][T18995] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 213.009361][T18995] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 213.009378][T18995] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 213.009485][T19011] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 213.067866][T19011] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 213.091585][ T4511] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 213.093587][ T6659] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 213.093637][ T6659] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 213.094260][ T6659] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 213.097542][ T4511] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 213.117122][T19031] loop3: detected capacity change from 0 to 4096 [ 213.118652][T18995] BTRFS info (device loop0): rebuilding free space tree [ 213.133446][T18995] BTRFS info (device loop0): disabling free space tree [ 213.133489][T18995] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.133507][T18995] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 213.139994][T18995] BTRFS info (device loop0): setting nodatasum [ 213.140029][T18995] BTRFS info (device loop0): enabling disk space caching [ 213.140037][T18995] BTRFS info (device loop0): force clearing of disk cache [ 213.162893][T19031] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 213.177640][T19040] netlink: 'syz.2.5318': attribute type 1 has an invalid length. [ 213.177670][T19040] netlink: 'syz.2.5318': attribute type 1 has an invalid length. [ 213.202090][T19031] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 213.208772][T18995] BTRFS error (device loop0): balance: invalid convert system profile raid0 [ 213.223246][ T6646] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 213.455859][T19068] loop0: detected capacity change from 0 to 128 [ 213.460690][T19068] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 213.492596][ T1661] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 213.646013][T19073] loop3: detected capacity change from 0 to 32768 [ 213.701135][T19046] loop4: detected capacity change from 0 to 65536 [ 213.708244][T19078] loop0: detected capacity change from 0 to 32768 [ 213.738921][T19046] XFS (loop4): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 213.758692][T19046] XFS (loop4): Ending clean mount [ 213.760512][T19046] XFS (loop4): Quotacheck needed: Please wait. [ 213.781902][ T1661] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 213.781944][ T1661] XFS (loop4): Unmount and run xfs_repair [ 213.781962][ T1661] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 213.781975][ T1661] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 213.781984][ T1661] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 213.781993][ T1661] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 213.782001][ T1661] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 213.782008][ T1661] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 213.782016][ T1661] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 213.782023][ T1661] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 213.782030][ T1661] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 213.782039][ T1661] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 213.796752][T19046] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 213.843963][T19046] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x100/0x1d4, xfs_agfl block 0x3 [ 213.845906][T19046] XFS (loop4): Unmount and run xfs_repair [ 213.845925][T19046] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 213.845939][T19046] 00000000: 58 41 46 4c 00 00 00 00 e4 65 4a 66 62 e5 49 63 XAFL.....eJfb.Ic [ 213.845946][T19046] 00000010: a8 1e 01 2d 9d 48 71 af 00 00 00 00 00 00 00 00 ...-.Hq......... [ 213.845952][T19046] 00000020: 2b a8 fe 5c ff ff ff ff 00 00 00 00 00 00 00 06 +..\............ [ 213.845958][T19046] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 213.845963][T19046] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 213.845968][T19046] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 213.845974][T19046] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 213.845979][T19046] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 213.845987][T19046] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x198/0x35c" at daddr 0x3 len 1 error 74 [ 213.857239][T19073] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 213.857248][T19073] allowing incompatible features above 0.0: (unknown version) [ 213.857253][T19073] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 213.857262][T19073] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 213.857278][T19073] bcachefs (loop3): initializing new filesystem [ 213.858653][T19073] bcachefs (loop3): going read-write [ 213.861347][T19046] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c8/0x964 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 213.861381][T19046] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 213.902565][T19078] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 213.905389][T19078] allowing incompatible features above 0.0: (unknown version) [ 213.905434][T19078] features: atomic_nlink [ 213.905454][T19078] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 213.905481][T19078] bcachefs (loop0): initializing new filesystem [ 213.912227][T19078] bcachefs (loop0): going read-write [ 213.913600][T19073] bcachefs (loop3): marking superblocks [ 213.915258][T19073] bcachefs (loop3): initializing freespace [ 213.922494][ T6659] XFS (loop4): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 213.923365][T19073] bcachefs (loop3): done initializing freespace [ 213.923803][T19073] bcachefs (loop3): reading snapshots table [ 213.923822][T19073] bcachefs (loop3): reading snapshots done [ 213.939750][T19078] bcachefs (loop0): marking superblocks [ 213.960166][T19078] bcachefs (loop0): initializing freespace [ 213.966270][T19073] bcachefs (loop3): done starting filesystem [ 213.985517][T19078] bcachefs (loop0): done initializing freespace [ 213.989286][T19122] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 213.989732][T19122] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 213.991506][T19078] bcachefs (loop0): reading snapshots table [ 213.991528][T19078] bcachefs (loop0): reading snapshots done [ 214.032357][T19078] bcachefs (loop0): done starting filesystem [ 214.057918][T19126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.080055][ T6657] bcachefs (loop3): shutting down [ 214.080081][ T6657] bcachefs (loop3): going read-only [ 214.080108][ T6657] bcachefs (loop3): finished waiting for writes to stop [ 214.098247][ T6646] bcachefs (loop0): shutting down [ 214.098267][ T6646] bcachefs (loop0): going read-only [ 214.098294][ T6646] bcachefs (loop0): finished waiting for writes to stop [ 214.108034][ T6657] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 214.116156][ T6646] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 214.139413][T19135] loop4: detected capacity change from 0 to 64 [ 214.139604][ T6657] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 214.142770][ T6657] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 214.143147][ T6657] bcachefs (loop3): marking filesystem clean [ 214.176730][ T6646] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 214.178255][ T6657] bcachefs (loop3): shutdown complete [ 214.191752][ T6646] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 214.192686][ T6646] bcachefs (loop0): marking filesystem clean [ 214.240829][T19134] loop2: detected capacity change from 0 to 32768 [ 214.242413][T19134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5350 (19134) [ 214.243757][ T6646] bcachefs (loop0): shutdown complete [ 214.251630][T19134] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.251683][T19134] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 214.282304][T19154] Device name cannot be null; rc = [-22] [ 214.300171][T19134] BTRFS info (device loop2): enabling ssd optimizations [ 214.300201][T19134] BTRFS info (device loop2): enabling free space tree [ 214.345465][ T6649] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.380809][T19168] loop4: detected capacity change from 0 to 512 [ 214.414143][T19168] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.421402][T19168] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5356: invalid indirect mapped block 4294967295 (level 0) [ 214.425951][T19168] EXT4-fs (loop4): Remounting filesystem read-only [ 214.427242][T19168] EXT4-fs (loop4): 1 orphan inode deleted [ 214.428160][T19168] EXT4-fs (loop4): 1 truncate cleaned up [ 214.429517][T19168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.459635][ T6656] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 214.504861][ T6659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.585354][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5367'. [ 214.608788][T19196] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 214.648254][T19198] ptrace attach of "./syz-executor exec"[6649] was attempted by ""[19198] [ 214.657131][T19200] loop1: detected capacity change from 0 to 4096 [ 214.698079][T19200] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 214.698334][T19200] ntfs3(loop1): Failed to load $Extend (-22). [ 214.698344][T19200] ntfs3(loop1): Failed to initialize $Extend. [ 214.762215][T19200] ntfs3(loop1): ino=5, "/" indx_read [ 214.822236][T19202] loop4: detected capacity change from 0 to 32768 [ 214.830098][T19202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5372 (19202) [ 214.844100][T19202] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.844167][T19202] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 214.868119][T19230] binder: 19228:19230 BC_INCREFS_DONE u0000000000000001 no match [ 214.871027][T19202] BTRFS info (device loop4): enabling ssd optimizations [ 214.871055][T19202] BTRFS info (device loop4): enabling free space tree [ 214.871171][T19230] binder: 19228:19230 ioctl c0306201 20000100 returned -14 [ 214.956250][ T6659] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.113743][T19276] loop2: detected capacity change from 0 to 64 [ 215.289081][T19269] loop3: detected capacity change from 0 to 32768 [ 215.324794][T19289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5399'. [ 215.334419][T19269] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 215.346674][T19269] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 215.375030][T19269] (syz.3.5392,19269,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=0, inode=65, rec_len=1023, name_len=0 [ 215.375071][T19269] (syz.3.5392,19269,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 215.375084][T19269] (syz.3.5392,19269,0):ocfs2_symlink:1879 ERROR: status = -2 [ 215.375095][T19269] (syz.3.5392,19269,0):ocfs2_symlink:2080 ERROR: status = -2 [ 215.438462][ T6657] ocfs2: Unmounting device (7,3) on (node local) [ 215.513219][T19307] loop1: detected capacity change from 0 to 1024 [ 215.572652][T19307] hfsplus: can't free extent [ 215.639349][T19271] loop4: detected capacity change from 0 to 131072 [ 215.703701][T19271] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 215.704268][T19271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 215.712647][T19271] F2FS-fs (loop4): access invalid blkaddr:0 [ 215.712675][T19271] CPU: 0 UID: 0 PID: 19271 Comm: syz.4.5387 Not tainted syzkaller #0 PREEMPT [ 215.712686][T19271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 215.712692][T19271] Call trace: [ 215.712696][T19271] show_stack+0x2c/0x3c (C) [ 215.712714][T19271] __dump_stack+0x30/0x40 [ 215.712723][T19271] dump_stack_lvl+0xd8/0x12c [ 215.712731][T19271] dump_stack+0x1c/0x28 [ 215.712738][T19271] __f2fs_is_valid_blkaddr+0xae0/0x107c [ 215.712748][T19271] f2fs_is_valid_blkaddr+0x12c/0x294 [ 215.712755][T19271] sanity_check_extent_cache+0x104/0x528 [ 215.712767][T19271] f2fs_iget+0x2d0c/0x4608 [ 215.712775][T19271] f2fs_lookup+0x364/0x8d0 [ 215.712783][T19271] lookup_one_qstr_excl+0x10c/0x2fc [ 215.712791][T19271] filename_create+0x1cc/0x32c [ 215.712798][T19271] do_mkdirat+0xa8/0x4c8 [ 215.712805][T19271] __arm64_sys_mkdirat+0x8c/0xa4 [ 215.712812][T19271] invoke_syscall+0x98/0x254 [ 215.712821][T19271] el0_svc_common+0x130/0x23c [ 215.712828][T19271] do_el0_svc+0x48/0x58 [ 215.712836][T19271] el0_svc+0x5c/0x254 [ 215.712843][T19271] el0t_64_sync_handler+0x84/0x12c [ 215.712849][T19271] el0t_64_sync+0x198/0x19c [ 215.715525][T19271] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 215.760214][T19312] loop3: detected capacity change from 0 to 32768 [ 215.781741][T19332] netlink: 'syz.2.5411': attribute type 10 has an invalid length. [ 215.784797][T19332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5411'. [ 215.786898][T19332] bridge0: port 3(veth1_vlan) entered blocking state [ 215.788112][T19332] bridge0: port 3(veth1_vlan) entered disabled state [ 215.793036][T19332] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 215.941793][T19312] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,recovery_pass_last=scan_for_btree_nodes,nojournal_transaction_names,reconstruct_alloc [ 215.941826][T19312] allowing incompatible features above 0.0: (unknown version) [ 215.941848][T19312] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 215.941865][T19312] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 215.941921][T19312] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 215.941978][T19312] bcachefs (loop3): Version upgrade required: [ 215.941978][T19312] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 215.941978][T19312] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 215.941978][T19312] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 215.942331][T19312] bcachefs (loop3): dropping and reconstructing all alloc info [ 215.946677][T19312] bcachefs (loop3): btree node read error at btree extents level 0/0 [ 215.946687][T19312] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 65535 min_key R POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 215.946696][T19312] loop3 node offset 16/65535: btree node data missing: expected 65535 sectors, found 16 [ 215.946701][T19312] loop3 btree validate error [ 215.946704][T19312] flagging btree extents lost data [ 215.946708][T19312] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 215.946712][T19312] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 215.946717][T19312] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 215.946721][T19312] ret fsck_errors_not_fixed [ 215.946781][T19312] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 215.947694][T19312] bcachefs (loop3): btree node read error at btree dirents level 0/0 [ 215.947700][T19312] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 215.947705][T19312] loop3 node offset 8/24: btree node data missing: expected 24 sectors, found 8 [ 215.947709][T19312] loop3 btree validate error [ 215.947712][T19312] flagging btree dirents lost data [ 215.947715][T19312] ret fsck_errors_not_fixed [ 215.947751][T19312] bcachefs (loop3): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 215.948237][T19312] bcachefs (loop3): btree node read error at btree xattrs level 0/0 [ 215.948242][T19312] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 215.948246][T19312] loop3 node offset 0/16: incorrect min_key: got 0:0:458752 should be POS_MIN [ 215.948250][T19312] loop3 btree validate error [ 215.948253][T19312] flagging btree xattrs lost data [ 215.948256][T19312] ret btree_node_read_err_bad_node [ 215.948289][T19312] bcachefs (loop3): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 215.949412][T19312] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 215.951697][T19312] bcachefs (loop3): scanning for old btree nodes: min_version 0.24: unwritten_extents [ 215.951713][T19312] bcachefs (loop3): going read-write [ 215.970439][ T4600] bcachefs (loop3): bucket 0:38 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 215.970448][ T4600] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 215.974276][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 215.974284][ T4600] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 216.020664][T19363] loop0: detected capacity change from 0 to 8 [ 216.032176][T19363] SQUASHFS error: xz decompression failed, data probably corrupt [ 216.032207][T19363] SQUASHFS error: Failed to read block 0x108: -5 [ 216.032216][T19363] SQUASHFS error: Unable to read metadata cache entry [106] [ 216.032226][T19363] SQUASHFS error: Unable to read inode 0x11f [ 216.079421][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.079444][ T4600] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 216.080474][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.080483][ T4600] u64s 5 type deleted 0:27:0 len 0 ver 0, , continuing [ 216.080916][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.080922][ T4600] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 216.096693][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.096717][ T4600] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 216.097557][ T4600] bcachefs (loop3): bucket 0:35 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 216.097565][ T4600] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 216.097648][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.097652][ T4600] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 216.097808][ T4600] bcachefs (loop3): bucket 0:32 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 216.097814][ T4600] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 216.097869][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.097873][ T4600] u64s 5 type deleted 0:31:0 len 0 ver 0, , continuing [ 216.100687][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.100694][ T4600] u64s 13 type alloc_v4 0:32:0 len 0 ver 0: [ 216.100698][ T4600] gen 0 oldest_gen 0 data_type free [ 216.100702][ T4600] journal_seq_nonempty 0 [ 216.100705][ T4600] journal_seq_empty 0 [ 216.100708][ T4600] need_discard 0 [ 216.100711][ T4600] need_inc_gen 0 [ 216.100714][ T4600] dirty_sectors 0 [ 216.100717][ T4600] stripe_sectors 0 [ 216.100720][ T4600] cached_sectors 0 [ 216.100723][ T4600] stripe 0 [ 216.100726][ T4600] stripe_redundancy 0 [ 216.100729][ T4600] io_time[READ] 0 [ 216.100732][ T4600] io_time[WRITE] 0 [ 216.100735][ T4600] fragmentation 0 [ 216.100738][ T4600] bp_start 8 [ 216.100741][ T4600] , , continuing [ 216.113038][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.113045][ T4600] u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing [ 216.121960][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.121968][ T4600] u64s 5 type deleted 0:34:0 len 0 ver 0, , continuing [ 216.125936][ T4600] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 216.125943][ T4600] u64s 13 type alloc_v4 0:35:0 len 0 ver 0: [ 216.125947][ T4600] gen 0 oldest_gen 0 data_type free [ 216.125951][ T4600] journal_seq_nonempty 0 [ 216.125954][ T4600] journal_seq_empty 0 [ 216.125957][ T4600] need_discard 0 [ 216.125960][ T4600] need_inc_gen 0 [ 216.125963][ T4600] dirty_sectors 0 [ 216.125966][ T4600] stripe_sectors 0 [ 216.125969][ T4600] cached_sectors 0 [ 216.125972][ T4600] stripe 0 [ 216.125975][ T4600] stripe_redundancy 0 [ 216.125978][ T4600] io_time[READ] 0 [ 216.125981][ T4600] io_time[WRITE] 0 [ 216.125983][ T4600] fragmentation 0 [ 216.125986][ T4600] bp_start 8 [ 216.125989][ T4600] , , continuing [ 216.125992][ T4600] Ratelimiting new instances of previous error [ 216.128480][ T4600] bcachefs (loop3): bucket 0:42 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 216.128486][ T4600] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 216.151899][T19312] bcachefs (loop3): scanning for old btree nodes done [ 216.151953][T19312] bcachefs (loop3): done starting filesystem [ 216.206361][T19312] bcachefs (loop3): bch2_evict_inode(): error VFS incorrectly tried to delete inode 1:4101 btree_node_read_error [ 216.249105][ T6657] bcachefs (loop3): shutting down [ 216.249130][ T6657] bcachefs (loop3): going read-only [ 216.249395][ T6657] bcachefs (loop3): finished waiting for writes to stop [ 216.288406][ T6657] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 216.293567][ T6657] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 216.297178][ T6657] bcachefs (loop3): unclean shutdown complete, journal seq 13 [ 216.303210][ T6657] bcachefs (loop3): done going read-only, filesystem not clean [ 216.314776][ T6657] bcachefs (loop3): shutdown complete [ 216.416518][T19384] loop4: detected capacity change from 0 to 32768 [ 216.416910][T19396] loop2: detected capacity change from 0 to 2048 [ 216.419718][T19384] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5432 (19384) [ 216.422624][T19396] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 216.432962][T19399] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.440363][T19384] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 216.440424][T19384] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 216.440444][T19384] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 216.443331][T19396] NILFS (loop2): the device already has a read/write mount. [ 216.481400][T19384] BTRFS info (device loop4): rebuilding free space tree [ 216.489892][T19384] BTRFS info (device loop4): disabling free space tree [ 216.489927][T19384] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.489938][T19384] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.490942][T19384] BTRFS info (device loop4): setting nodatasum [ 216.490951][T19384] BTRFS info (device loop4): disabling tree log [ 216.490958][T19384] BTRFS info (device loop4): enabling disk space caching [ 216.490964][T19384] BTRFS info (device loop4): force clearing of disk cache [ 216.490971][T19384] BTRFS info (device loop4): force zlib compression, level 3 [ 216.531002][T19384] BTRFS warning (device loop4): can't clear the incompat:0,compress_lzo feature bits while mounted [ 216.538778][ T6659] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 216.564034][T19401] loop1: detected capacity change from 0 to 32768 [ 216.570301][T19420] xt_limit: Overflow, try lower: 268435456/134217728 [ 216.571658][T19401] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5440 (19401) [ 216.600231][T19401] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 216.600288][T19401] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 216.600314][T19401] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 216.664741][T19444] netlink: 'syz.2.5447': attribute type 11 has an invalid length. [ 216.664763][T19444] netlink: 'syz.2.5447': attribute type 11 has an invalid length. [ 216.664779][T19444] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5447'. [ 216.698365][T19450] netlink: 'syz.2.5451': attribute type 1 has an invalid length. [ 216.747143][T19401] BTRFS info (device loop1): rebuilding free space tree [ 216.754111][T19401] BTRFS info (device loop1): disabling free space tree [ 216.754416][T19401] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.754431][T19401] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.774060][T19401] BTRFS info (device loop1): allowing degraded mounts [ 216.774088][T19401] BTRFS info (device loop1): enabling ssd optimizations [ 216.774108][T19401] BTRFS info (device loop1): turning on async discard [ 216.774116][T19401] BTRFS info (device loop1): enabling disk space caching [ 216.774124][T19401] BTRFS info (device loop1): force clearing of disk cache [ 216.774132][T19401] BTRFS info (device loop1): use zlib compression, level 3 [ 216.800388][T19461] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5454'. [ 216.849283][T19467] Cannot find del_set index 4 as target [ 216.882464][T19401] BTRFS info (device loop1): balance: start -susage=0..511,limit=2 [ 216.890328][T19401] BTRFS info (device loop1): relocating block group 1048576 flags system [ 216.896927][T19469] x_tables: ip_tables: osf match: only valid for protocol 6 [ 216.943354][T19401] BTRFS info (device loop1): balance: ended with status: 0 [ 217.024920][ T6647] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 217.131922][T19499] random: crng reseeded on system resumption [ 217.191487][T19501] loop4: detected capacity change from 0 to 8192 [ 217.242858][ T6816] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 217.244835][ T6816] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 217.246121][ T6816] loop4: p2 p4 [ 217.247122][ T6816] loop4: partition table partially beyond EOD, truncated [ 217.248658][ T6816] loop4: p2 start 452985600 is beyond EOD, truncated [ 217.255829][ T6816] loop4: p4 start 8388607 is beyond EOD, truncated [ 217.260599][T19501] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 217.260623][T19501] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 217.260663][T19501] loop4: p2 p4 [ 217.260675][T19501] loop4: partition table partially beyond EOD, truncated [ 217.260751][T19501] loop4: p2 start 452985600 is beyond EOD, truncated [ 217.260768][T19501] loop4: p4 start 8388607 is beyond EOD, truncated [ 217.364524][T19512] loop0: detected capacity change from 0 to 32768 [ 217.366459][T19512] bcachefs (/dev/loop0): error reading default superblock: Unsupported superblock version_min 0.0: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive) [ 217.422245][T19528] xt_hashlimit: max too large, truncated to 1048576 [ 217.432299][T19529] netlink: 'syz.2.5487': attribute type 3 has an invalid length. [ 217.453664][T19524] loop1: detected capacity change from 0 to 32768 [ 217.458263][T19528] xt_bpf: check failed: parse error [ 217.479674][T19524] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5485 (19524) [ 217.501444][T19524] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 217.501511][T19524] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 217.501534][T19524] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 217.581057][T19555] tmpfs: Bad value for 'mpol' [ 217.584064][T19512] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=crc64,data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only [ 217.584091][T19512] allowing incompatible features above 0.0: (unknown version) [ 217.584110][T19512] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 217.584127][T19512] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 217.584213][T19512] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=blacklist in superblock: invalid journal seq blacklist entry: bad size, fixing [ 217.584251][T19512] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 217.584280][T19512] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 217.584280][T19512] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 217.595352][T19512] bcachefs (loop0): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4098:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir [ 217.595361][T19512] dirent points to own directory, deleting [ 217.595722][T19512] bcachefs (loop0): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 217.598217][T19512] bcachefs (loop0): check_topology... [ 217.598246][T19512] bcachefs (loop0): btree root dirents unreadable, must recover from scan [ 217.598265][T19512] bcachefs (loop0): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 217.598277][T19512] bcachefs (loop0): bch2_check_root(): error restart_recovery [ 217.598283][T19512] bcachefs (loop0): scan_for_btree_nodes... [ 217.600061][T19512] bcachefs (loop0): btree node scan found 1 nodes after overwrites [ 217.600479][T19512] done [ 217.600485][T19512] bcachefs (loop0): check_topology... [ 217.600514][T19512] bcachefs (loop0): btree root dirents unreadable, must recover from scan [ 217.600640][T19512] bcachefs (loop0): no nodes found for btree dirents, continuing [ 217.601058][T19512] done [ 217.601062][T19512] bcachefs (loop0): accounting_read... done [ 217.613461][T19512] bcachefs (loop0): alloc_read... done [ 217.613819][T19512] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 217.640027][T19524] BTRFS info (device loop1): rebuilding free space tree [ 217.641312][T19512] bcachefs (loop0): done starting filesystem [ 217.667716][T19524] BTRFS info (device loop1): disabling free space tree [ 217.667761][T19524] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.667771][T19524] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.681983][T19524] BTRFS info (device loop1): setting nodatasum [ 217.682011][T19524] BTRFS info (device loop1): allowing degraded mounts [ 217.682031][T19524] BTRFS info (device loop1): enabling disk space caching [ 217.682039][T19524] BTRFS info (device loop1): force clearing of disk cache [ 217.682047][T19524] BTRFS info (device loop1): force zlib compression, level 3 [ 217.694650][T19568] usb usb8: usbfs: process 19568 (syz.2.5497) did not claim interface 0 before use [ 217.745194][T19524] BTRFS info (device loop1): balance: start -sprofiles=,usage=43..0,devid=0,drange=0..0,vrange=0..0,limit=0,limit=0..0,stripes=0..4294967293 [ 217.745271][T19524] BTRFS info (device loop1): balance: ended with status: 0 [ 217.770239][ T6646] bcachefs (loop0): shutting down [ 217.801327][ T6647] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 217.807389][T19574] loop4: detected capacity change from 0 to 256 [ 217.828703][ T6646] bcachefs (loop0): shutdown complete [ 218.006970][T19570] loop2: detected capacity change from 0 to 32768 [ 218.064447][T19602] 9p: Unknown access argument ã: -22 [ 218.166975][T19621] loop4: detected capacity change from 0 to 256 [ 218.194549][T19624] overlay: ./file0 is not a directory [ 218.232546][T19630] loop4: detected capacity change from 0 to 512 [ 218.240228][T19630] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 218.251886][T19630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 218.252000][T19630] EXT4-fs (loop4): orphan cleanup on readonly fs [ 218.252009][T19630] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.5521: bad orphan inode 267 [ 218.252833][T19630] EXT4-fs (loop4): Remounting filesystem read-only [ 218.253323][T19630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 218.278263][T19570] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 218.278290][T19570] allowing incompatible features above 0.0: (unknown version) [ 218.282640][T19630] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.5521: dx entry: limit 0 != root limit 125 [ 218.282678][T19630] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5521: Corrupt directory, running e2fsck is recommended [ 218.294906][T19570] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 218.297263][T19570] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 218.298701][T19570] bcachefs (loop2): recovering from clean shutdown, journal seq 15 [ 218.300021][T19570] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 218.300021][T19570] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 218.324412][ T6659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 218.346087][T19570] bcachefs (loop2): accounting_read... [ 218.364877][T19626] loop3: detected capacity change from 0 to 32768 [ 218.369559][T19642] loop1: detected capacity change from 0 to 512 [ 218.371901][T19642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.379443][T19642] EXT4-fs (loop1): 1 truncate cleaned up [ 218.382257][T19570] done [ 218.382276][T19570] bcachefs (loop2): alloc_read... done [ 218.382759][T19570] bcachefs (loop2): snapshots_read... done [ 218.383075][T19570] bcachefs (loop2): check_allocations... [ 218.383551][T19570] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 218.383557][T19570] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a64f6cc698df3452 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 218.385036][T19570] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 218.385042][T19570] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 218.385439][T19570] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 218.385444][T19570] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 218.385667][T19626] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 218.388705][T19570] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 218.388712][T19570] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 218.389075][T19570] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 218.389080][T19570] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 218.389486][T19570] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 218.389490][T19570] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 218.397262][T19570] done [ 218.400553][T19570] bcachefs (loop2): going read-write [ 218.416017][T19642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.418790][T19570] bcachefs (loop2): journal_replay... [ 218.436894][T19642] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5524: bg 0: block 4: invalid block bitmap [ 218.451222][T19570] done [ 218.452255][T19570] bcachefs (loop2): check_extents_to_backpointers... [ 218.452694][T19570] bcachefs (loop2): scanning for missing backpointers in 6/128 buckets [ 218.456413][T19570] done [ 218.457610][T19570] bcachefs (loop2): check_inodes... [ 218.459689][ T6657] ocfs2: Unmounting device (7,3) on (node local) [ 218.467814][T19570] done [ 218.467867][T19570] bcachefs (loop2): resume_logged_ops... [ 218.476622][ T6647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.486647][T19570] done [ 218.486681][T19570] bcachefs (loop2): delete_dead_inodes... done [ 218.496154][T19570] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 218.496184][T19570] bcachefs (loop2): check_extents_to_backpointers... done [ 218.497044][T19570] bcachefs (loop2): check_inodes... done [ 218.501541][T19570] bcachefs (loop2): resume_logged_ops... done [ 218.501909][T19570] bcachefs (loop2): delete_dead_inodes... done [ 218.502862][T19570] bcachefs (loop2): done starting filesystem [ 218.609340][ T6649] bcachefs (loop2): shutting down [ 218.609368][ T6649] bcachefs (loop2): going read-only [ 218.610079][ T6649] bcachefs (loop2): finished waiting for writes to stop [ 218.650093][ T6649] bcachefs (loop2): flushing journal and stopping allocators, journal seq 25 [ 218.652143][ T6649] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 25 [ 218.654962][ T6649] bcachefs (loop2): clean shutdown complete, journal seq 26 [ 218.655350][ T6649] bcachefs (loop2): marking filesystem clean [ 218.700436][ T6649] bcachefs (loop2): shutdown complete [ 218.883789][T19718] netlink: 'syz.1.5556': attribute type 3 has an invalid length. [ 218.885237][T19718] netlink: 'syz.1.5556': attribute type 3 has an invalid length. [ 218.891009][T19718] netlink: 'syz.1.5556': attribute type 3 has an invalid length. [ 218.891066][T19718] netlink: 'syz.1.5556': attribute type 3 has an invalid length. [ 218.891098][T19718] netlink: 'syz.1.5556': attribute type 3 has an invalid length. [ 218.891129][T19718] netlink: 'syz.1.5556': attribute type 3 has an invalid length. [ 218.891165][T19718] netlink: 'syz.1.5556': attribute type 3 has an invalid length. [ 218.891850][T19719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5557'. [ 218.902958][T19695] loop0: detected capacity change from 0 to 32768 [ 218.920765][T19721] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.924960][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 218.930992][T19695] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 218.946595][T19695] (syz.0.5543,19695,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=65, rec_len=64016, name_len=255 [ 218.947093][T19695] (syz.0.5543,19695,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 218.947121][T19695] (syz.0.5543,19695,0):ocfs2_mknod:301 ERROR: status = -2 [ 218.947143][T19695] (syz.0.5543,19695,0):ocfs2_mknod:505 ERROR: status = -2 [ 218.947158][T19695] (syz.0.5543,19695,0):ocfs2_create:678 ERROR: status = -2 [ 218.976418][ T6646] ocfs2: Unmounting device (7,0) on (node local) [ 219.015175][T19730] xt_CT: No such helper "snmp" [ 219.259525][T19774] loop0: detected capacity change from 0 to 64 [ 219.306079][T19750] loop3: detected capacity change from 0 to 32768 [ 219.361404][T19787] loop0: detected capacity change from 0 to 1024 [ 219.426427][T19792] loop4: detected capacity change from 0 to 4096 [ 219.446826][T19792] ntfs3(loop4): ino=1a, mi_enum_attr [ 219.446854][T19792] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 219.556027][T19807] loop1: detected capacity change from 0 to 512 [ 219.584551][T19807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.618562][ T6647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.753834][T19834] netdevsim netdevsim1: Firmware load for './cgroup/../file0/file0' refused, path contains '..' component [ 219.762008][T19833] loop4: detected capacity change from 0 to 4096 [ 219.780874][T19837] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.815309][T19833] NILFS (loop4): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 219.905165][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5620'. [ 219.998336][T19856] loop1: detected capacity change from 0 to 4096 [ 220.005286][T19856] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 220.007567][T19858] loop3: detected capacity change from 0 to 512 [ 220.008992][T19858] EXT4-fs: Ignoring removed nobh option [ 220.016003][T19858] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.5590: iget: bad i_size value: 38620345925642 [ 220.018333][T19858] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5590: couldn't read orphan inode 15 (err -117) [ 220.021121][T19858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.040658][T19856] ntfs3(loop1): ino=19, mi_enum_attr [ 220.040684][T19856] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 220.085058][ T6657] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.127227][T19867] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5626'. [ 220.127263][T19867] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5626'. [ 220.159225][T19851] loop4: detected capacity change from 0 to 32768 [ 220.178720][T19869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.178744][T19869] IPv6: NLM_F_CREATE should be set when creating new route [ 220.178797][T19869] IPv6: NLM_F_CREATE should be set when creating new route [ 220.184694][T19851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5621 (19851) [ 220.196177][T19851] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.196230][T19851] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 220.244830][T19851] BTRFS info (device loop4): enabling ssd optimizations [ 220.244859][T19851] BTRFS info (device loop4): enabling free space tree [ 220.397637][ T6659] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.488524][T19904] loop3: detected capacity change from 0 to 32768 [ 220.548708][T19930] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 220.612812][T19904] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 220.612842][T19904] allowing incompatible features above 0.0: (unknown version) [ 220.634108][T19904] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 220.634158][T19904] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 220.634222][T19904] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 220.634288][T19904] bcachefs (loop3): Version upgrade required: [ 220.634288][T19904] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 220.634288][T19904] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 220.634288][T19904] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 220.634378][T19904] bcachefs (loop3): dropping and reconstructing all alloc info [ 220.643973][T19926] loop1: detected capacity change from 0 to 32768 [ 220.660383][T19904] bcachefs (loop3): accounting_read... [ 220.675561][T19926] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.678556][T19904] done [ 220.678578][T19904] bcachefs (loop3): alloc_read... done [ 220.678669][T19904] bcachefs (loop3): snapshots_read... done [ 220.678891][T19904] bcachefs (loop3): done starting filesystem [ 220.729162][ T6657] bcachefs (loop3): shutting down [ 220.762269][ T6657] bcachefs (loop3): shutdown complete [ 220.780741][T19926] XFS (loop1): Ending clean mount [ 220.781821][T19926] XFS (loop1): Quotacheck needed: Please wait. [ 220.804384][T19971] loop4: detected capacity change from 0 to 1764 [ 220.820674][T19926] XFS (loop1): Quotacheck: Done. [ 220.864138][ T6647] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.950913][T19989] xt_l2tp: missing protocol rule (udp|l2tpip) [ 220.965301][T19991] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.985612][T19996] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 220.989888][T19994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5673'. [ 220.989918][T19994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5673'. [ 221.357658][T20025] loop1: detected capacity change from 0 to 32768 [ 221.368760][T20052] loop4: detected capacity change from 0 to 1024 [ 221.427440][ T4678] hfsplus: b-tree write err: -5, ino 4 [ 221.454135][T20066] loop4: detected capacity change from 0 to 1024 [ 221.466211][T20066] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 221.467800][T20066] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 221.469170][T20066] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 221.473655][T20066] hfsplus: xattr search failed [ 221.638745][T20072] loop2: detected capacity change from 0 to 32768 [ 221.639049][T20072] XFS: noikeep mount option is deprecated. [ 221.650092][T20072] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 221.654033][T20082] loop4: detected capacity change from 0 to 2048 [ 221.692730][T20082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.699439][T20072] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 221.702835][T20072] XFS (loop2): Starting recovery (logdev: internal) [ 221.732298][T20072] XFS (loop2): Ending recovery (logdev: internal) [ 221.748229][T20072] XFS (loop2): AG 0: Corrupt finobt pointer at level 1 index 0. [ 221.748343][T20072] XFS (loop2): Failed to initialize disk quotas, err -117. [ 221.757060][T20072] XFS (loop2): AG 0: Corrupt finobt pointer at level 1 index 0. [ 221.782732][ T6649] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 221.782963][ T6649] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 221.950808][T20109] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 222.012726][T20076] loop0: detected capacity change from 0 to 131072 [ 222.031874][T20076] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.033819][T20076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.040230][T20076] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 222.057245][T20025] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 222.066861][T20076] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 222.066916][T20076] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 222.067728][T20076] F2FS-fs (loop0): list inode (7) has corrupted xattr [ 222.071022][T20025] allowing incompatible features above 0.0: (unknown version) [ 222.071039][T20025] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 222.071064][T20025] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 222.071086][T20025] bcachefs (loop1): initializing new filesystem [ 222.072401][T20025] bcachefs (loop1): going read-write [ 222.119781][T20025] bcachefs (loop1): marking superblocks [ 222.121502][T20025] bcachefs (loop1): initializing freespace [ 222.136251][T20025] bcachefs (loop1): done initializing freespace [ 222.136928][T20025] bcachefs (loop1): reading snapshots table [ 222.136949][T20025] bcachefs (loop1): reading snapshots done [ 222.164955][T20025] bcachefs (loop1): done starting filesystem [ 222.266997][ T6647] bcachefs (loop1): shutting down [ 222.267022][ T6647] bcachefs (loop1): going read-only [ 222.267050][ T6647] bcachefs (loop1): finished waiting for writes to stop [ 222.279394][T20158] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5743'. [ 222.312976][ T6647] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2 [ 222.340387][ T6727] hid-generic 000F:0003:0007.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 222.350373][ T6647] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 222.353298][ T6647] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 222.353717][ T6647] bcachefs (loop1): marking filesystem clean [ 222.374646][T20170] loop4: detected capacity change from 0 to 512 [ 222.396485][ T6647] bcachefs (loop1): shutdown complete [ 222.416906][T20170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.434995][T20170] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.5747: corrupted xattr block 19: overlapping e_value [ 222.441170][T20170] EXT4-fs (loop4): Remounting filesystem read-only [ 222.469360][ T6659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.507721][T20182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.507746][T20182] IPv6: NLM_F_CREATE should be set when creating new route [ 222.543743][T20157] infiniband syz0: set active [ 222.543783][T20157] infiniband syz0: added bond_slave_0 [ 222.607550][T20157] RDS/IB: syz0: added [ 222.607680][T20157] smc: adding ib device syz0 with port count 1 [ 222.607726][T20157] smc: ib device syz0 port 1 has pnetid [ 222.630440][T20190] fido_id[20190]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 222.670644][T20178] loop2: detected capacity change from 0 to 32768 [ 222.687315][T20178] [ 222.687315][T20178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.687315][T20178] [ 222.707244][ T6649] [ 222.707244][ T6649] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.707244][ T6649] [ 222.710685][ T6649] [ 222.710685][ T6649] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.710685][ T6649] [ 222.763795][ T6139] Bluetooth: hci3: command 0x0406 tx timeout [ 222.961023][T20220] loop0: detected capacity change from 0 to 32768 [ 222.965684][T20229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.990734][T20220] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.016750][T20237] loop2: detected capacity change from 0 to 256 [ 223.017490][T20237] exfat: Deprecated parameter 'namecase' [ 223.017553][T20237] exfat: Deprecated parameter 'utf8' [ 223.034356][T20237] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 223.052409][T20220] [ 223.052796][T20220] ====================================================== [ 223.053881][T20220] WARNING: possible circular locking dependency detected [ 223.054893][T20220] syzkaller #0 Not tainted [ 223.055509][T20220] ------------------------------------------------------ [ 223.056553][T20220] syz.0.5769/20220 is trying to acquire lock: [ 223.057416][T20220] ffff0000f53d6ab8 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 223.058905][T20220] [ 223.058905][T20220] but task is already holding lock: [ 223.059976][T20220] ffff0001056b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 223.061417][T20220] [ 223.061417][T20220] which lock already depends on the new lock. [ 223.061417][T20220] [ 223.062911][T20220] [ 223.062911][T20220] the existing dependency chain (in reverse order) is: [ 223.064225][T20220] [ 223.064225][T20220] -> #2 (jbd2_handle){++++}-{0:0}: [ 223.065399][T20220] jbd2_journal_lock_updates+0xb0/0x2fc [ 223.066239][T20220] __ocfs2_flush_truncate_log+0x280/0xf6c [ 223.067141][T20220] ocfs2_flush_truncate_log+0x4c/0x6c [ 223.068014][T20220] ocfs2_sync_fs+0xf8/0x2a4 [ 223.068773][T20220] sync_filesystem+0x1a0/0x218 [ 223.069568][T20220] generic_shutdown_super+0x70/0x2b8 [ 223.070440][T20220] kill_block_super+0x44/0x90 [ 223.071210][T20220] deactivate_locked_super+0xc4/0x12c [ 223.072152][T20220] deactivate_super+0xe0/0x100 [ 223.073071][T20220] cleanup_mnt+0x31c/0x3ac [ 223.073875][T20220] __cleanup_mnt+0x20/0x30 [ 223.074662][T20220] task_work_run+0x1dc/0x260 [ 223.075434][T20220] exit_to_user_mode_loop+0xfc/0x168 [ 223.076310][T20220] el0_svc+0x170/0x254 [ 223.077047][T20220] el0t_64_sync_handler+0x84/0x12c [ 223.077909][T20220] el0t_64_sync+0x198/0x19c [ 223.078690][T20220] [ 223.078690][T20220] -> #1 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}: [ 223.080348][T20220] down_write+0x50/0xc0 [ 223.081107][T20220] ocfs2_xattr_set+0x8a8/0xe9c [ 223.082028][T20220] ocfs2_set_acl+0x574/0x628 [ 223.082881][T20220] ocfs2_iop_set_acl+0x190/0x25c [ 223.083798][T20220] vfs_set_acl+0x70c/0x974 [ 223.084673][T20220] do_set_acl+0xe0/0x1a8 [ 223.085388][T20220] filename_setxattr+0x268/0x4f8 [ 223.086335][T20220] path_setxattrat+0x2e8/0x320 [ 223.087191][T20220] __arm64_sys_setxattr+0xc0/0xdc [ 223.088112][T20220] invoke_syscall+0x98/0x254 [ 223.088906][T20220] el0_svc_common+0x130/0x23c [ 223.089698][T20220] do_el0_svc+0x48/0x58 [ 223.090457][T20220] el0_svc+0x5c/0x254 [ 223.091265][T20220] el0t_64_sync_handler+0x84/0x12c [ 223.092204][T20220] el0t_64_sync+0x198/0x19c [ 223.093022][T20220] [ 223.093022][T20220] -> #0 (&oi->ip_xattr_sem){+.+.}-{4:4}: [ 223.094306][T20220] __lock_acquire+0x1774/0x30a4 [ 223.095176][T20220] lock_acquire+0x14c/0x2e0 [ 223.096013][T20220] down_write+0x50/0xc0 [ 223.096742][T20220] ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 223.097609][T20220] ocfs2_init_security_set+0xb4/0xd8 [ 223.098486][T20220] ocfs2_symlink+0x16a0/0x1ff8 [ 223.099238][T20220] vfs_symlink+0x138/0x288 [ 223.100024][T20220] do_symlinkat+0x17c/0x360 [ 223.100809][T20220] __arm64_sys_symlinkat+0x9c/0xb4 [ 223.101703][T20220] invoke_syscall+0x98/0x254 [ 223.102592][T20220] el0_svc_common+0x130/0x23c [ 223.103487][T20220] do_el0_svc+0x48/0x58 [ 223.104180][T20220] el0_svc+0x5c/0x254 [ 223.104885][T20220] el0t_64_sync_handler+0x84/0x12c [ 223.105757][T20220] el0t_64_sync+0x198/0x19c [ 223.106533][T20220] [ 223.106533][T20220] other info that might help us debug this: [ 223.106533][T20220] [ 223.108230][T20220] Chain exists of: [ 223.108230][T20220] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> jbd2_handle [ 223.108230][T20220] [ 223.110957][T20220] Possible unsafe locking scenario: [ 223.110957][T20220] [ 223.112057][T20220] CPU0 CPU1 [ 223.112850][T20220] ---- ---- [ 223.113669][T20220] rlock(jbd2_handle); [ 223.114329][T20220] lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]); [ 223.115779][T20220] lock(jbd2_handle); [ 223.116760][T20220] lock(&oi->ip_xattr_sem); [ 223.117426][T20220] [ 223.117426][T20220] *** DEADLOCK *** [ 223.117426][T20220] [ 223.118643][T20220] 8 locks held by syz.0.5769/20220: [ 223.119468][T20220] #0: ffff000104706428 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 223.120985][T20220] #1: ffff00012b40c2c0 (&type->i_mutex_dir_key#13/1){+.+.}-{4:4}, at: filename_create+0x1ac/0x32c [ 223.122795][T20220] #2: ffff0000f30609c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 223.125029][T20220] #3: ffff00012b40d100 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 223.127300][T20220] #4: ffff0000f3062640 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x104/0x26a0 [ 223.129525][T20220] #5: ffff000104706618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_symlink+0xa68/0x1ff8 [ 223.131080][T20220] #6: ffff0000dd380ce8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0 [ 223.132788][T20220] #7: ffff0001056b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 223.134359][T20220] [ 223.134359][T20220] stack backtrace: [ 223.135352][T20220] CPU: 0 UID: 0 PID: 20220 Comm: syz.0.5769 Not tainted syzkaller #0 PREEMPT [ 223.136828][T20220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 223.138430][T20220] Call trace: [ 223.138964][T20220] show_stack+0x2c/0x3c (C) [ 223.139733][T20220] __dump_stack+0x30/0x40 [ 223.140442][T20220] dump_stack_lvl+0xd8/0x12c [ 223.141157][T20220] dump_stack+0x1c/0x28 [ 223.141827][T20220] print_circular_bug+0x324/0x32c [ 223.142635][T20220] check_noncircular+0x154/0x174 [ 223.143431][T20220] __lock_acquire+0x1774/0x30a4 [ 223.144236][T20220] lock_acquire+0x14c/0x2e0 [ 223.144975][T20220] down_write+0x50/0xc0 [ 223.145673][T20220] ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 223.146521][T20220] ocfs2_init_security_set+0xb4/0xd8 [ 223.147373][T20220] ocfs2_symlink+0x16a0/0x1ff8 [ 223.148174][T20220] vfs_symlink+0x138/0x288 [ 223.148913][T20220] do_symlinkat+0x17c/0x360 [ 223.149636][T20220] __arm64_sys_symlinkat+0x9c/0xb4 [ 223.150466][T20220] invoke_syscall+0x98/0x254 [ 223.151194][T20220] el0_svc_common+0x130/0x23c [ 223.151949][T20220] do_el0_svc+0x48/0x58 [ 223.152618][T20220] el0_svc+0x5c/0x254 [ 223.153271][T20220] el0t_64_sync_handler+0x84/0x12c [ 223.154078][T20220] el0t_64_sync+0x198/0x19c [ 223.158211][T20237] fuse: Bad value for 'fd' [ 223.188757][ T6646] ocfs2: Unmounting device (7,0) on (node local) [ 223.524954][T20239] loop4: detected capacity change from 0 to 262144 [ 223.526256][T20239] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5777 (20239) [ 223.530535][T20239] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 223.530599][T20239] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 223.567839][T20239] BTRFS info (device loop4): enabling ssd optimizations [ 223.567859][T20239] BTRFS info (device loop4): enabling free space tree [ 223.578131][ T6659] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53