last executing test programs: 2.53130232s ago: executing program 4 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 2.460124388s ago: executing program 4 (id=638): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) preadv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) 2.366775732s ago: executing program 4 (id=640): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodatacow}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x2d, 0x32, 0x36, 0x32, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 1.789510017s ago: executing program 0 (id=644): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x27}}}}}}}, 0x0) 1.647294848s ago: executing program 0 (id=646): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000004400), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xfd4c, 0xfffffffd, 0x4, {0x9, @pix={0x9, 0xee57, 0x34424752, 0x0, 0x34565348, 0x3, 0xa, 0x1, 0x1, 0x7, 0x0, 0x1}}, 0x9}) 1.571286829s ago: executing program 3 (id=647): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@nombcache}, {@usrquota}, {@lazytime}, {@usrquota}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.493052439s ago: executing program 0 (id=650): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000680)) 1.459471339s ago: executing program 2 (id=651): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) unlinkat(r0, &(0x7f00000000c0)='./mnt\x00', 0x0) 1.375811693s ago: executing program 4 (id=652): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x97ef, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/82, 0x52) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.37535176s ago: executing program 2 (id=653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 1.34503473s ago: executing program 0 (id=654): syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x4008, &(0x7f0000000080)={[{@inode32}, {@nolazytime}]}, 0x1, 0x9825, &(0x7f000001c900)="$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") r0 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 1.343860815s ago: executing program 3 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x0) 1.298697445s ago: executing program 2 (id=656): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchownat(r1, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0) 1.191511176s ago: executing program 2 (id=657): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.120097232s ago: executing program 3 (id=658): r0 = socket(0x2, 0x3, 0x5) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0xc, @local}, 0x10) recvfrom$unix(r0, 0x0, 0x13, 0x42, 0x0, 0x0) 1.076741874s ago: executing program 2 (id=660): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x4008744b, 0xf0ff1f00000000) 995.303668ms ago: executing program 3 (id=661): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) write$P9_RSYMLINK(r1, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x2, 0x0, 0x6}}, 0xffffff30) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101042, 0x0) splice(r0, 0x0, r2, 0x0, 0xfdef, 0x0) 922.304362ms ago: executing program 2 (id=662): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) 874.544856ms ago: executing program 0 (id=664): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000029c0)='./file1\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x8b, 0x2a7, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x0) 497.548372ms ago: executing program 4 (id=667): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 451.670219ms ago: executing program 1 (id=668): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x4, 0x5, 0x0, 0xff, "3eccd8f9cb00000500"}) 327.292133ms ago: executing program 1 (id=669): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6fe, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 312.959233ms ago: executing program 1 (id=670): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x2, 0x1c, 0x200, 0x0}) 261.863423ms ago: executing program 1 (id=671): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x14, 0x43, 0x0, 0x0) 203.217111ms ago: executing program 0 (id=672): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f0000000440)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x8012, r0, 0x0) close(r0) 147.499423ms ago: executing program 4 (id=673): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0x2710}}, 0x100) 137.113027ms ago: executing program 3 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)={0x28, r1, 0x1, 0x70bd22, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x28}}, 0x9590f6cc3ea35512) 122.655345ms ago: executing program 1 (id=675): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2004000, &(0x7f0000000d40)=ANY=[], 0xfe, 0x2b2, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/219, 0xdb) getdents64(r0, 0x0, 0x0) 71.427291ms ago: executing program 3 (id=676): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000000), 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) fdatasync(r0) 0s ago: executing program 1 (id=677): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1, 0x0, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x85, 0x2, 0x0, 0x0, "c23f68dc24ba1e5d"}}, 0x48}}, 0x40) 0s ago: executing program 1 (id=678): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r1, 0x0, 0x0, 0x2004873d, 0x0, 0x0) kernel console output (not intermixed with test programs): 81] submit_bio+0x374/0x564 [ 43.130691][ T1981] f2fs_submit_write_bio+0x13c/0x36c [ 43.130712][ T1981] __submit_merged_bio+0x258/0x79c [ 43.130724][ T1981] __submit_merged_write_cond+0x248/0x4e8 [ 43.130736][ T1981] f2fs_write_data_pages+0x20fc/0x2acc [ 43.130748][ T1981] do_writepages+0x2f8/0x7c4 [ 43.130763][ T1981] __writeback_single_inode+0x15c/0x15a4 [ 43.130778][ T1981] writeback_sb_inodes+0x650/0x1088 [ 43.130791][ T1981] wb_writeback+0x3e0/0xe9c [ 43.130804][ T1981] wb_workfn+0x38c/0x1048 [ 43.130817][ T1981] process_one_work+0x810/0x1638 [ 43.130829][ T1981] worker_thread+0x97c/0xf08 [ 43.130847][ T1981] kthread+0x674/0x7dc [ 43.130861][ T1981] ret_from_fork+0x10/0x20 [ 43.137978][ T1981] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 43.574010][ T6524] IPVS: starting estimator thread 0... [ 43.659842][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 43.664469][ T6775] IPVS: using max 39 ests per chain, 93600 per kthread [ 43.706897][ T6739] loop2: detected capacity change from 0 to 65536 [ 43.748738][ T6739] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 43.821956][ T6739] XFS (loop2): Ending clean mount [ 43.826112][ T6739] XFS (loop2): Quotacheck needed: Please wait. [ 43.830019][ T6773] loop4: detected capacity change from 0 to 32768 [ 43.881876][ T6773] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 43.904345][ T6739] XFS (loop2): Quotacheck: Done. [ 43.946789][ T6773] XFS (loop4): Ending clean mount [ 43.968184][ T6760] loop3: detected capacity change from 0 to 40427 [ 43.971103][ T6760] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 43.971179][ T6760] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 43.971424][ T6760] F2FS-fs (loop3): heap/no_heap options were deprecated [ 43.971454][ T6760] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3fffff [ 43.973140][ T6760] F2FS-fs (loop3): invalid crc value [ 43.986412][ T6473] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 43.998880][ T6760] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 43.998956][ T6760] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.061125][ T6472] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 44.075124][ T6809] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.158231][ T6760] syz.3.78: attempt to access beyond end of device [ 44.158231][ T6760] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 44.158600][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.3.78 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 44.158617][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.158625][ T6760] Call trace: [ 44.158629][ T6760] show_stack+0x2c/0x3c (C) [ 44.158649][ T6760] dump_stack_lvl+0xe4/0x150 [ 44.158663][ T6760] dump_stack+0x1c/0x1028 [ 44.158676][ T6760] f2fs_handle_critical_error+0x380/0x534 [ 44.158689][ T6760] f2fs_stop_checkpoint+0x58/0x6c [ 44.158704][ T6760] f2fs_write_end_io+0x99c/0xdb0 [ 44.158718][ T6760] bio_endio+0x840/0x87c [ 44.158729][ T6760] submit_bio_noacct+0x158/0x17cc [ 44.158742][ T6760] submit_bio+0x374/0x564 [ 44.158755][ T6760] f2fs_submit_write_bio+0x13c/0x36c [ 44.158767][ T6760] __submit_merged_bio+0x258/0x79c [ 44.158779][ T6760] f2fs_submit_page_write+0xaf8/0x1b20 [ 44.158791][ T6760] do_write_page+0x4fc/0x71c [ 44.158803][ T6760] f2fs_outplace_write_data+0x180/0x344 [ 44.158814][ T6760] f2fs_do_write_data_page+0xd94/0x121c [ 44.158827][ T6760] f2fs_write_single_data_page+0x974/0x1614 [ 44.158840][ T6760] f2fs_write_data_pages+0x163c/0x2acc [ 44.158853][ T6760] do_writepages+0x2f8/0x7c4 [ 44.158870][ T6760] filemap_write_and_wait_range+0x200/0x314 [ 44.158882][ T6760] f2fs_collapse_range+0x284/0x304 [ 44.158897][ T6760] f2fs_fallocate+0x3fc/0x954 [ 44.158910][ T6760] vfs_fallocate+0x578/0x6c0 [ 44.158924][ T6760] __arm64_sys_fallocate+0xc0/0x110 [ 44.158937][ T6760] invoke_syscall+0x98/0x2b8 [ 44.158950][ T6760] el0_svc_common+0x130/0x23c [ 44.158963][ T6760] do_el0_svc+0x48/0x58 [ 44.158974][ T6760] el0_svc+0x54/0x168 [ 44.158989][ T6760] el0t_64_sync_handler+0x84/0x108 [ 44.159003][ T6760] el0t_64_sync+0x198/0x19c [ 44.159017][ T6760] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 44.159363][ T6760] syz.3.78: attempt to access beyond end of device [ 44.159363][ T6760] loop3: rw=2049, sector=53280, nr_sectors = 8 limit=40427 [ 44.159428][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.3.78 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 44.159441][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.159448][ T6760] Call trace: [ 44.159452][ T6760] show_stack+0x2c/0x3c (C) [ 44.159473][ T6760] dump_stack_lvl+0xe4/0x150 [ 44.159486][ T6760] dump_stack+0x1c/0x1028 [ 44.159498][ T6760] f2fs_handle_critical_error+0x380/0x534 [ 44.159511][ T6760] f2fs_stop_checkpoint+0x58/0x6c [ 44.159525][ T6760] f2fs_write_end_io+0x99c/0xdb0 [ 44.159538][ T6760] bio_endio+0x840/0x87c [ 44.159548][ T6760] submit_bio_noacct+0x158/0x17cc [ 44.159561][ T6760] submit_bio+0x374/0x564 [ 44.159574][ T6760] f2fs_submit_write_bio+0x13c/0x36c [ 44.159585][ T6760] __submit_merged_bio+0x258/0x79c [ 44.159597][ T6760] __submit_merged_write_cond+0x428/0x4e8 [ 44.159609][ T6760] f2fs_write_single_data_page+0xed4/0x1614 [ 44.159622][ T6760] f2fs_write_data_pages+0x163c/0x2acc [ 44.159635][ T6760] do_writepages+0x2f8/0x7c4 [ 44.159649][ T6760] filemap_write_and_wait_range+0x200/0x314 [ 44.159661][ T6760] f2fs_collapse_range+0x284/0x304 [ 44.159676][ T6760] f2fs_fallocate+0x3fc/0x954 [ 44.159689][ T6760] vfs_fallocate+0x578/0x6c0 [ 44.159702][ T6760] __arm64_sys_fallocate+0xc0/0x110 [ 44.159715][ T6760] invoke_syscall+0x98/0x2b8 [ 44.159727][ T6760] el0_svc_common+0x130/0x23c [ 44.159739][ T6760] do_el0_svc+0x48/0x58 [ 44.159751][ T6760] el0_svc+0x54/0x168 [ 44.159764][ T6760] el0t_64_sync_handler+0x84/0x108 [ 44.159777][ T6760] el0t_64_sync+0x198/0x19c [ 44.159790][ T6760] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 44.293880][ T6814] loop4: detected capacity change from 0 to 2048 [ 44.339779][ T6818] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.371033][ T6817] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 44.400948][ T6488] Bluetooth: hci0: command tx timeout [ 44.411593][ T6814] NILFS (loop4): error -2 truncating bmap (ino=16) [ 44.475610][ T6488] Bluetooth: hci2: command tx timeout [ 44.475687][ T6488] Bluetooth: hci3: command tx timeout [ 44.475739][ T6488] Bluetooth: hci1: command tx timeout [ 44.475775][ T6488] Bluetooth: hci4: command tx timeout [ 44.530160][ T6826] loop0: detected capacity change from 0 to 2048 [ 44.536919][ T6524] hid-generic 0005:07C0:05DF.0001: item fetching failed at offset 0/1 [ 44.537237][ T6524] hid-generic 0005:07C0:05DF.0001: probe with driver hid-generic failed with error -22 [ 44.552358][ T6826] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 44.575987][ T6833] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.756707][ T6830] loop3: detected capacity change from 0 to 32768 [ 44.937667][ T6862] loop1: detected capacity change from 0 to 4096 [ 44.983713][ T6830] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 44.991850][ T6830] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 45.002239][ T6830] bcachefs (loop3): Version upgrade required: [ 45.002239][ T6830] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 45.002239][ T6830] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 45.002239][ T6830] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 45.002715][ T6830] bcachefs (loop3): dropping and reconstructing all alloc info [ 45.027264][ T6864] tipc: Started in network mode [ 45.034982][ T6864] tipc: Node identity ac14140f, cluster identity 4711 [ 45.035157][ T6864] tipc: New replicast peer: 255.255.255.255 [ 45.035390][ T6864] tipc: Enabled bearer , priority 10 [ 45.042882][ T6830] bcachefs (loop3): accounting_read... done [ 45.065337][ T6830] bcachefs (loop3): alloc_read... done [ 45.065452][ T6830] bcachefs (loop3): snapshots_read... done [ 45.066907][ T6830] bcachefs (loop3): done starting filesystem [ 45.099967][ T6866] loop2: detected capacity change from 0 to 256 [ 45.102209][ T6866] exfat: Deprecated parameter 'utf8' [ 45.117880][ T6866] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 45.173026][ T6477] bcachefs (loop3): shutting down [ 45.235593][ T6874] netlink: 'syz.4.117': attribute type 9 has an invalid length. [ 45.256362][ T6477] bcachefs (loop3): shutdown complete [ 45.334076][ T6882] loop2: detected capacity change from 0 to 256 [ 45.346770][ T6882] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.346830][ T6882] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 45.365352][ T6882] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 45.649631][ T6900] loop2: detected capacity change from 0 to 1024 [ 45.685098][ T6889] loop1: detected capacity change from 0 to 32768 [ 45.693022][ T1981] hfsplus: b-tree write err: -5, ino 4 [ 45.741597][ T6889] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 45.772943][ T6889] XFS (loop1): Ending clean mount [ 45.782027][ T6889] XFS (loop1): Quotacheck needed: Please wait. [ 45.806556][ T6889] XFS (loop1): Quotacheck: Done. [ 45.826310][ T6474] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 46.045215][ T6524] tipc: Node number set to 2886997007 [ 46.056605][ T6912] loop2: detected capacity change from 0 to 32768 [ 46.095465][ T6914] loop1: detected capacity change from 0 to 32768 [ 46.098884][ T6912] ERROR: (device loop2): dbAllocAG: Corrupt dmapctl page [ 46.098884][ T6912] [ 46.104404][ T6912] ERROR: (device loop2): remounting filesystem as read-only [ 46.109324][ T6912] overlay: filesystem on ./file0 is read-only [ 46.307401][ T6914] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,str_hash=crc64,journal_flush_disabled,fsck,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 46.314758][ T6914] bcachefs (loop1): recovering from clean shutdown, journal seq 1688849860263946 [ 46.317603][ T6914] bcachefs (loop1): Version upgrade required: [ 46.317603][ T6914] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 46.317603][ T6914] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 46.317603][ T6914] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 46.355633][ T6914] bcachefs (loop1): dropping and reconstructing all alloc info [ 46.364815][ T6914] bcachefs (loop1): bcachefs (loop1): error validating btree node at btree extents level 0/0 [ 46.366401][ T6923] can0: slcan on ptm0. [ 46.369362][ T6914] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 46.373638][ T6914] node offset 0/16 bset u64s 0: bset version 11 older than superblock version_min 24, exiting [ 46.373686][ T6914] Unable to continue, halting [ 46.374064][ T6914] bcachefs (loop1): flagging btree extents lost data [ 46.374136][ T6914] bcachefs (loop1): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 46.374692][ T6914] bcachefs (loop1): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 46.409796][ T6914] bcachefs (loop1): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 46.478942][ T6914] bcachefs (loop1): scan_for_btree_nodes... [ 46.496465][ T6922] can0 (unregistered): slcan off ptm0. [ 46.505938][ T6932] loop2: detected capacity change from 0 to 16 [ 46.512276][ T6932] erofs (device loop2): mounted with root inode @ nid 36. [ 46.573117][ T6935] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 46.611957][ T6914] bcachefs (loop1): btree node scan found 7 nodes after overwrites [ 46.612057][ T6914] done [ 46.612100][ T6914] bcachefs (loop1): check_topology... [ 46.614472][ T6914] bcachefs (loop1): btree root extents unreadable, must recover from scan [ 46.614657][ T6914] bcachefs (loop1): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 46.615048][ T6914] bcachefs (loop1): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 46.621737][ T6914] done [ 46.621770][ T6914] bcachefs (loop1): accounting_read... done [ 46.679832][ T6914] bcachefs (loop1): alloc_read... done [ 46.679888][ T6914] bcachefs (loop1): snapshots_read... done [ 46.679971][ T6914] bcachefs (loop1): check_allocations... done [ 46.785562][ T6914] bcachefs (loop1): going read-write [ 46.806686][ T6914] bcachefs (loop1): journal_replay... [ 46.857129][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 47.079836][ T6914] done [ 47.087267][ T6914] bcachefs (loop1): check_alloc_info... [ 47.099936][ T6940] loop2: detected capacity change from 0 to 32768 [ 47.114128][ T6914] done [ 47.126060][ T6940] xfs: Unknown parameter 'pcr' [ 47.140750][ T6914] bcachefs (loop1): check_lrus... done [ 47.142101][ T6976] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 47.148038][ T6914] bcachefs (loop1): check_btree_backpointers... done [ 47.148320][ T6914] bcachefs (loop1): check_backpointers_to_extents... done [ 47.148808][ T6914] bcachefs (loop1): check_extents_to_backpointers... [ 47.149716][ T6914] bcachefs (loop1): scanning for missing backpointers in 9/128 buckets [ 47.150824][ T6914] done [ 47.158370][ T6914] bcachefs (loop1): check_alloc_to_lru_refs... done [ 47.162881][ T6914] bcachefs (loop1): bucket_gens_init... done [ 47.218515][ T6914] bcachefs (loop1): check_snapshot_trees... done [ 47.218691][ T6914] bcachefs (loop1): check_snapshots... [ 47.219315][ T6914] bcachefs (loop1): snapshot points to missing/incorrect tree: [ 47.219345][ T6914] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 47.224858][ T6914] done [ 47.232047][ T6914] bcachefs (loop1): check_subvols... done [ 47.272400][ T6914] bcachefs (loop1): check_subvol_children... done [ 47.272716][ T6914] bcachefs (loop1): delete_dead_snapshots... done [ 47.272745][ T6914] bcachefs (loop1): check_inodes... done [ 47.273401][ T6914] bcachefs (loop1): check_extents... done [ 47.273756][ T6914] bcachefs (loop1): check_indirect_extents... done [ 47.273801][ T6914] bcachefs (loop1): check_dirents... done [ 47.293226][ T6914] bcachefs (loop1): check_xattrs... done [ 47.293609][ T6914] bcachefs (loop1): check_root... done [ 47.293782][ T6914] bcachefs (loop1): check_unreachable_inodes... done [ 47.293937][ T6914] bcachefs (loop1): check_subvolume_structure... done [ 47.293984][ T6914] bcachefs (loop1): check_directory_structure... done [ 47.295180][ T6914] bcachefs (loop1): check_nlinks... [ 47.295563][ T6914] bcachefs (loop1): inode 536870914 type reg has wrong i_nlink (2780562353, should be 1), fixing [ 47.295689][ T6914] done [ 47.296930][ T6914] bcachefs (loop1): resume_logged_ops... done [ 47.296996][ T6914] bcachefs (loop1): delete_dead_inodes... done [ 47.312219][ T6914] bcachefs (loop1): set_fs_needs_rebalance... done [ 47.361639][ T6914] bcachefs (loop1): scanning for old btree nodes: min_version 0.11: inode_btree_change [ 47.412362][ T6986] warning: `syz.3.149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 47.424040][ T6951] loop0: detected capacity change from 0 to 32768 [ 47.483401][ T6951] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 47.506610][ T6914] bcachefs (loop1): scanning for old btree nodes done [ 47.523416][ T6966] loop4: detected capacity change from 0 to 40427 [ 47.527294][ T6914] bcachefs (loop1): done starting filesystem [ 47.529190][ T6966] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3fffff [ 47.529251][ T6966] F2FS-fs (loop4): Image doesn't support compression [ 47.529304][ T6966] F2FS-fs (loop4): heap/no_heap options were deprecated [ 47.529332][ T6966] F2FS-fs (loop4): Image doesn't support compression [ 47.531345][ T6966] F2FS-fs (loop4): invalid crc value [ 47.591930][ T6474] bcachefs (loop1): shutting down [ 47.593899][ T6474] bcachefs (loop1): going read-only [ 47.598768][ T6474] bcachefs (loop1): finished waiting for writes to stop [ 47.598997][ T6966] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.630486][ T6966] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_setxattr+0x124/0x334 [ 47.640982][ T7003] loop2: detected capacity change from 0 to 512 [ 47.643882][ T6474] bcachefs (loop1): flushing journal and stopping allocators, journal seq 1688849860263964 [ 47.644906][ T7003] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.653197][ T6472] syz-executor: attempt to access beyond end of device [ 47.653197][ T6472] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 47.659005][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 47.659040][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.659049][ T6472] Call trace: [ 47.659053][ T6472] show_stack+0x2c/0x3c (C) [ 47.659074][ T6472] dump_stack_lvl+0xe4/0x150 [ 47.659087][ T6472] dump_stack+0x1c/0x1028 [ 47.659099][ T6472] f2fs_handle_critical_error+0x380/0x534 [ 47.659113][ T6472] f2fs_stop_checkpoint+0x58/0x6c [ 47.659127][ T6472] f2fs_write_end_io+0x99c/0xdb0 [ 47.659139][ T6472] bio_endio+0x840/0x87c [ 47.659151][ T6472] submit_bio_noacct+0x158/0x17cc [ 47.659163][ T6472] submit_bio+0x374/0x564 [ 47.659190][ T6472] f2fs_submit_write_bio+0x13c/0x36c [ 47.659202][ T6472] __submit_merged_bio+0x258/0x79c [ 47.659214][ T6472] __submit_merged_write_cond+0x248/0x4e8 [ 47.659225][ T6472] f2fs_write_data_pages+0x20fc/0x2acc [ 47.659249][ T6472] do_writepages+0x2f8/0x7c4 [ 47.659264][ T6472] filemap_fdatawrite+0x180/0x23c [ 47.659275][ T6472] f2fs_sync_dirty_inodes+0x2c0/0x7d4 [ 47.659289][ T6472] f2fs_write_checkpoint+0x6c0/0x174c [ 47.659303][ T6472] kill_f2fs_super+0x220/0x590 [ 47.659315][ T6472] deactivate_locked_super+0xc4/0x12c [ 47.659335][ T6472] deactivate_super+0xe0/0x100 [ 47.659346][ T6472] cleanup_mnt+0x34c/0x3dc [ 47.659358][ T6472] __cleanup_mnt+0x20/0x30 [ 47.659369][ T6472] task_work_run+0x230/0x2e0 [ 47.659382][ T6472] do_notify_resume+0x178/0x1f4 [ 47.659393][ T6472] el0_svc+0xac/0x168 [ 47.659407][ T6472] el0t_64_sync_handler+0x84/0x108 [ 47.659419][ T6472] el0t_64_sync+0x198/0x19c [ 47.676265][ T6478] ocfs2: Unmounting device (7,0) on (node local) [ 47.708338][ T6472] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 47.708774][ T7003] EXT4-fs (loop2): 1 truncate cleaned up [ 47.709681][ T7003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.729895][ T6472] CPU: 0 UID: 0 PID: 6472 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 47.729923][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.729931][ T6472] Call trace: [ 47.729935][ T6472] show_stack+0x2c/0x3c (C) [ 47.729956][ T6472] dump_stack_lvl+0xe4/0x150 [ 47.729970][ T6472] dump_stack+0x1c/0x1028 [ 47.729982][ T6472] f2fs_handle_critical_error+0x380/0x534 [ 47.729995][ T6472] f2fs_stop_checkpoint+0x58/0x6c [ 47.730009][ T6472] f2fs_write_end_io+0x99c/0xdb0 [ 47.730021][ T6472] bio_endio+0x840/0x87c [ 47.730032][ T6472] submit_bio_noacct+0x158/0x17cc [ 47.730045][ T6472] submit_bio+0x374/0x564 [ 47.730056][ T6472] f2fs_submit_write_bio+0x13c/0x36c [ 47.730068][ T6472] __submit_merged_bio+0x258/0x79c [ 47.730079][ T6472] __submit_merged_write_cond+0x248/0x4e8 [ 47.730091][ T6472] f2fs_write_data_pages+0x20fc/0x2acc [ 47.730103][ T6472] do_writepages+0x2f8/0x7c4 [ 47.730118][ T6472] filemap_fdatawrite+0x180/0x23c [ 47.730129][ T6472] f2fs_sync_dirty_inodes+0x2c0/0x7d4 [ 47.730143][ T6472] f2fs_write_checkpoint+0x6c0/0x174c [ 47.730156][ T6472] kill_f2fs_super+0x220/0x590 [ 47.730184][ T6472] deactivate_locked_super+0xc4/0x12c [ 47.730197][ T6472] deactivate_super+0xe0/0x100 [ 47.730208][ T6472] cleanup_mnt+0x34c/0x3dc [ 47.730220][ T6472] __cleanup_mnt+0x20/0x30 [ 47.730231][ T6472] task_work_run+0x230/0x2e0 [ 47.730244][ T6472] do_notify_resume+0x178/0x1f4 [ 47.730255][ T6472] el0_svc+0xac/0x168 [ 47.730269][ T6472] el0t_64_sync_handler+0x84/0x108 [ 47.730281][ T6472] el0t_64_sync+0x198/0x19c [ 47.730492][ T6472] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 47.739342][ T6474] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 1688849860263964 [ 47.748315][ T6474] bcachefs (loop1): clean shutdown complete, journal seq 1688849860263965 [ 47.800044][ T6474] bcachefs (loop1): done going read-only, filesystem not clean [ 47.908032][ T6474] bcachefs (loop1): shutdown complete [ 47.941147][ T7007] loop3: detected capacity change from 0 to 32768 [ 48.108589][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 48.332299][ T7011] loop0: detected capacity change from 0 to 40427 [ 48.356834][ T6473] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.360285][ T7011] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 48.360368][ T7011] F2FS-fs (loop0): Image doesn't support compression [ 48.360406][ T7011] F2FS-fs (loop0): Image doesn't support compression [ 48.360444][ T7011] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 48.406245][ T7011] F2FS-fs (loop0): invalid crc value [ 48.463499][ T7018] loop3: detected capacity change from 0 to 32768 [ 48.471027][ T7011] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.472285][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 48.527509][ T7029] loop2: detected capacity change from 0 to 2048 [ 48.540753][ T7029] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 48.563162][ T7037] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.746981][ T7045] @: renamed from vlan0 (while UP) [ 48.838537][ T7051] xt_hashlimit: size too large, truncated to 1048576 [ 48.891658][ T7053] xt_connbytes: Forcing CT accounting to be enabled [ 48.969952][ T7018] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,nojournal_transaction_names [ 48.970051][ T7018] bcachefs (loop3): initializing new filesystem [ 48.970644][ T7018] bcachefs (loop3): going read-write [ 49.030946][ T7018] bcachefs (loop3): marking superblocks [ 49.040522][ T7049] loop4: detected capacity change from 0 to 32768 [ 49.062702][ T7018] bcachefs (loop3): initializing freespace [ 49.066939][ T7018] bcachefs (loop3): done initializing freespace [ 49.072991][ T7018] bcachefs (loop3): reading snapshots table [ 49.073267][ T7018] bcachefs (loop3): reading snapshots done [ 49.079495][ T7049] [ 49.079495][ T7049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.079495][ T7049] [ 49.103180][ T7018] bcachefs (loop3): done starting filesystem [ 49.128386][ T7049] [ 49.128386][ T7049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.128386][ T7049] [ 49.128543][ T7049] [ 49.128543][ T7049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.128543][ T7049] [ 49.128565][ T7049] [ 49.128565][ T7049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.128565][ T7049] [ 49.133615][ T103] [ 49.133615][ T103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.133615][ T103] [ 49.139952][ T7049] find_entry called with index = 0 [ 49.140411][ T7049] read_mapping_page failed! [ 49.140450][ T7049] ERROR: (device loop4): txAbort: [ 49.140450][ T7049] [ 49.208738][ T7065] loop1: detected capacity change from 0 to 2048 [ 49.292336][ T6472] [ 49.292336][ T6472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.292336][ T6472] [ 49.301545][ T6472] [ 49.301545][ T6472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 49.301545][ T6472] [ 49.309421][ T6477] bcachefs (loop3): shutting down [ 49.310968][ T6477] bcachefs (loop3): going read-only [ 49.312448][ T6477] bcachefs (loop3): finished waiting for writes to stop [ 49.378815][ T6477] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 49.460375][ T6477] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 49.461419][ T6477] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 49.489517][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.491640][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.499011][ T6477] bcachefs (loop3): marking filesystem clean [ 49.577922][ T6477] bcachefs (loop3): shutdown complete [ 49.618586][ T7070] loop0: detected capacity change from 0 to 32768 [ 49.770281][ T7091] loop4: detected capacity change from 0 to 1024 [ 49.770751][ T7091] EXT4-fs: quotafile must be on filesystem root [ 50.312359][ T7070] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fix_errors=no,norecovery,reconstruct_alloc,no_data_io [ 50.312525][ T7070] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 50.312635][ T7070] bcachefs (loop0): Version upgrade required: [ 50.312635][ T7070] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 50.312635][ T7070] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 50.312635][ T7070] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 50.312818][ T7070] bcachefs (loop0): dropping and reconstructing all alloc info [ 50.358757][ T7070] bcachefs (loop0): accounting_read... done [ 50.417753][ T7070] bcachefs (loop0): alloc_read... done [ 50.417832][ T7070] bcachefs (loop0): snapshots_read... done [ 50.418070][ T7070] bcachefs (loop0): done starting filesystem [ 50.469640][ T6478] bcachefs (loop0): shutting down [ 50.497716][ T7124] loop3: detected capacity change from 0 to 47 [ 50.517900][ T6478] bcachefs (loop0): shutdown complete [ 50.566028][ T7124] syz.3.179: attempt to access beyond end of device [ 50.566028][ T7124] loop3: rw=2049, sector=54, nr_sectors = 2 limit=47 [ 50.669663][ T7127] loop1: detected capacity change from 0 to 4096 [ 50.672313][ T7127] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 50.694647][ T7127] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 50.776018][ T7146] loop4: detected capacity change from 0 to 256 [ 50.982086][ T7155] loop2: detected capacity change from 0 to 4096 [ 51.020922][ T7155] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 51.144982][ T7149] loop3: detected capacity change from 0 to 40427 [ 51.154194][ T7149] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 51.155034][ T7149] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 51.162356][ T7149] F2FS-fs (loop3): invalid crc value [ 51.220285][ T7149] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 51.220383][ T7149] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.302076][ T6477] syz-executor: attempt to access beyond end of device [ 51.302076][ T6477] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 51.302188][ T6477] CPU: 0 UID: 0 PID: 6477 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 51.302204][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.302212][ T6477] Call trace: [ 51.302216][ T6477] show_stack+0x2c/0x3c (C) [ 51.302245][ T6477] dump_stack_lvl+0xe4/0x150 [ 51.302258][ T6477] dump_stack+0x1c/0x1028 [ 51.302270][ T6477] f2fs_handle_critical_error+0x380/0x534 [ 51.302283][ T6477] f2fs_stop_checkpoint+0x58/0x6c [ 51.302297][ T6477] f2fs_write_end_io+0x99c/0xdb0 [ 51.302309][ T6477] bio_endio+0x840/0x87c [ 51.302320][ T6477] submit_bio_noacct+0x158/0x17cc [ 51.302334][ T6477] submit_bio+0x374/0x564 [ 51.302345][ T6477] f2fs_submit_write_bio+0x13c/0x36c [ 51.302357][ T6477] __submit_merged_bio+0x258/0x79c [ 51.302368][ T6477] __submit_merged_write_cond+0x248/0x4e8 [ 51.302380][ T6477] f2fs_write_data_pages+0x20fc/0x2acc [ 51.302392][ T6477] do_writepages+0x2f8/0x7c4 [ 51.302406][ T6477] filemap_fdatawrite+0x180/0x23c [ 51.302417][ T6477] f2fs_sync_dirty_inodes+0x2c0/0x7d4 [ 51.302431][ T6477] f2fs_write_checkpoint+0x6c0/0x174c [ 51.302445][ T6477] kill_f2fs_super+0x220/0x590 [ 51.302457][ T6477] deactivate_locked_super+0xc4/0x12c [ 51.302469][ T6477] deactivate_super+0xe0/0x100 [ 51.302479][ T6477] cleanup_mnt+0x34c/0x3dc [ 51.302491][ T6477] __cleanup_mnt+0x20/0x30 [ 51.302502][ T6477] task_work_run+0x230/0x2e0 [ 51.302515][ T6477] do_notify_resume+0x178/0x1f4 [ 51.302526][ T6477] el0_svc+0xac/0x168 [ 51.302540][ T6477] el0t_64_sync_handler+0x84/0x108 [ 51.302552][ T6477] el0t_64_sync+0x198/0x19c [ 51.306670][ T6477] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 51.666615][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.669812][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.552227][ T7180] loop4: detected capacity change from 0 to 262144 [ 52.602208][ T7180] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.214 (7180) [ 52.615361][ T7180] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 52.615524][ T7180] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 52.615557][ T7180] BTRFS info (device loop4): using free-space-tree [ 52.708746][ T7191] loop2: detected capacity change from 0 to 40427 [ 52.713218][ T7193] block device autoloading is deprecated and will be removed. [ 52.713803][ T7191] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 52.713829][ T7191] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 52.738350][ T7191] F2FS-fs (loop2): invalid crc value [ 52.742013][ T6472] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 52.796386][ T7191] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 52.796456][ T7191] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 52.894145][ T6473] syz-executor: attempt to access beyond end of device [ 52.894145][ T6473] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.895014][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 52.895034][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.895042][ T6473] Call trace: [ 52.895046][ T6473] show_stack+0x2c/0x3c (C) [ 52.895065][ T6473] dump_stack_lvl+0xe4/0x150 [ 52.895078][ T6473] dump_stack+0x1c/0x1028 [ 52.895090][ T6473] f2fs_handle_critical_error+0x380/0x534 [ 52.895103][ T6473] f2fs_stop_checkpoint+0x58/0x6c [ 52.895117][ T6473] f2fs_write_end_io+0x99c/0xdb0 [ 52.895129][ T6473] bio_endio+0x840/0x87c [ 52.895140][ T6473] submit_bio_noacct+0x158/0x17cc [ 52.895188][ T6473] submit_bio+0x374/0x564 [ 52.895200][ T6473] f2fs_submit_write_bio+0x13c/0x36c [ 52.895211][ T6473] __submit_merged_bio+0x258/0x79c [ 52.895223][ T6473] __submit_merged_write_cond+0x248/0x4e8 [ 52.895234][ T6473] f2fs_write_data_pages+0x20fc/0x2acc [ 52.895246][ T6473] do_writepages+0x2f8/0x7c4 [ 52.895266][ T6473] filemap_fdatawrite+0x180/0x23c [ 52.895278][ T6473] f2fs_sync_dirty_inodes+0x2c0/0x7d4 [ 52.895294][ T6473] f2fs_write_checkpoint+0x6c0/0x174c [ 52.895307][ T6473] kill_f2fs_super+0x220/0x590 [ 52.895319][ T6473] deactivate_locked_super+0xc4/0x12c [ 52.895332][ T6473] deactivate_super+0xe0/0x100 [ 52.895343][ T6473] cleanup_mnt+0x34c/0x3dc [ 52.895355][ T6473] __cleanup_mnt+0x20/0x30 [ 52.895366][ T6473] task_work_run+0x230/0x2e0 [ 52.895380][ T6473] do_notify_resume+0x178/0x1f4 [ 52.895390][ T6473] el0_svc+0xac/0x168 [ 52.895404][ T6473] el0t_64_sync_handler+0x84/0x108 [ 52.895416][ T6473] el0t_64_sync+0x198/0x19c [ 52.895626][ T6473] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 53.236712][ T7221] loop4: detected capacity change from 0 to 32768 [ 53.237188][ T7221] btrfs: Deprecated parameter 'usebackuproot' [ 53.237395][ T7221] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 53.245341][ T7221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.221 (7221) [ 53.291960][ T7221] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.292068][ T7221] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 53.292101][ T7221] BTRFS info (device loop4): using free-space-tree [ 53.373755][ T7250] netlink: 288 bytes leftover after parsing attributes in process `syz.2.225'. [ 53.379479][ T14] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 53.379785][ T7221] BTRFS error (device loop4): failed to load root extent [ 53.379825][ T7221] BTRFS warning (device loop4): try to load backup roots slot 1 [ 53.380044][ T45] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 53.380123][ T7221] BTRFS warning (device loop4): couldn't read tree root [ 53.380146][ T7221] BTRFS warning (device loop4): try to load backup roots slot 2 [ 53.380363][ T14] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 53.380431][ T7221] BTRFS warning (device loop4): couldn't read tree root [ 53.380453][ T7221] BTRFS warning (device loop4): try to load backup roots slot 3 [ 53.442609][ T7221] BTRFS info (device loop4): rebuilding free space tree [ 53.532078][ T7221] BTRFS info (device loop4): checking UUID tree [ 53.689969][ T6472] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.694640][ T7227] loop3: detected capacity change from 0 to 32768 [ 53.857575][ T7254] loop0: detected capacity change from 0 to 32768 [ 53.894517][ T7254] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.230 (7254) [ 53.919003][ T7254] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 53.919101][ T7254] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 53.919177][ T7254] BTRFS info (device loop0 state S): using free-space-tree [ 53.919220][ T7254] workqueue: max_active 32767 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 53.933946][ T7254] workqueue: max_active 32767 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 53.974498][ T7254] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 53.978175][ T7254] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 53.984381][ T7254] workqueue: max_active 32767 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 53.985031][ T7254] workqueue: max_active 32767 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 53.988285][ T7254] workqueue: max_active 32767 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 54.001395][ T7227] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 54.001539][ T7227] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 54.001668][ T7227] bcachefs (loop3): Version upgrade required: [ 54.001668][ T7227] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 54.001668][ T7227] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 54.001668][ T7227] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 54.001847][ T7227] bcachefs (loop3): dropping and reconstructing all alloc info [ 54.010481][ T7227] bcachefs (loop3): accounting_read... [ 54.050776][ T45] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xfcf03e3b0b760edc680c540494bbac365df44223a091eabbf5846f39f75fca31 level 0, ignored [ 54.051591][ T7254] BTRFS critical (device loop0 state S): unable to find chunk map for logical 0 length 4096 [ 54.051659][ T7254] BTRFS critical (device loop0 state S): unable to find chunk map for logical 0 length 4096 [ 54.089112][ T7227] done [ 54.089192][ T7227] bcachefs (loop3): alloc_read... done [ 54.089248][ T7227] bcachefs (loop3): snapshots_read... done [ 54.090586][ T7227] bcachefs (loop3): done starting filesystem [ 54.124665][ T7292] netlink: 56 bytes leftover after parsing attributes in process `syz.4.235'. [ 54.124982][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 54.159853][ T7290] loop2: detected capacity change from 0 to 2048 [ 54.163339][ T7254] workqueue: max_active 32767 requested for btrfs-scrub is out of range, clamping between 1 and 2048 [ 54.163706][ T7254] BTRFS info (device loop0 state CS): scrub: started on devid 1 [ 54.180415][ T7254] BTRFS info (device loop0 state CS): scrub: finished on devid 1 with status: 0 [ 54.199616][ T7290] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 54.209224][ T6477] bcachefs (loop3): shutting down [ 54.263656][ T7294] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.263802][ T7290] syz.2.237: attempt to access beyond end of device [ 54.263802][ T7290] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 54.280444][ T6478] BTRFS info (device loop0 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 54.316230][ T7290] syz.2.237: attempt to access beyond end of device [ 54.316230][ T7290] loop2: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 54.316476][ T7290] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=0) [ 54.327149][ T6477] bcachefs (loop3): shutdown complete [ 54.393572][ T7300] loop1: detected capacity change from 0 to 1024 [ 54.436366][ T7303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.465135][ T7300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.559377][ T7296] loop4: detected capacity change from 0 to 32768 [ 54.589589][ T7300] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.691905][ T6474] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.775366][ T7319] loop1: detected capacity change from 0 to 1024 [ 54.934455][ T7327] loop4: detected capacity change from 0 to 64 [ 55.390010][ T7339] loop4: detected capacity change from 0 to 2048 [ 55.417165][ T7339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.429466][ T7326] loop1: detected capacity change from 0 to 32768 [ 55.468223][ T7326] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 55.475379][ T7326] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 55.563722][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.653238][ T7326] XFS (loop1): Ending clean mount [ 55.653989][ T7326] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0xf0, xfs_finobt block 0x20 [ 55.654161][ T7326] XFS (loop1): Unmount and run xfs_repair [ 55.654199][ T7326] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 55.654265][ T7326] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 55.654291][ T7326] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 55.654326][ T7326] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 55.654350][ T7326] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 55.654374][ T7326] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 55.654398][ T7326] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 55.654422][ T7326] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 55.654446][ T7326] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 55.654580][ T7326] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x20 len 8 error 74 [ 55.654719][ T7326] XFS (loop1): Failed to initialize disk quotas, err -117. [ 55.799750][ T6474] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 55.803830][ T6474] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 56.469521][ T7372] loop3: detected capacity change from 0 to 1024 [ 56.702097][ T45] hfsplus: b-tree write err: -5, ino 4 [ 56.716400][ T7367] loop1: detected capacity change from 0 to 32768 [ 56.754577][ T7367] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 56.884756][ T7367] XFS (loop1): Ending clean mount [ 56.893469][ T7367] XFS (loop1): Quotacheck needed: Please wait. [ 56.951348][ T7367] XFS (loop1): Quotacheck: Done. [ 57.050842][ T6474] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.637193][ T7421] loop3: detected capacity change from 0 to 4096 [ 57.640107][ T7421] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 57.890811][ T7432] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 58.031935][ T7440] 9p: Unknown Cache mode or invalid value f [ 58.123871][ T7434] loop1: detected capacity change from 0 to 32768 [ 58.157638][ T7434] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.291 (7434) [ 58.187721][ T7451] loop2: detected capacity change from 0 to 64 [ 58.187820][ T7434] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 58.187900][ T7434] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 58.187943][ T7434] BTRFS info (device loop1): using free-space-tree [ 58.192192][ T7450] loop4: detected capacity change from 0 to 64 [ 58.261092][ T7447] loop3: detected capacity change from 0 to 4096 [ 58.264849][ T7447] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 58.484611][ T6474] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 58.548322][ T7477] loop3: detected capacity change from 0 to 256 [ 58.626907][ T7481] loop4: detected capacity change from 0 to 256 [ 58.644678][ T7481] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.713949][ T7481] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 58.714090][ T7481] FAT-fs (loop4): Filesystem has been set read-only [ 58.724602][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 58.894450][ T7483] loop1: detected capacity change from 0 to 32768 [ 58.942040][ T7495] process 'syz.4.313' launched './file1' with NULL argv: empty string added [ 58.986776][ T7503] loop3: detected capacity change from 0 to 1024 [ 58.992936][ T7503] EXT4-fs: Ignoring removed orlov option [ 58.993018][ T7503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.036054][ T7503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.069059][ T7511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.072965][ T7511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.316'. [ 59.128983][ T7483] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 59.138679][ T7483] bcachefs (loop1): initializing new filesystem [ 59.141148][ T7483] bcachefs (loop1): going read-write [ 59.204394][ T7483] bcachefs (loop1): marking superblocks [ 59.208192][ T7483] bcachefs (loop1): initializing freespace [ 59.208959][ T7483] bcachefs (loop1): done initializing freespace [ 59.209827][ T7483] bcachefs (loop1): reading snapshots table [ 59.209893][ T7483] bcachefs (loop1): reading snapshots done [ 59.242701][ T7493] loop0: detected capacity change from 0 to 32768 [ 59.247558][ T7483] bcachefs (loop1): done starting filesystem [ 59.250677][ T7493] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.312 (7493) [ 59.273393][ T6477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.296353][ T7493] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 59.296472][ T7493] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 59.296510][ T7493] BTRFS info (device loop0): using free-space-tree [ 59.350528][ T6474] bcachefs (loop1): shutting down [ 59.350594][ T6474] bcachefs (loop1): going read-only [ 59.350619][ T6474] bcachefs (loop1): finished waiting for writes to stop [ 59.360493][ T7493] BTRFS info (device loop0): rebuilding free space tree [ 59.378523][ T7535] loop3: detected capacity change from 0 to 256 [ 59.395663][ T6474] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 59.406541][ T7498] loop2: detected capacity change from 0 to 32768 [ 59.413122][ T7535] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 59.474628][ T6474] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 59.484016][ T6474] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 59.490224][ T7498] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 59.505187][ T6474] bcachefs (loop1): marking filesystem clean [ 59.539981][ T7542] loop4: detected capacity change from 0 to 64 [ 59.563973][ T6478] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 59.568482][ T6474] bcachefs (loop1): shutdown complete [ 59.676384][ T6473] ocfs2: Unmounting device (7,2) on (node local) [ 59.702482][ T7550] loop6: detected capacity change from 0 to 524287999 [ 59.773440][ T7545] loop3: detected capacity change from 0 to 4096 [ 59.842981][ T7555] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.899299][ T7559] loop2: detected capacity change from 0 to 512 [ 59.901819][ T7559] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #15: comm syz.2.329: casefold flag without casefold feature [ 59.903024][ T7559] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.329: couldn't read orphan inode 15 (err -117) [ 59.904000][ T7559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.968066][ T6473] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.055458][ T7566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 60.121013][ T7552] loop4: detected capacity change from 0 to 32768 [ 60.130848][ T7571] netlink: 'syz.0.334': attribute type 9 has an invalid length. [ 60.147943][ T7552] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 60.225416][ T6472] ocfs2: Unmounting device (7,4) on (node local) [ 60.725525][ T7599] block nbd2: NBD_DISCONNECT [ 60.728471][ T7598] block nbd2: Disconnected due to user request. [ 60.728641][ T7598] block nbd2: shutting down sockets [ 60.806441][ T7584] loop4: detected capacity change from 0 to 40427 [ 60.827293][ T7584] F2FS-fs (loop4): invalid crc value [ 60.833208][ T7604] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 60.833654][ T7604] syzkaller0: linktype set to 825 [ 60.836580][ T7586] loop0: detected capacity change from 0 to 32768 [ 60.892804][ T7584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.971903][ T6472] syz-executor: attempt to access beyond end of device [ 60.971903][ T6472] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.976215][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 60.976238][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.976246][ T6472] Call trace: [ 60.976250][ T6472] show_stack+0x2c/0x3c (C) [ 60.976270][ T6472] dump_stack_lvl+0xe4/0x150 [ 60.976283][ T6472] dump_stack+0x1c/0x1028 [ 60.976295][ T6472] f2fs_handle_critical_error+0x380/0x534 [ 60.976308][ T6472] f2fs_stop_checkpoint+0x58/0x6c [ 60.976322][ T6472] f2fs_write_end_io+0x99c/0xdb0 [ 60.976335][ T6472] bio_endio+0x840/0x87c [ 60.976346][ T6472] submit_bio_noacct+0x158/0x17cc [ 60.976359][ T6472] submit_bio+0x374/0x564 [ 60.976370][ T6472] f2fs_submit_write_bio+0x13c/0x36c [ 60.976382][ T6472] __submit_merged_bio+0x258/0x79c [ 60.976393][ T6472] __submit_merged_write_cond+0x248/0x4e8 [ 60.976405][ T6472] f2fs_write_data_pages+0x20fc/0x2acc [ 60.976417][ T6472] do_writepages+0x2f8/0x7c4 [ 60.976432][ T6472] filemap_fdatawrite+0x180/0x23c [ 60.976443][ T6472] f2fs_sync_dirty_inodes+0x2c0/0x7d4 [ 60.976457][ T6472] f2fs_write_checkpoint+0x6c0/0x174c [ 60.976471][ T6472] kill_f2fs_super+0x220/0x590 [ 60.976483][ T6472] deactivate_locked_super+0xc4/0x12c [ 60.976495][ T6472] deactivate_super+0xe0/0x100 [ 60.976506][ T6472] cleanup_mnt+0x34c/0x3dc [ 60.976518][ T6472] __cleanup_mnt+0x20/0x30 [ 60.976529][ T6472] task_work_run+0x230/0x2e0 [ 60.976543][ T6472] do_notify_resume+0x178/0x1f4 [ 60.976553][ T6472] el0_svc+0xac/0x168 [ 60.976567][ T6472] el0t_64_sync_handler+0x84/0x108 [ 60.976580][ T6472] el0t_64_sync+0x198/0x19c [ 61.020722][ T6472] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 61.422491][ T7624] loop2: detected capacity change from 0 to 32768 [ 61.435678][ T7624] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.358 (7624) [ 61.440932][ T7624] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 61.441038][ T7624] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 61.441073][ T7624] BTRFS info (device loop2): using free-space-tree [ 61.504911][ T7624] BTRFS info (device loop2): rebuilding free space tree [ 61.552201][ T6473] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 61.593386][ T7620] loop0: detected capacity change from 0 to 40427 [ 61.603966][ T7620] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 61.606566][ T7620] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 61.611964][ T7620] F2FS-fs (loop0): invalid crc value [ 61.710242][ T7620] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 61.710322][ T7620] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 61.867876][ T7636] loop1: detected capacity change from 0 to 32768 [ 61.872735][ T7636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.320 (7636) [ 61.898221][ T7636] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.898335][ T7636] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 61.898369][ T7636] BTRFS info (device loop1): disk space caching is enabled [ 61.898390][ T7636] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 62.037087][ T7636] BTRFS info (device loop1): rebuilding free space tree [ 62.056216][ T7636] BTRFS info (device loop1): disabling free space tree [ 62.056333][ T7636] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 62.056492][ T7636] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 62.105468][ T7684] wireguard0: entered promiscuous mode [ 62.107709][ T7684] wireguard0: entered allmulticast mode [ 62.134788][ T6474] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.488064][ T7708] loop4: detected capacity change from 0 to 164 [ 62.545401][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 62.553205][ T7713] loop0: detected capacity change from 0 to 2048 [ 62.561208][ T7708] syz.4.378: attempt to access beyond end of device [ 62.561208][ T7708] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.561529][ T7708] syz.4.378: attempt to access beyond end of device [ 62.561529][ T7708] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.643098][ T7716] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.681332][ T7713] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 62.692777][ T7713] Remounting filesystem read-only [ 62.692846][ T7713] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 62.693701][ T7713] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 62.849213][ T7729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.390'. [ 62.982123][ T7719] loop4: detected capacity change from 0 to 32768 [ 62.983074][ T7719] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.385 (7719) [ 62.994854][ T7739] loop3: detected capacity change from 0 to 64 [ 63.001289][ T7719] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 63.001388][ T7719] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 63.001431][ T7719] BTRFS info (device loop4): using free-space-tree [ 63.072253][ T7739] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop3:00000002 [ 63.388291][ T7763] loop0: detected capacity change from 0 to 256 [ 63.428049][ T7763] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 63.438266][ T7763] exFAT-fs (loop0): error, data size is invalid(150994954) [ 63.438411][ T7763] exFAT-fs (loop0): Filesystem has been set read-only [ 63.566852][ T7761] loop3: detected capacity change from 0 to 40427 [ 63.569829][ T7761] F2FS-fs (loop3): heap/no_heap options were deprecated [ 63.605829][ T7761] F2FS-fs (loop3): invalid crc value [ 63.640919][ T7738] loop1: detected capacity change from 0 to 32768 [ 63.653009][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 63.655951][ T7768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.399'. [ 63.662071][ T7768] bridge0: port 3(vlan2) entered blocking state [ 63.663958][ T7768] bridge0: port 3(vlan2) entered disabled state [ 63.667494][ T7768] vlan2: entered allmulticast mode [ 63.669286][ T7768] bridge0: entered allmulticast mode [ 63.674788][ T7761] F2FS-fs (loop3): Start checkpoint disabled! [ 63.684576][ T7768] vlan2: left allmulticast mode [ 63.686177][ T7768] bridge0: left allmulticast mode [ 63.709976][ T7761] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 63.787940][ T7719] BTRFS info (device loop4 state MC): resize thread pool 4 -> 65537 [ 63.788012][ T7719] workqueue: max_active 65537 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 63.788044][ T7719] workqueue: max_active 65537 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 63.788073][ T7719] BTRFS info (device loop4 state MC): disabling log replay at mount time [ 63.788129][ T7719] BTRFS info (device loop4 state MC): turning on flush-on-commit [ 63.788151][ T7719] BTRFS info (device loop4 state MC): turning on sync discard [ 63.788184][ T7719] BTRFS info (device loop4 state MC): ignoring bad roots [ 63.788205][ T7719] BTRFS info (device loop4 state MC): ignoring meta csums [ 63.788224][ T7719] BTRFS info (device loop4 state MC): ignoring unknown super block flags [ 63.788244][ T7719] BTRFS info (device loop4 state MC): turning off barriers [ 63.908522][ T6472] BTRFS info (device loop4 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 63.948516][ T12] kworker/u8:0: attempt to access beyond end of device [ 63.948516][ T12] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 63.963242][ T12] kworker/u8:0: attempt to access beyond end of device [ 63.963242][ T12] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 63.963349][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 63.963364][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.963372][ T12] Workqueue: writeback wb_workfn (flush-7:3) [ 63.963395][ T12] Call trace: [ 63.963399][ T12] show_stack+0x2c/0x3c (C) [ 63.963415][ T12] dump_stack_lvl+0xe4/0x150 [ 63.963428][ T12] dump_stack+0x1c/0x1028 [ 63.963440][ T12] f2fs_handle_critical_error+0x380/0x534 [ 63.963454][ T12] f2fs_stop_checkpoint+0x58/0x6c [ 63.963468][ T12] f2fs_write_end_io+0x99c/0xdb0 [ 63.963480][ T12] bio_endio+0x840/0x87c [ 63.963491][ T12] submit_bio_noacct+0x158/0x17cc [ 63.963504][ T12] submit_bio+0x374/0x564 [ 63.963516][ T12] f2fs_submit_write_bio+0x13c/0x36c [ 63.963527][ T12] __submit_merged_bio+0x258/0x79c [ 63.963539][ T12] __submit_merged_write_cond+0x248/0x4e8 [ 63.963550][ T12] f2fs_write_data_pages+0x20fc/0x2acc [ 63.963562][ T12] do_writepages+0x2f8/0x7c4 [ 63.963577][ T12] __writeback_single_inode+0x15c/0x15a4 [ 63.963591][ T12] writeback_sb_inodes+0x650/0x1088 [ 63.963605][ T12] wb_writeback+0x3e0/0xe9c [ 63.963618][ T12] wb_workfn+0x38c/0x1048 [ 63.963630][ T12] process_one_work+0x810/0x1638 [ 63.963643][ T12] worker_thread+0x97c/0xf08 [ 63.963654][ T12] kthread+0x674/0x7dc [ 63.963667][ T12] ret_from_fork+0x10/0x20 [ 63.963682][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 64.014051][ T7774] loop0: detected capacity change from 0 to 4096 [ 64.054163][ T7772] loop1: detected capacity change from 0 to 32768 [ 64.063718][ T7775] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.540615][ T7790] loop3: detected capacity change from 0 to 164 [ 64.574017][ T7790] syz.3.407: attempt to access beyond end of device [ 64.574017][ T7790] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 64.575659][ T7790] syz.3.407: attempt to access beyond end of device [ 64.575659][ T7790] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.720787][ T2383] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.722947][ T2383] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.765202][ T7788] loop4: detected capacity change from 0 to 32768 [ 64.788623][ T7788] [ 64.788623][ T7788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.788623][ T7788] [ 64.798210][ T7788] read_mapping_page failed! [ 64.798281][ T7788] ERROR: (device loop4): txAbort: [ 64.798281][ T7788] [ 64.803805][ T7788] find_entry called with index = 0 [ 64.806755][ T7788] read_mapping_page failed! [ 64.806810][ T7788] ERROR: (device loop4): txAbort: [ 64.806810][ T7788] [ 64.881036][ T7785] loop1: detected capacity change from 0 to 32768 [ 64.884723][ T6472] [ 64.884723][ T6472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.884723][ T6472] [ 64.884961][ T6472] [ 64.884961][ T6472] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.884961][ T6472] [ 64.918483][ T7785] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 65.001274][ T7804] tipc: Started in network mode [ 65.009656][ T7804] tipc: Node identity ac14140f, cluster identity 4711 [ 65.012070][ T7804] tipc: New replicast peer: 255.255.255.255 [ 65.016399][ T7804] tipc: Enabled bearer , priority 10 [ 65.021577][ T7785] XFS (loop1): Ending clean mount [ 65.028546][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 65.031392][ T7804] tipc: Disabling bearer [ 65.329460][ T6474] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 65.701145][ T7812] loop3: detected capacity change from 0 to 32768 [ 66.029585][ T7840] loop4: detected capacity change from 0 to 1024 [ 66.031335][ T7840] EXT4-fs: Ignoring removed nobh option [ 66.031407][ T7840] EXT4-fs: Ignoring removed bh option [ 66.058765][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.070649][ T7840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.132048][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.214331][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 66.220618][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 66.226776][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 66.229287][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.231906][ T24] usb 1-1: Product: syz [ 66.233275][ T24] usb 1-1: Manufacturer: syz [ 66.236105][ T24] usb 1-1: SerialNumber: syz [ 66.242807][ T7855] loop4: detected capacity change from 0 to 256 [ 66.246867][ T24] usb 1-1: config 0 descriptor?? [ 66.254157][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 66.258033][ T24] usb 1-1: Detected FT232R [ 66.259972][ T7855] exfat: Deprecated parameter 'utf8' [ 66.260071][ T7855] exfat: Deprecated parameter 'utf8' [ 66.273121][ T7855] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 66.459947][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 66.482201][ T7861] loop3: detected capacity change from 0 to 128 [ 66.538056][ T7861] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.628575][ T6477] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.654316][ T7865] loop4: detected capacity change from 0 to 4096 [ 66.676051][ T7866] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.686382][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 66.708545][ T7868] loop3: detected capacity change from 0 to 1024 [ 66.719349][ T7849] loop2: detected capacity change from 0 to 65536 [ 66.719698][ T7853] loop1: detected capacity change from 0 to 32768 [ 66.736425][ T7849] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 66.741137][ T7853] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 66.756197][ T7865] NILFS (loop4): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 66.792020][ T7849] XFS (loop2): Ending clean mount [ 66.810322][ T7849] XFS (loop2): Quotacheck needed: Please wait. [ 66.813365][ T1981] hfsplus: b-tree write err: -5, ino 4 [ 66.832899][ T1981] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2e4/0x1154, inode 0x25 dinode [ 66.839538][ T1981] XFS (loop2): Unmount and run xfs_repair [ 66.844354][ T1981] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 66.844409][ T1981] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 66.844435][ T1981] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.844459][ T1981] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 66.844484][ T1981] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 66.844507][ T1981] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.844531][ T1981] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 66.844555][ T1981] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 66.844578][ T1981] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 66.883548][ T24] usb 1-1: USB disconnect, device number 2 [ 66.898942][ T7849] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 66.942288][ T7849] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x138/0x1fc, xfs_agf block 0x8001 [ 66.942481][ T7849] XFS (loop2): Unmount and run xfs_repair [ 66.942502][ T7849] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 66.942524][ T7849] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00 XAGF..........@. [ 66.942543][ T7849] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 66.942562][ T7849] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 66.942582][ T7849] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00 ......;_..;\.... [ 66.942602][ T7849] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 66.942621][ T7849] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.942640][ T7849] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.942659][ T7849] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.942681][ T7849] XFS (loop2): metadata I/O error in "xfs_read_agf+0x278/0x644" at daddr 0x8001 len 1 error 74 [ 66.996385][ T6474] ocfs2: Unmounting device (7,1) on (node local) [ 67.003040][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 67.011040][ T24] ftdi_sio 1-1:0.0: device disconnected [ 67.053391][ T6473] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 67.061653][ T6473] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 67.430840][ T7893] loop4: detected capacity change from 0 to 32768 [ 67.536915][ T7891] loop1: detected capacity change from 0 to 32768 [ 67.543077][ T7891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.442 (7891) [ 67.551441][ T7891] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.551549][ T7891] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 67.551583][ T7891] BTRFS info (device loop1): using free-space-tree [ 67.753260][ T7898] loop0: detected capacity change from 0 to 32768 [ 67.754047][ T7920] wireguard0: entered promiscuous mode [ 67.754078][ T7920] wireguard0: entered allmulticast mode [ 67.769660][ T6474] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.796049][ T7898] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 67.873009][ T7898] XFS (loop0): Ending clean mount [ 67.877537][ T7898] XFS (loop0): Quotacheck needed: Please wait. [ 67.927392][ T7898] XFS (loop0): Quotacheck: Done. [ 68.009493][ T6478] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 68.493559][ T7943] loop1: detected capacity change from 0 to 32768 [ 68.520901][ T7943] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 68.652853][ T7943] XFS (loop1): Ending clean mount [ 68.660605][ T7943] XFS (loop1): Quotacheck needed: Please wait. [ 68.698195][ T7943] XFS (loop1): Quotacheck: Done. [ 68.724784][ T7953] loop2: detected capacity change from 0 to 40427 [ 68.737495][ T7953] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 68.737564][ T7953] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 68.786356][ T7953] F2FS-fs (loop2): invalid crc value [ 68.803437][ T7950] loop0: detected capacity change from 0 to 32768 [ 68.822745][ T7957] loop3: detected capacity change from 0 to 32768 [ 68.826027][ T6474] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 68.836706][ T7957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.463 (7957) [ 68.859999][ T7950] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.459 (7950) [ 68.870384][ T7957] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.870498][ T7957] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 68.870534][ T7957] BTRFS info (device loop3): using free-space-tree [ 68.879470][ T7950] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 68.879571][ T7950] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 68.879614][ T7950] BTRFS info (device loop0): using free-space-tree [ 68.889762][ T7953] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 68.889837][ T7953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.916978][ T7953] syz.2.460: attempt to access beyond end of device [ 68.916978][ T7953] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 68.976091][ T6473] syz-executor: attempt to access beyond end of device [ 68.976091][ T6473] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 68.988683][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 68.988710][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.988719][ T6473] Call trace: [ 68.988722][ T6473] show_stack+0x2c/0x3c (C) [ 68.988742][ T6473] dump_stack_lvl+0xe4/0x150 [ 68.988756][ T6473] dump_stack+0x1c/0x1028 [ 68.988767][ T6473] f2fs_handle_critical_error+0x380/0x534 [ 68.988781][ T6473] f2fs_stop_checkpoint+0x58/0x6c [ 68.988795][ T6473] f2fs_write_end_io+0x99c/0xdb0 [ 68.988807][ T6473] bio_endio+0x840/0x87c [ 68.988818][ T6473] submit_bio_noacct+0x158/0x17cc [ 68.988831][ T6473] submit_bio+0x374/0x564 [ 68.988843][ T6473] f2fs_submit_write_bio+0x13c/0x36c [ 68.988854][ T6473] __submit_merged_bio+0x258/0x79c [ 68.988866][ T6473] __submit_merged_write_cond+0x428/0x4e8 [ 68.988877][ T6473] f2fs_submit_merged_write+0x38/0x48 [ 68.988888][ T6473] f2fs_sync_node_pages+0x12f8/0x145c [ 68.988902][ T6473] f2fs_write_checkpoint+0xaec/0x174c [ 68.988916][ T6473] kill_f2fs_super+0x220/0x590 [ 68.988928][ T6473] deactivate_locked_super+0xc4/0x12c [ 68.988940][ T6473] deactivate_super+0xe0/0x100 [ 68.988951][ T6473] cleanup_mnt+0x34c/0x3dc [ 68.988963][ T6473] __cleanup_mnt+0x20/0x30 [ 68.988975][ T6473] task_work_run+0x230/0x2e0 [ 68.988988][ T6473] do_notify_resume+0x178/0x1f4 [ 68.988998][ T6473] el0_svc+0xac/0x168 [ 68.989012][ T6473] el0t_64_sync_handler+0x84/0x108 [ 68.989025][ T6473] el0t_64_sync+0x198/0x19c [ 69.025312][ T6473] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 69.116874][ T6477] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.294667][ T6478] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 69.470868][ T7992] loop1: detected capacity change from 0 to 40427 [ 69.488799][ T8024] loop2: detected capacity change from 0 to 64 [ 69.490401][ T8024] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 69.536454][ T8023] tipc: Started in network mode [ 69.536532][ T8023] tipc: Node identity ac14140f, cluster identity 4711 [ 69.536676][ T8023] tipc: New replicast peer: 255.255.255.255 [ 69.536882][ T8023] tipc: Enabled bearer , priority 10 [ 69.537765][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'. [ 69.537808][ T8023] tipc: Disabling bearer [ 69.590480][ T7992] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.745361][ T45] kworker/u8:3: attempt to access beyond end of device [ 69.745361][ T45] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.755958][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/u8:3 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 69.755988][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.755998][ T45] Workqueue: writeback wb_workfn (flush-7:1) [ 69.756021][ T45] Call trace: [ 69.756025][ T45] show_stack+0x2c/0x3c (C) [ 69.756041][ T45] dump_stack_lvl+0xe4/0x150 [ 69.756054][ T45] dump_stack+0x1c/0x1028 [ 69.756066][ T45] f2fs_handle_critical_error+0x380/0x534 [ 69.756079][ T45] f2fs_stop_checkpoint+0x58/0x6c [ 69.756093][ T45] f2fs_write_end_io+0x99c/0xdb0 [ 69.756105][ T45] bio_endio+0x840/0x87c [ 69.756116][ T45] submit_bio_noacct+0x158/0x17cc [ 69.756129][ T45] submit_bio+0x374/0x564 [ 69.756140][ T45] f2fs_submit_write_bio+0x13c/0x36c [ 69.756152][ T45] __submit_merged_bio+0x258/0x79c [ 69.756163][ T45] __submit_merged_write_cond+0x248/0x4e8 [ 69.756186][ T45] f2fs_write_data_pages+0x20fc/0x2acc [ 69.756199][ T45] do_writepages+0x2f8/0x7c4 [ 69.756213][ T45] __writeback_single_inode+0x15c/0x15a4 [ 69.756228][ T45] writeback_sb_inodes+0x650/0x1088 [ 69.756241][ T45] wb_writeback+0x3e0/0xe9c [ 69.756254][ T45] wb_workfn+0x38c/0x1048 [ 69.756267][ T45] process_one_work+0x810/0x1638 [ 69.756279][ T45] worker_thread+0x97c/0xf08 [ 69.756290][ T45] kthread+0x674/0x7dc [ 69.756303][ T45] ret_from_fork+0x10/0x20 [ 69.795542][ T45] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 69.837615][ T10] cfg80211: failed to load regulatory.db [ 70.128116][ T8018] loop4: detected capacity change from 0 to 32768 [ 70.307819][ T8060] loop1: detected capacity change from 0 to 1024 [ 70.308331][ T8060] EXT4-fs: Ignoring removed orlov option [ 70.308363][ T8060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.348553][ T8018] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 70.356802][ T8018] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 70.359549][ T8018] bcachefs (loop4): Version upgrade required: [ 70.359549][ T8018] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 70.359549][ T8018] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 70.359549][ T8018] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 70.365458][ T8060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.366064][ T8018] bcachefs (loop4): dropping and reconstructing all alloc info [ 70.406004][ T8018] bcachefs (loop4): accounting_read... done [ 70.456442][ T8018] bcachefs (loop4): alloc_read... done [ 70.456497][ T8018] bcachefs (loop4): snapshots_read... done [ 70.456834][ T8018] bcachefs (loop4): done starting filesystem [ 70.573616][ T6472] bcachefs (loop4): shutting down [ 70.668486][ T6474] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.677454][ T6524] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.679736][ T6524] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.713145][ T8073] loop0: detected capacity change from 0 to 8192 [ 70.715180][ T6524] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 70.715617][ T6472] bcachefs (loop4): shutdown complete [ 70.841890][ T8066] loop2: detected capacity change from 0 to 40427 [ 70.864554][ T8066] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3fffff [ 70.864630][ T8066] F2FS-fs (loop2): Image doesn't support compression [ 70.864661][ T8066] F2FS-fs (loop2): Image doesn't support compression [ 70.868231][ T8066] F2FS-fs (loop2): invalid crc value [ 70.958879][ T8066] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.027156][ T8066] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_unlink+0x22c/0xa78 [ 71.067304][ T6473] syz-executor: attempt to access beyond end of device [ 71.067304][ T6473] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 71.068365][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 71.068385][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.068393][ T6473] Call trace: [ 71.068397][ T6473] show_stack+0x2c/0x3c (C) [ 71.068417][ T6473] dump_stack_lvl+0xe4/0x150 [ 71.068430][ T6473] dump_stack+0x1c/0x1028 [ 71.068442][ T6473] f2fs_handle_critical_error+0x380/0x534 [ 71.068455][ T6473] f2fs_stop_checkpoint+0x58/0x6c [ 71.068469][ T6473] f2fs_write_end_io+0x99c/0xdb0 [ 71.068481][ T6473] bio_endio+0x840/0x87c [ 71.068492][ T6473] submit_bio_noacct+0x158/0x17cc [ 71.068505][ T6473] submit_bio+0x374/0x564 [ 71.068517][ T6473] f2fs_submit_write_bio+0x13c/0x36c [ 71.068528][ T6473] __submit_merged_bio+0x258/0x79c [ 71.068540][ T6473] __submit_merged_write_cond+0x248/0x4e8 [ 71.068559][ T6473] f2fs_write_data_pages+0x20fc/0x2acc [ 71.068571][ T6473] do_writepages+0x2f8/0x7c4 [ 71.068586][ T6473] filemap_fdatawrite+0x180/0x23c [ 71.068597][ T6473] f2fs_sync_dirty_inodes+0x2c0/0x7d4 [ 71.068610][ T6473] f2fs_write_checkpoint+0x6c0/0x174c [ 71.068624][ T6473] kill_f2fs_super+0x220/0x590 [ 71.068636][ T6473] deactivate_locked_super+0xc4/0x12c [ 71.068649][ T6473] deactivate_super+0xe0/0x100 [ 71.068659][ T6473] cleanup_mnt+0x34c/0x3dc [ 71.068672][ T6473] __cleanup_mnt+0x20/0x30 [ 71.068683][ T6473] task_work_run+0x230/0x2e0 [ 71.068696][ T6473] do_notify_resume+0x178/0x1f4 [ 71.068707][ T6473] el0_svc+0xac/0x168 [ 71.068720][ T6473] el0t_64_sync_handler+0x84/0x108 [ 71.068733][ T6473] el0t_64_sync+0x198/0x19c [ 71.068747][ T6473] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 71.068971][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 71.068985][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.068991][ T6473] Call trace: [ 71.068995][ T6473] show_stack+0x2c/0x3c (C) [ 71.069007][ T6473] dump_stack_lvl+0xe4/0x150 [ 71.069019][ T6473] dump_stack+0x1c/0x1028 [ 71.069030][ T6473] f2fs_handle_critical_error+0x380/0x534 [ 71.069042][ T6473] f2fs_stop_checkpoint+0x58/0x6c [ 71.069056][ T6473] f2fs_write_end_io+0x99c/0xdb0 [ 71.069068][ T6473] bio_endio+0x840/0x87c [ 71.069078][ T6473] submit_bio_noacct+0x158/0x17cc [ 71.069090][ T6473] submit_bio+0x374/0x564 [ 71.069102][ T6473] f2fs_submit_write_bio+0x13c/0x36c [ 71.069114][ T6473] __submit_merged_bio+0x258/0x79c [ 71.069125][ T6473] __submit_merged_write_cond+0x248/0x4e8 [ 71.069137][ T6473] f2fs_write_data_pages+0x20fc/0x2acc [ 71.069149][ T6473] do_writepages+0x2f8/0x7c4 [ 71.069162][ T6473] filemap_fdatawrite+0x180/0x23c [ 71.069181][ T6473] f2fs_sync_dirty_inodes+0x2c0/0x7d4 [ 71.069195][ T6473] f2fs_write_checkpoint+0x6c0/0x174c [ 71.069208][ T6473] kill_f2fs_super+0x220/0x590 [ 71.069220][ T6473] deactivate_locked_super+0xc4/0x12c [ 71.069231][ T6473] deactivate_super+0xe0/0x100 [ 71.069242][ T6473] cleanup_mnt+0x34c/0x3dc [ 71.069253][ T6473] __cleanup_mnt+0x20/0x30 [ 71.069264][ T6473] task_work_run+0x230/0x2e0 [ 71.069276][ T6473] do_notify_resume+0x178/0x1f4 [ 71.069286][ T6473] el0_svc+0xac/0x168 [ 71.069298][ T6473] el0t_64_sync_handler+0x84/0x108 [ 71.069311][ T6473] el0t_64_sync+0x198/0x19c [ 71.069322][ T6473] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 71.290492][ T8077] loop1: detected capacity change from 0 to 32768 [ 71.300673][ T6553] IPVS: starting estimator thread 0... [ 71.330002][ T8077] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 71.394406][ T8094] IPVS: using max 40 ests per chain, 96000 per kthread [ 71.464867][ T8077] XFS (loop1): Ending clean mount [ 71.471755][ T8077] XFS (loop1): Quotacheck needed: Please wait. [ 71.502575][ T8077] XFS (loop1): Quotacheck: Done. [ 71.551500][ T8107] loop3: detected capacity change from 0 to 4096 [ 71.568516][ T8107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.615006][ T6474] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 71.621321][ T6477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.697910][ T8116] loop3: detected capacity change from 0 to 8192 [ 71.746871][ T8116] loop3: p1 < > p2 < p5 > p3 p4 [ 71.774155][ T8116] loop3: p3 start 83890176 is beyond EOD, truncated [ 71.776383][ T8116] loop3: p4 size 16776960 extends beyond EOD, truncated [ 71.779345][ T8116] loop3: p5 size 16776960 extends beyond EOD, truncated [ 71.843024][ T6488] block nbd0: Receive control failed (result -32) [ 71.976924][ T6464] udevd[6464]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 71.979674][ T7886] udevd[7886]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 71.989646][ T6742] udevd[6742]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 71.998666][ T6490] udevd[6490]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 72.027360][ T8120] loop2: detected capacity change from 0 to 32768 [ 72.041099][ T8120] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.508 (8120) [ 72.071136][ T8120] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 72.071250][ T8120] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 72.071313][ T8120] BTRFS info (device loop2): using free-space-tree [ 72.216823][ T8124] loop1: detected capacity change from 0 to 32768 [ 72.445649][ T8148] loop0: detected capacity change from 0 to 1024 [ 72.446101][ T8148] EXT4-fs: Ignoring removed orlov option [ 72.451112][ T8148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.515381][ T8148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.741629][ T8120] BTRFS info (device loop2 state MC): resize thread pool 4 -> 65537 [ 72.741702][ T8120] workqueue: max_active 65537 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 72.741734][ T8120] workqueue: max_active 65537 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 72.741763][ T8120] BTRFS info (device loop2 state MC): disabling log replay at mount time [ 72.741784][ T8120] BTRFS info (device loop2 state MC): turning on flush-on-commit [ 72.741804][ T8120] BTRFS info (device loop2 state MC): turning on sync discard [ 72.741824][ T8120] BTRFS info (device loop2 state MC): ignoring bad roots [ 72.741844][ T8120] BTRFS info (device loop2 state MC): ignoring meta csums [ 72.741863][ T8120] BTRFS info (device loop2 state MC): ignoring unknown super block flags [ 72.741883][ T8120] BTRFS info (device loop2 state MC): turning off barriers [ 72.766350][ T8147] loop1: detected capacity change from 0 to 32768 [ 72.783838][ T8147] BTRFS: device /dev/loop1 (7:1) using temp-fsid 9738c0a2-bf99-4c70-8689-1073a035a138 [ 72.784060][ T8147] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.514 (8147) [ 72.789556][ T8147] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 72.789628][ T8147] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 72.789669][ T8147] BTRFS info (device loop1): using free-space-tree [ 72.800272][ T6478] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.801048][ T8132] loop3: detected capacity change from 0 to 32768 [ 72.802224][ T8132] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.512 (8132) [ 72.816927][ T8132] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 72.817568][ T8132] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 72.817629][ T8132] BTRFS info (device loop3): using free-space-tree [ 72.838766][ T6473] BTRFS info (device loop2 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 72.997861][ T6474] BTRFS info (device loop1): last unmount of filesystem 9738c0a2-bf99-4c70-8689-1073a035a138 [ 73.078612][ T6477] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 73.452318][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 73.453395][ T8189] bridge0: port 2(bridge_slave_1) entered learning state [ 73.461072][ T8201] tun0: tun_chr_ioctl cmd 1074025677 [ 73.462912][ T8201] tun0: linktype set to 821 [ 73.603992][ T8209] loop1: detected capacity change from 0 to 4096 [ 74.136226][ T8233] loop3: detected capacity change from 0 to 2048 [ 74.148748][ T8234] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.191525][ T8214] loop0: detected capacity change from 0 to 32768 [ 74.411897][ T8242] loop2: detected capacity change from 0 to 4096 [ 74.412957][ T8221] loop4: detected capacity change from 0 to 40427 [ 74.418186][ T8221] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3fffff [ 74.430044][ T8221] F2FS-fs (loop4): invalid crc value [ 74.447675][ T8245] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.502396][ T8240] loop3: detected capacity change from 0 to 32768 [ 74.523374][ T8221] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 74.564529][ T8240] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 74.607055][ T6472] syz-executor: attempt to access beyond end of device [ 74.607055][ T6472] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.607163][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 74.607191][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.607199][ T6472] Call trace: [ 74.607203][ T6472] show_stack+0x2c/0x3c (C) [ 74.607222][ T6472] dump_stack_lvl+0xe4/0x150 [ 74.607235][ T6472] dump_stack+0x1c/0x1028 [ 74.607247][ T6472] f2fs_handle_critical_error+0x380/0x534 [ 74.607259][ T6472] f2fs_stop_checkpoint+0x58/0x6c [ 74.607273][ T6472] f2fs_write_end_io+0x99c/0xdb0 [ 74.607293][ T6472] bio_endio+0x840/0x87c [ 74.607304][ T6472] submit_bio_noacct+0x158/0x17cc [ 74.607317][ T6472] submit_bio+0x374/0x564 [ 74.607329][ T6472] f2fs_submit_write_bio+0x13c/0x36c [ 74.607340][ T6472] __submit_merged_bio+0x258/0x79c [ 74.607352][ T6472] __submit_merged_write_cond+0x248/0x4e8 [ 74.607363][ T6472] f2fs_write_data_pages+0x20fc/0x2acc [ 74.607375][ T6472] do_writepages+0x2f8/0x7c4 [ 74.607390][ T6472] filemap_fdatawrite+0x180/0x23c [ 74.607401][ T6472] f2fs_sync_dirty_inodes+0x2c0/0x7d4 [ 74.607415][ T6472] f2fs_write_checkpoint+0x6c0/0x174c [ 74.607429][ T6472] kill_f2fs_super+0x220/0x590 [ 74.607440][ T6472] deactivate_locked_super+0xc4/0x12c [ 74.607453][ T6472] deactivate_super+0xe0/0x100 [ 74.607463][ T6472] cleanup_mnt+0x34c/0x3dc [ 74.607475][ T6472] __cleanup_mnt+0x20/0x30 [ 74.607487][ T6472] task_work_run+0x230/0x2e0 [ 74.607499][ T6472] do_notify_resume+0x178/0x1f4 [ 74.607509][ T6472] el0_svc+0xac/0x168 [ 74.607522][ T6472] el0t_64_sync_handler+0x84/0x108 [ 74.607535][ T6472] el0t_64_sync+0x198/0x19c [ 74.607549][ T6472] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 74.703904][ T6477] ocfs2: Unmounting device (7,3) on (node local) [ 74.851532][ T8259] loop1: detected capacity change from 0 to 64 [ 75.012965][ T8266] loop4: detected capacity change from 0 to 64 [ 75.051439][ T8256] loop2: detected capacity change from 0 to 32768 [ 75.188972][ T8256] bcachefs (loop2): starting version 0.263: (unknown version) opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 75.189065][ T8256] bcachefs (loop2): initializing new filesystem [ 75.189636][ T8256] bcachefs (loop2): going read-write [ 75.214493][ T8256] bcachefs (loop2): marking superblocks [ 75.227552][ T8282] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 75.257948][ T8256] bcachefs (loop2): initializing freespace [ 75.258871][ T8256] bcachefs (loop2): done initializing freespace [ 75.259739][ T8256] bcachefs (loop2): reading snapshots table [ 75.259791][ T8256] bcachefs (loop2): reading snapshots done [ 75.289652][ T8256] bcachefs (loop2): done starting filesystem [ 75.307548][ T8277] loop0: detected capacity change from 0 to 4096 [ 75.399650][ T6473] bcachefs (loop2): shutting down [ 75.399709][ T6473] bcachefs (loop2): going read-only [ 75.399734][ T6473] bcachefs (loop2): finished waiting for writes to stop [ 75.417190][ T6473] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 75.448010][ T8295] loop3: detected capacity change from 0 to 164 [ 75.451043][ T8277] ntfs3(loop0): MFT: r=2, expect seq=5 instead of 2! [ 75.472123][ T12] ntfs3(loop0): ino=5, mi_enum_attr [ 75.482665][ T8295] ISOFS: unable to read i-node block [ 75.530635][ T6473] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 75.539964][ T6473] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 75.587214][ T6473] bcachefs (loop2): marking filesystem clean [ 75.685610][ T6473] bcachefs (loop2): shutdown complete [ 75.691643][ T8287] loop1: detected capacity change from 0 to 40427 [ 75.705827][ T8287] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3fffff [ 75.718732][ T8287] F2FS-fs (loop1): invalid crc value [ 75.726776][ T8306] IPv6: sit1: Disabled Multicast RS [ 75.806262][ T8287] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 75.933346][ T6474] syz-executor: attempt to access beyond end of device [ 75.933346][ T6474] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.933443][ T6474] CPU: 1 UID: 0 PID: 6474 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 75.933458][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.933466][ T6474] Call trace: [ 75.933470][ T6474] show_stack+0x2c/0x3c (C) [ 75.933489][ T6474] dump_stack_lvl+0xe4/0x150 [ 75.933511][ T6474] dump_stack+0x1c/0x1028 [ 75.933524][ T6474] f2fs_handle_critical_error+0x380/0x534 [ 75.933537][ T6474] f2fs_stop_checkpoint+0x58/0x6c [ 75.933550][ T6474] f2fs_write_end_io+0x99c/0xdb0 [ 75.933563][ T6474] bio_endio+0x840/0x87c [ 75.933574][ T6474] submit_bio_noacct+0x158/0x17cc [ 75.933586][ T6474] submit_bio+0x374/0x564 [ 75.933598][ T6474] f2fs_submit_write_bio+0x13c/0x36c [ 75.933610][ T6474] __submit_merged_bio+0x258/0x79c [ 75.933621][ T6474] __submit_merged_write_cond+0x248/0x4e8 [ 75.933632][ T6474] f2fs_write_data_pages+0x20fc/0x2acc [ 75.933645][ T6474] do_writepages+0x2f8/0x7c4 [ 75.933660][ T6474] filemap_fdatawrite+0x180/0x23c [ 75.933670][ T6474] f2fs_sync_dirty_inodes+0x2c0/0x7d4 [ 75.933684][ T6474] f2fs_write_checkpoint+0x6c0/0x174c [ 75.933698][ T6474] kill_f2fs_super+0x220/0x590 [ 75.933710][ T6474] deactivate_locked_super+0xc4/0x12c [ 75.933722][ T6474] deactivate_super+0xe0/0x100 [ 75.933733][ T6474] cleanup_mnt+0x34c/0x3dc [ 75.933745][ T6474] __cleanup_mnt+0x20/0x30 [ 75.933756][ T6474] task_work_run+0x230/0x2e0 [ 75.933770][ T6474] do_notify_resume+0x178/0x1f4 [ 75.933780][ T6474] el0_svc+0xac/0x168 [ 75.933794][ T6474] el0t_64_sync_handler+0x84/0x108 [ 75.933807][ T6474] el0t_64_sync+0x198/0x19c [ 75.942404][ T6474] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 75.999694][ T8308] loop4: detected capacity change from 0 to 32768 [ 76.008093][ T8308] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.563 (8308) [ 76.027742][ T8308] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 76.027845][ T8308] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 76.027888][ T8308] BTRFS info (device loop4): using free-space-tree [ 76.122130][ T8304] loop3: detected capacity change from 0 to 32768 [ 76.129287][ T8304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.560 (8304) [ 76.169426][ T8304] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.169523][ T8304] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 76.169582][ T8304] BTRFS info (device loop3): using free-space-tree [ 76.221601][ T8304] BTRFS info (device loop3): rebuilding free space tree [ 76.241552][ T8354] loop1: detected capacity change from 0 to 1024 [ 76.331635][ T12] BTRFS info (device loop3): cannot satisfy tickets, dumping space info [ 76.331790][ T12] BTRFS info (device loop3): space_info DATA+METADATA has 10039296 free, is full [ 76.331815][ T12] BTRFS info (device loop3): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=1441792, readonly=0 zone_unusable=0 [ 76.331843][ T12] BTRFS info (device loop3): failing ticket with 142606336 bytes [ 76.334412][ T8304] BTRFS info (device loop3): space_info DATA+METADATA has 10039296 free, is full [ 76.334565][ T8304] BTRFS info (device loop3): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=1441792, readonly=0 zone_unusable=0 [ 76.334596][ T8304] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792 [ 76.334673][ T8304] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 76.334695][ T8304] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 76.334717][ T8304] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 76.334738][ T8304] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 76.358491][ T6472] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 76.366003][ T8354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.391922][ T6477] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.525200][ T6474] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.554070][ T8366] sp0: Synchronizing with TNC [ 76.614926][ T8365] [U] è [ 76.990013][ T8372] loop1: detected capacity change from 0 to 40427 [ 76.993090][ T8368] loop3: detected capacity change from 0 to 32768 [ 77.003605][ T8372] F2FS-fs (loop1): heap/no_heap options were deprecated [ 77.007127][ T8372] F2FS-fs (loop1): invalid crc value [ 77.080097][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 77.089662][ T8372] F2FS-fs (loop1): Start checkpoint disabled! [ 77.106617][ T8370] loop0: detected capacity change from 0 to 32768 [ 77.123489][ T8372] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 77.165473][ T8370] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 77.267892][ T8370] XFS (loop0): Ending clean mount [ 77.270511][ T8370] XFS (loop0): Quotacheck needed: Please wait. [ 77.299730][ T8370] XFS (loop0): Quotacheck: Done. [ 77.372042][ T8368] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 77.372222][ T8368] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 77.372334][ T8368] bcachefs (loop3): Version upgrade required: [ 77.372334][ T8368] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 77.372334][ T8368] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 77.372334][ T8368] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 77.377195][ T8368] bcachefs (loop3): dropping and reconstructing all alloc info [ 77.417053][ T8368] bcachefs (loop3): accounting_read... [ 77.433341][ T12] kworker/u8:0: attempt to access beyond end of device [ 77.433341][ T12] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 77.433648][ T12] kworker/u8:0: attempt to access beyond end of device [ 77.433648][ T12] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 77.433700][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 77.433714][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.433722][ T12] Workqueue: writeback wb_workfn (flush-7:1) [ 77.433744][ T12] Call trace: [ 77.433748][ T12] show_stack+0x2c/0x3c (C) [ 77.433764][ T12] dump_stack_lvl+0xe4/0x150 [ 77.433777][ T12] dump_stack+0x1c/0x1028 [ 77.433789][ T12] f2fs_handle_critical_error+0x380/0x534 [ 77.433801][ T12] f2fs_stop_checkpoint+0x58/0x6c [ 77.433815][ T12] f2fs_write_end_io+0x99c/0xdb0 [ 77.433828][ T12] bio_endio+0x840/0x87c [ 77.433839][ T12] submit_bio_noacct+0x158/0x17cc [ 77.433852][ T12] submit_bio+0x374/0x564 [ 77.433863][ T12] f2fs_submit_write_bio+0x13c/0x36c [ 77.433875][ T12] __submit_merged_bio+0x258/0x79c [ 77.433886][ T12] __submit_merged_write_cond+0x248/0x4e8 [ 77.433898][ T12] f2fs_write_data_pages+0x20fc/0x2acc [ 77.433910][ T12] do_writepages+0x2f8/0x7c4 [ 77.433924][ T12] __writeback_single_inode+0x15c/0x15a4 [ 77.433939][ T12] writeback_sb_inodes+0x650/0x1088 [ 77.433952][ T12] wb_writeback+0x3e0/0xe9c [ 77.433965][ T12] wb_workfn+0x38c/0x1048 [ 77.433978][ T12] process_one_work+0x810/0x1638 [ 77.433990][ T12] worker_thread+0x97c/0xf08 [ 77.434010][ T12] kthread+0x674/0x7dc [ 77.434024][ T12] ret_from_fork+0x10/0x20 [ 77.434039][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 77.441676][ T6478] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 77.457722][ T8368] done [ 77.457760][ T8368] bcachefs (loop3): alloc_read... done [ 77.457813][ T8368] bcachefs (loop3): snapshots_read... done [ 77.457883][ T8368] bcachefs (loop3): check_allocations... done [ 77.540546][ T8368] bcachefs (loop3): going read-write [ 77.550787][ T8368] bcachefs (loop3): done starting filesystem [ 77.684569][ T6477] bcachefs (loop3): shutting down [ 77.684633][ T6477] bcachefs (loop3): going read-only [ 77.684656][ T6477] bcachefs (loop3): finished waiting for writes to stop [ 77.715092][ T8408] loop2: detected capacity change from 0 to 32768 [ 77.755217][ T6477] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 77.758861][ T6477] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 77.779306][ T6477] bcachefs (loop3): unclean shutdown complete, journal seq 12 [ 77.782082][ T8408] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.825044][ T6477] bcachefs (loop3): done going read-only, filesystem not clean [ 77.839017][ T8408] XFS (loop2): Ending clean mount [ 77.880743][ T8406] loop4: detected capacity change from 0 to 32768 [ 77.905829][ T6477] bcachefs (loop3): shutdown complete [ 77.918824][ T8406] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 77.955598][ T8406] XFS (loop4): Ending clean mount [ 77.956782][ T8406] XFS (loop4): Quotacheck needed: Please wait. [ 77.997628][ T8406] XFS (loop4): Quotacheck: Done. [ 78.002610][ T8408] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0xf0, xfs_rmapbt block 0x14 [ 78.007084][ T8408] XFS (loop2): Unmount and run xfs_repair [ 78.008927][ T8408] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 78.011210][ T8408] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 78.013854][ T8408] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 78.028489][ T8408] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 78.030669][ T6472] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 78.034010][ T8408] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 78.037327][ T8408] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 78.040132][ T8408] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 78.042896][ T8408] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 78.045430][ T8408] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 78.045457][ T8408] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x14 len 4 error 74 [ 78.062461][ T8408] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x590/0xae8 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 78.062546][ T8408] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 78.088965][ T6473] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.249780][ T8436] loop2: detected capacity change from 0 to 2048 [ 78.293663][ T8436] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 78.293762][ T8436] System zones: 0-4 [ 78.297650][ T8436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.340647][ T8436] fs-verity: sha512 using implementation "sha512-arm64" [ 78.346322][ T8436] fs-verity (loop2, inode 13): Error -22 reading file data [ 78.346484][ T8436] fs-verity (loop2, inode 13): Error -22 building Merkle tree [ 78.364975][ T6473] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.461733][ T8444] loop2: detected capacity change from 0 to 4096 [ 78.468819][ T8444] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 78.518106][ T8444] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 78.741000][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.741385][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.756843][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 78.759584][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 78.760844][ T8456] loop4: detected capacity change from 0 to 512 [ 78.775540][ T8456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.777724][ T8456] EXT4-fs (loop4): Test dummy encryption mode enabled [ 78.797240][ T8456] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 78.797518][ T8456] EXT4-fs (loop4): 1 truncate cleaned up [ 78.798369][ T8456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.805543][ T8456] EXT4-fs warning (device loop4): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 78.865501][ T6472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.961964][ T8466] netlink: 'syz.0.600': attribute type 4 has an invalid length. [ 79.121527][ T8474] loop0: detected capacity change from 0 to 256 [ 79.134134][ T8474] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 79.169639][ T8462] loop2: detected capacity change from 0 to 32768 [ 79.358941][ T8462] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid device 255,noinodes_use_key_cache,journal_flush_delay=1001,nojournal_transaction_names [ 79.359093][ T8462] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 79.359782][ T8462] bcachefs (loop2): Version upgrade required: [ 79.359782][ T8462] Version upgrade from 0.19: freespace to 1.7: mi_btree_bitmap incomplete [ 79.359782][ T8462] Doing incompatible version upgrade from 0.19: freespace to 1.25: extent_flags [ 79.359782][ T8462] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 79.423763][ T8462] bcachefs (loop2): accounting_read... done [ 79.465474][ T8462] bcachefs (loop2): alloc_read... done [ 79.465868][ T8462] bcachefs (loop2): snapshots_read... done [ 79.465937][ T8462] bcachefs (loop2): check_allocations... done [ 79.525061][ T8462] bcachefs (loop2): going read-write [ 79.548140][ T8462] bcachefs (loop2): journal_replay... [ 79.590999][ T8478] loop4: detected capacity change from 0 to 32768 [ 79.598721][ T8478] btrfs: Deprecated parameter 'usebackuproot' [ 79.600648][ T8478] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 79.613385][ T8478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.606 (8478) [ 79.626853][ T8478] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.626963][ T8478] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 79.627017][ T8478] BTRFS info (device loop4): using free-space-tree [ 79.715541][ T8493] loop3: detected capacity change from 0 to 8192 [ 79.722898][ T1979] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 79.731396][ T8462] done [ 79.734714][ T8462] bcachefs (loop2): check_alloc_info... done [ 79.747601][ T8462] bcachefs (loop2): check_lrus... done [ 79.751631][ T8478] BTRFS warning (device loop4): couldn't read tree root [ 79.751707][ T8478] BTRFS warning (device loop4): try to load backup roots slot 1 [ 79.752245][ T2007] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 79.761389][ T8478] BTRFS warning (device loop4): couldn't read tree root [ 79.761466][ T8478] BTRFS warning (device loop4): try to load backup roots slot 2 [ 79.761699][ T2007] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 79.761777][ T8478] BTRFS warning (device loop4): couldn't read tree root [ 79.761800][ T8478] BTRFS warning (device loop4): try to load backup roots slot 3 [ 79.773553][ T8462] bcachefs (loop2): check_btree_backpointers... done [ 79.781638][ T8462] bcachefs (loop2): check_backpointers_to_extents... done [ 79.801815][ T8478] BTRFS info (device loop4): rebuilding free space tree [ 79.815948][ T8462] bcachefs (loop2): check_extents_to_backpointers... [ 79.823585][ T8462] bcachefs (loop2): scanning for missing backpointers in 6/128 buckets [ 79.824068][ T8462] done [ 79.846929][ T8462] bcachefs (loop2): check_alloc_to_lru_refs... [ 79.847152][ T8478] BTRFS info (device loop4): checking UUID tree [ 79.851692][ T8462] done [ 79.862333][ T8462] bcachefs (loop2): bucket_gens_init... done [ 79.896902][ T8462] bcachefs (loop2): check_snapshot_trees... done [ 79.947142][ T8503] loop0: detected capacity change from 0 to 32768 [ 79.954765][ T8462] bcachefs (loop2): check_snapshots... [ 79.955043][ T8462] bcachefs (loop2): snapshot points to missing/incorrect tree: [ 79.955081][ T8462] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 79.955427][ T8462] bcachefs (loop2): snapshot points to missing/incorrect tree: [ 79.955445][ T8462] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 79.971927][ T8462] done [ 79.976402][ T8462] bcachefs (loop2): check_subvols... done [ 79.984199][ T8503] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 79.988763][ T6472] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.009880][ T8462] bcachefs (loop2): check_subvol_children... done [ 80.018236][ T8462] bcachefs (loop2): delete_dead_snapshots... done [ 80.021014][ T8462] bcachefs (loop2): check_inodes... done [ 80.029720][ T8462] bcachefs (loop2): check_extents... done [ 80.034700][ T8462] bcachefs (loop2): check_indirect_extents... done [ 80.039736][ T8462] bcachefs (loop2): check_dirents... done [ 80.076553][ T8462] bcachefs (loop2): check_xattrs... done [ 80.081005][ T8503] XFS (loop0): Ending clean mount [ 80.088067][ T8462] bcachefs (loop2): check_root... done [ 80.092912][ T8503] XFS (loop0): Quotacheck needed: Please wait. [ 80.099278][ T8462] bcachefs (loop2): check_unreachable_inodes... done [ 80.115568][ T8462] bcachefs (loop2): check_subvolume_structure... done [ 80.124091][ T8462] bcachefs (loop2): check_directory_structure... done [ 80.134774][ T8462] bcachefs (loop2): check_nlinks... done [ 80.140677][ T8503] XFS (loop0): Quotacheck: Done. [ 80.144388][ T8462] bcachefs (loop2): resume_logged_ops... done [ 80.146391][ T8462] bcachefs (loop2): delete_dead_inodes... done [ 80.154660][ T8462] bcachefs (loop2): set_fs_needs_rebalance... done [ 80.186726][ T8503] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x50/0xf0, xfs_refcountbt block 0x28 [ 80.187003][ T8503] XFS (loop0): Unmount and run xfs_repair [ 80.187025][ T8503] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 80.187046][ T8503] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 80.187067][ T8503] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 80.187086][ T8503] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 80.187106][ T8503] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 80.187125][ T8503] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.187145][ T8503] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.187204][ T8503] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.187225][ T8503] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.187248][ T8503] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x28 len 8 error 74 [ 80.201252][ T8503] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x590/0xae8 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 80.201309][ T8503] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 80.270344][ T8462] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 80.270400][ T8462] bcachefs (loop2): check_alloc_info... done [ 80.290835][ T8462] bcachefs (loop2): check_lrus... done [ 80.290929][ T8462] bcachefs (loop2): check_btree_backpointers... done [ 80.291292][ T8462] bcachefs (loop2): check_backpointers_to_extents... done [ 80.292012][ T8462] bcachefs (loop2): check_extents_to_backpointers... [ 80.292715][ T8462] bcachefs (loop2): scanning for missing backpointers in 1/128 buckets [ 80.322086][ T8462] done [ 80.327034][ T8462] bcachefs (loop2): check_alloc_to_lru_refs... done [ 80.329928][ T8462] bcachefs (loop2): bucket_gens_init... done [ 80.332412][ T6478] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 80.336074][ T8462] bcachefs (loop2): check_snapshot_trees... done [ 80.336426][ T8462] bcachefs (loop2): check_snapshots... done [ 80.336529][ T8462] bcachefs (loop2): check_subvols... done [ 80.336631][ T8462] bcachefs (loop2): check_subvol_children... done [ 80.336683][ T8462] bcachefs (loop2): delete_dead_snapshots... done [ 80.336759][ T8462] bcachefs (loop2): check_inodes... done [ 80.337044][ T8462] bcachefs (loop2): check_extents... done [ 80.337315][ T8462] bcachefs (loop2): check_indirect_extents... done [ 80.337381][ T8462] bcachefs (loop2): check_dirents... done [ 80.337821][ T8462] bcachefs (loop2): check_xattrs... done [ 80.337933][ T8462] bcachefs (loop2): check_root... done [ 80.338007][ T8462] bcachefs (loop2): check_unreachable_inodes... done [ 80.338115][ T8462] bcachefs (loop2): check_subvolume_structure... done [ 80.338189][ T8462] bcachefs (loop2): check_directory_structure... done [ 80.338363][ T8462] bcachefs (loop2): check_nlinks... done [ 80.338617][ T8462] bcachefs (loop2): resume_logged_ops... done [ 80.338669][ T8462] bcachefs (loop2): delete_dead_inodes... done [ 80.338766][ T8462] bcachefs (loop2): set_fs_needs_rebalance... done [ 80.352678][ T8520] loop3: detected capacity change from 0 to 32768 [ 80.370336][ T8520] [ 80.370336][ T8520] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.370336][ T8520] [ 80.379253][ T8462] bcachefs (loop2): done starting filesystem [ 80.396990][ T8520] [ 80.396990][ T8520] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.396990][ T8520] [ 80.404341][ T8520] [ 80.404341][ T8520] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.404341][ T8520] [ 80.406483][ T8520] [ 80.406483][ T8520] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.406483][ T8520] [ 80.421470][ T8520] [ 80.421470][ T8520] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.421470][ T8520] [ 80.457228][ T8462] bcachefs (loop2): going read-only [ 80.458850][ T8462] bcachefs (loop2): finished waiting for writes to stop [ 80.481420][ T6477] [ 80.481420][ T6477] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.481420][ T6477] [ 80.498099][ T6477] [ 80.498099][ T6477] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.498099][ T6477] [ 80.514278][ T8462] bcachefs (loop2): flushing journal and stopping allocators, journal seq 34 [ 80.519711][ T8521] loop1: detected capacity change from 0 to 32768 [ 80.525610][ T8462] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 34 [ 80.541567][ T8462] bcachefs (loop2): clean shutdown complete, journal seq 35 [ 80.545332][ T8521] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.586128][ T8462] bcachefs (loop2): marking filesystem clean [ 80.615937][ T8521] XFS (loop1): Ending clean mount [ 80.623355][ T8521] XFS (loop1): Quotacheck needed: Please wait. [ 80.675779][ T8521] XFS (loop1): Quotacheck: Done. [ 80.703316][ T6473] bcachefs (loop2): shutting down [ 80.739134][ T6474] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.805665][ T6473] bcachefs (loop2): shutdown complete [ 80.941038][ T8563] vivid-000: disconnect [ 80.943203][ T8562] vivid-000: reconnect [ 81.849264][ T8579] loop3: detected capacity change from 0 to 32768 [ 81.886071][ T8579] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 81.914670][ T8579] XFS (loop3): Ending clean mount [ 81.947368][ T8605] lo speed is unknown, defaulting to 1000 [ 81.954696][ T8605] lo speed is unknown, defaulting to 1000 [ 81.956307][ T8605] lo speed is unknown, defaulting to 1000 [ 81.963271][ T8605] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.969015][ T8605] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 82.013294][ T8605] lo speed is unknown, defaulting to 1000 [ 82.025560][ T8605] lo speed is unknown, defaulting to 1000 [ 82.026254][ T8605] lo speed is unknown, defaulting to 1000 [ 82.026948][ T8605] lo speed is unknown, defaulting to 1000 [ 82.027623][ T8605] lo speed is unknown, defaulting to 1000 [ 82.124874][ T8595] loop4: detected capacity change from 0 to 32768 [ 82.143437][ T8589] loop1: detected capacity change from 0 to 32768 [ 82.145673][ T8595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.640 (8595) [ 82.148319][ T2007] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 82.148564][ T2007] XFS (loop3): Unmount and run xfs_repair [ 82.148584][ T2007] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 82.148605][ T2007] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 82.148625][ T2007] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 82.148644][ T2007] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 82.148662][ T2007] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 82.148681][ T2007] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 82.148700][ T2007] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 82.148718][ T2007] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 82.148737][ T2007] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 82.148758][ T2007] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x4 len 4 error 74 [ 82.149114][ T2007] XFS (loop3): page discard on page 00000000a0f203a0, inode 0x1809, pos 0. [ 82.153148][ T6477] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 82.198034][ T8595] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.198313][ T6477] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 82.204960][ T8595] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 82.207606][ T8595] BTRFS info (device loop4): disk space caching is enabled [ 82.209705][ T8595] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 82.243747][ T8589] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.338128][ T8628] netlink: 56 bytes leftover after parsing attributes in process `syz.2.622'. [ 82.358363][ T8595] BTRFS info (device loop4): rebuilding free space tree [ 82.373577][ T8595] BTRFS info (device loop4): disabling free space tree [ 82.373665][ T8595] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.373711][ T8595] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.472647][ T8589] XFS (loop1): Ending clean mount [ 82.591109][ T6474] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.598118][ T1979] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 82.602490][ T8648] No such timeout policy "syz0" [ 82.603032][ T8646] loop3: detected capacity change from 0 to 1024 [ 82.629467][ T8646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.777288][ T8658] netlink: 'syz.2.653': attribute type 3 has an invalid length. [ 82.791548][ T6477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.834478][ T6472] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.971820][ T8668] Zero length message leads to an empty skb [ 83.044682][ T8660] loop0: detected capacity change from 0 to 32768 [ 83.089316][ T8660] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.165050][ T8660] XFS (loop0): Ending clean mount [ 83.243737][ T8692] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 83.251900][ T1979] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.252217][ T1979] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.265232][ T6478] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.350570][ T8694] loop1: detected capacity change from 0 to 4096 [ 83.389762][ T8694] ntfs3(loop1): ino=b, mi_enum_attr [ 83.391105][ T8694] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 83.393910][ T8694] ntfs3(loop1): Failed to load $Extend (-22). [ 83.393989][ T8694] ntfs3(loop1): Failed to initialize $Extend. [ 83.412405][ T8687] loop4: detected capacity change from 0 to 32768 [ 83.419379][ T8687] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 83.439261][ T8687] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.491037][ T8687] XFS (loop4): Ending clean mount [ 83.502055][ T8687] XFS (loop4): Quotacheck needed: Please wait. [ 83.515546][ T1981] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x10 [ 83.515743][ T1981] XFS (loop4): Unmount and run xfs_repair [ 83.515763][ T1981] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 83.515784][ T1981] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 83.515803][ T1981] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 83.515822][ T1981] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 83.515841][ T1981] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 83.515860][ T1981] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 83.515878][ T1981] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 83.515897][ T1981] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 83.515916][ T1981] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 83.515937][ T1981] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x10 len 8 error 74 [ 83.517785][ T8687] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 83.622255][ T6472] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.633685][ T6472] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 83.733131][ T8711] loop0: detected capacity change from 0 to 64 [ 83.782721][ T8704] hfs: keylen 94 too large [ 83.793583][ T8704] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 84.029936][ T8731] loop1: detected capacity change from 0 to 256 [ 84.053849][ T8731] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.083144][ T8734] loop3: detected capacity change from 0 to 512 [ 84.087547][ T8734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.097843][ T8734] EXT4-fs (loop3): 1 truncate cleaned up [ 84.098762][ T8734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.250525][ T8740] [ 84.251184][ T8740] ====================================================== [ 84.253042][ T8740] WARNING: possible circular locking dependency detected [ 84.254925][ T8740] 6.15.0-rc2-syzkaller-gc72692105976 #0 Not tainted [ 84.256697][ T8740] ------------------------------------------------------ [ 84.258616][ T8740] syz.1.678/8740 is trying to acquire lock: [ 84.260239][ T8740] ffff0000f47e8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x48/0xa7c [ 84.263054][ T8740] [ 84.263054][ T8740] but task is already holding lock: [ 84.264967][ T8740] ffff0000f47e8258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x60/0x9f8 [ 84.267344][ T8740] [ 84.267344][ T8740] which lock already depends on the new lock. [ 84.267344][ T8740] [ 84.270139][ T8740] [ 84.270139][ T8740] the existing dependency chain (in reverse order) is: [ 84.272444][ T8740] [ 84.272444][ T8740] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}: [ 84.274470][ T8740] sockopt_lock_sock+0x88/0x148 [ 84.275852][ T8740] do_ip_setsockopt+0x138c/0x32c0 [ 84.277348][ T8740] ip_setsockopt+0x80/0x128 [ 84.278689][ T8740] raw_setsockopt+0x104/0x2a4 [ 84.280063][ T8740] sock_common_setsockopt+0xb0/0xcc [ 84.281652][ T8740] do_sock_setsockopt+0x2a0/0x4e0 [ 84.283066][ T8740] __arm64_sys_setsockopt+0x170/0x1e0 [ 84.284541][ T8740] invoke_syscall+0x98/0x2b8 [ 84.285915][ T8740] el0_svc_common+0x130/0x23c [ 84.287291][ T8740] do_el0_svc+0x48/0x58 [ 84.288516][ T8740] el0_svc+0x54/0x168 [ 84.289628][ T8740] el0t_64_sync_handler+0x84/0x108 [ 84.291047][ T8740] el0t_64_sync+0x198/0x19c [ 84.292386][ T8740] [ 84.292386][ T8740] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 84.294250][ T8740] __mutex_lock_common+0x1f0/0x2604 [ 84.295745][ T8740] mutex_lock_nested+0x2c/0x38 [ 84.297089][ T8740] rtnl_lock+0x20/0x2c [ 84.298286][ T8740] start_sync_thread+0xe0/0x24bc [ 84.299768][ T8740] do_ip_vs_set_ctl+0x558/0xd84 [ 84.301221][ T8740] nf_setsockopt+0x270/0x290 [ 84.302585][ T8740] ip_setsockopt+0x118/0x128 [ 84.303859][ T8740] tcp_setsockopt+0xcc/0xe8 [ 84.305114][ T8740] sock_common_setsockopt+0xb0/0xcc [ 84.306695][ T8740] smc_setsockopt+0x1f8/0xd0c [ 84.308039][ T8740] do_sock_setsockopt+0x2a0/0x4e0 [ 84.309429][ T8740] __arm64_sys_setsockopt+0x170/0x1e0 [ 84.310960][ T8740] invoke_syscall+0x98/0x2b8 [ 84.312263][ T8740] el0_svc_common+0x130/0x23c [ 84.313645][ T8740] do_el0_svc+0x48/0x58 [ 84.314899][ T8740] el0_svc+0x54/0x168 [ 84.316047][ T8740] el0t_64_sync_handler+0x84/0x108 [ 84.317562][ T8740] el0t_64_sync+0x198/0x19c [ 84.318824][ T8740] [ 84.318824][ T8740] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 84.321044][ T8740] __lock_acquire+0x17b8/0x32c4 [ 84.322553][ T8740] lock_acquire+0x150/0x2e8 [ 84.323868][ T8740] __mutex_lock_common+0x1f0/0x2604 [ 84.325370][ T8740] mutex_lock_nested+0x2c/0x38 [ 84.326675][ T8740] smc_switch_to_fallback+0x48/0xa7c [ 84.328230][ T8740] smc_sendmsg+0xfc/0x9f8 [ 84.329497][ T8740] __sys_sendto+0x360/0x4d8 [ 84.330807][ T8740] __arm64_sys_sendto+0xd8/0xf8 [ 84.332286][ T8740] invoke_syscall+0x98/0x2b8 [ 84.333573][ T8740] el0_svc_common+0x130/0x23c [ 84.334991][ T8740] do_el0_svc+0x48/0x58 [ 84.336280][ T8740] el0_svc+0x54/0x168 [ 84.337478][ T8740] el0t_64_sync_handler+0x84/0x108 [ 84.338962][ T8740] el0t_64_sync+0x198/0x19c [ 84.340270][ T8740] [ 84.340270][ T8740] other info that might help us debug this: [ 84.340270][ T8740] [ 84.342980][ T8740] Chain exists of: [ 84.342980][ T8740] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET [ 84.342980][ T8740] [ 84.346811][ T8740] Possible unsafe locking scenario: [ 84.346811][ T8740] [ 84.348766][ T8740] CPU0 CPU1 [ 84.350156][ T8740] ---- ---- [ 84.351514][ T8740] lock(sk_lock-AF_INET); [ 84.352683][ T8740] lock(rtnl_mutex); [ 84.354453][ T8740] lock(sk_lock-AF_INET); [ 84.356218][ T8740] lock(&smc->clcsock_release_lock); [ 84.357641][ T8740] [ 84.357641][ T8740] *** DEADLOCK *** [ 84.357641][ T8740] [ 84.359801][ T8740] 1 lock held by syz.1.678/8740: [ 84.361076][ T8740] #0: ffff0000f47e8258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x60/0x9f8 [ 84.363637][ T8740] [ 84.363637][ T8740] stack backtrace: [ 84.365182][ T8740] CPU: 1 UID: 0 PID: 8740 Comm: syz.1.678 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT [ 84.368016][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.370616][ T8740] Call trace: [ 84.371430][ T8740] show_stack+0x2c/0x3c (C) [ 84.372597][ T8740] dump_stack_lvl+0xe4/0x150 [ 84.373798][ T8740] dump_stack+0x1c/0x1028 [ 84.374906][ T8740] print_circular_bug+0x32c/0x334 [ 84.376168][ T8740] check_noncircular+0x15c/0x178 [ 84.377402][ T8740] __lock_acquire+0x17b8/0x32c4 [ 84.378674][ T8740] lock_acquire+0x150/0x2e8 [ 84.379776][ T8740] __mutex_lock_common+0x1f0/0x2604 [ 84.381115][ T8740] mutex_lock_nested+0x2c/0x38 [ 84.382422][ T8740] smc_switch_to_fallback+0x48/0xa7c [ 84.383801][ T8740] smc_sendmsg+0xfc/0x9f8 [ 84.384902][ T8740] __sys_sendto+0x360/0x4d8 [ 84.386036][ T8740] __arm64_sys_sendto+0xd8/0xf8 [ 84.387257][ T8740] invoke_syscall+0x98/0x2b8 [ 84.388456][ T8740] el0_svc_common+0x130/0x23c [ 84.389656][ T8740] do_el0_svc+0x48/0x58 [ 84.390704][ T8740] el0_svc+0x54/0x168 [ 84.391748][ T8740] el0t_64_sync_handler+0x84/0x108 [ 84.393016][ T8740] el0t_64_sync+0x198/0x19c [ 84.470213][ T6477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.274432][ T6488] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 85.274436][ T6486] Bluetooth: hci5: command 0x1003 tx timeout