last executing test programs:

4.661978382s ago: executing program 0 (id=736):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x6, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0})

4.619331394s ago: executing program 0 (id=738):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x0, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}]}, 0x1c}}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300)

4.168510411s ago: executing program 0 (id=743):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.041690015s ago: executing program 0 (id=745):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000340)='./file0\x00', 0x408, &(0x7f0000000480)={[{@check_int_print_mask={'check_int_print_mask', 0x3d, 0x100000000}}, {@enospc_debug}, {@noinode_cache}, {@subvol={'subvol', 0x3d, 'notreelog'}}, {@notreelog}, {@noenospc_debug}, {@discard_async}], [{@obj_user={'obj_user', 0x3d, '>@:$'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, 'cpuacct.P\x06age_pertB\xf4\xee?\xeb\x87\xd8cpu\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x4, 0x55c0, &(0x7f0000005600)="$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")
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2)

3.453584422s ago: executing program 0 (id=747):
syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000380)=0x40000, 0x12)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffff1, 0x2})

2.118513164s ago: executing program 0 (id=765):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@fallback=r1, 0x35, 0x0, 0x5ffa5a98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.943395067s ago: executing program 4 (id=770):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)

1.852120973s ago: executing program 3 (id=772):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c0009800800020003000000280002"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x14008004)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.84352737s ago: executing program 4 (id=773):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]})

1.703240719s ago: executing program 3 (id=775):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x1ff)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)

1.374059091s ago: executing program 3 (id=779):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000480)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0xfffffff9, 0x8010000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x91, 0xfffffffe}}, 0x50)

1.373797039s ago: executing program 2 (id=780):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0xff, 0x6, 0x6, 0xbf}, 0x20)

1.271963375s ago: executing program 3 (id=783):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.217834688s ago: executing program 2 (id=784):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x44, r1, 0x852dd6c070cd7e4d, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x8850)

1.162359192s ago: executing program 2 (id=785):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0)

1.012601572s ago: executing program 2 (id=786):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

945.929046ms ago: executing program 4 (id=788):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000240)="010120000a00140017007ef52f555f2a0c9f280000000000006ecb143b1f858ce632f47042195ecf3d77ccc1b6d78839980700f37fe800", 0x37, 0x24000014, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x6a}, 0x14)

885.724806ms ago: executing program 3 (id=789):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x7351, 0x8001)
ioctl$FITRIM(r0, 0x40406f06, &(0x7f0000000100)={0x86, 0x7e0000, 0x1d7e})

824.416277ms ago: executing program 2 (id=790):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x20108c2, &(0x7f0000000c00)=ANY=[], 0xff, 0x61b5, &(0x7f0000003380)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuob7/zz9MRr0bER09FbG2vr9aLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAChNVVVVJ33MP5M+33fb7hQAMBX59b9K8vJTX//6n2/9ZZb6o1ar1Wr1FOqmarx7zSIiNpq3qd8zOBwPACfMRnzcdhdokfyL1o+IJ9ruBDDTOm13gGOxtb2+2kn5dpqvB8u77flckH35b3QeXN8xaXqQ0XNMpvX42oxePDOhPwtT6sMsyfl3R/O/tts+TOsdd/7TMin/4e6lT8XJ+fdG8x9xevLvjs2/VDn//iPl35M/AAAAAADMsPz//0stH/+dO/qmHMonHf9dnlIfAAAAAAAAAOBxO+r4fw8Y/w8AAABmVv1Zvfabp/aWTfoutnr51U7EkyPrA4VJF8sstt0PAAAAAAAAAAAAAChJf/cc3qudiEFEPLm4WFVV/dM0Wj+qo97+pCt9+6FkbT/JAwDAro+eGrmWvxMxHxFX03f9DRYXF6tqfmGxWqwW5vL72eHcfLXQ+Fybp/WyueEh3hD3h1X9y+Ybt2s66PPyQe2jv6++r2HVO0THHpNB+mtOaG4pbABIdl+NtrwinTJV9fSkNx+wj/3/FFqKpbYfV8y+th+mAAAAwPGrqqrqpK/zPpOO+Xfb7hQAMBX59X/0uMCR6u6E9ojH8/vVarVarVZ/qrqpGu9es4iIjeZt6vcMhuMHgBNmIz5uuwu0SP5F60fEc213AphpnbY7wLHY2l5f7aR8O83XgzS+ez4XZF/+G52d2+Xbj5seZPQck2k9vjajF89M6M+zU+rDLMn5d0fzv7bbPkzrHXf+0zIp/+HOJXPlyfn3RvMfcXry747Nv1Q5//4j5d+TPwAAAAAAzLD8//9Ljv/mTQYAAAAAAACAE2dre301X/eaj/9/bsx6rv88nXL+nUfNfyHNy/9Ey/l3R/L/8sh6vcb8/Tf39v9/b6+v/v7Ovz6bp4fNfy7PdNIjq5MeEZ10T51+mh5l6x62OegN63sadLq9fjrnpxq8EzfiZqzFhX3rdtPfY699ZV973dPBvvaL+9r7D7Vf2tc+SN87UC3k9nOxGj+Jm/H2TnvdNnfA9s8f0F4d0J7z73n+L1LOv9/4qfNfTO2dkWnt/ofdh/b75nTc/bxx4/O/vHD8m3Ogzeg92LamevvOttCfnb/JE8P42e21W+fuXr9z59ZKpMm+pRcjTR6znP9g52du7/n/hd32/Lzf3F/vfzh85PxnxWb0J+b/QmO+3t6Xpty3NuT8h+kn5/92ah+//5/k/Cfv/y+30B8AAAAAAAAAAAAAAAD4JFVV7Vwi+kZEXE7X/7R1bSYAMF359b9K8nK1Wn2K67RoZvqjVqunVjdV473eLCLir83b1O8ZfjHulwEAs+x/EfGPtjtBa+RfsPx9f/X0xbY7A0zV7fc/+NH1mzfXbt1uuycAAAAAAAAAwKeVx/9cboz//GJELI2st2/81zdj+ajjf/bzzIMBRh/zQN8TbHaHvW5juPHnY2d87nOTxv8+Gw+P/53HxO01t2OCwQHtwwPa5w5onx+7dC+tsRd6NOT8n2+Md17nf2Zk+PUSxn8dHfO+BDn/s43Hc53/l0bWa+Zf/Xbm8t847Iqb0d2X//k77/30/O33P3jlxnvX3117d+3Hl1ZWLly6fPnKlSvn37lxc+3C7r/H0+sZkPPPY187D7QsOf+cufzLkvP/QqrlX5ac/xdTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUi3/suT8v5Jq+Zdla3t9rs7/5VTLvyx5//9qquVflpz/K6mWf1ly/udSLf+y5PzPp/oQ+ft6+FMk55+PcNn/y5LzX0m1/MuS87+YavmXJed/KdXyL0vO/9VUy78sOf+vpVr+Zcn5X061/MuS8/96quVflpz/lVTLvyw5/2+kWv5lyfl/M9XyL0vO/7VUy78sOf9vpVr+Zcn5fzvV8i9Lzv87qZZ/WXL+r6da/mXZ+/5/M2bMmMkzbT8zAQAAAAAAAAAAAACjpnE6cdvbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8nx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/eYuS67zqAn9mb107TuG2aOsFt147rus42u77El4Kpm15JW0quNFxiG+/a2da3eG2ahEh2SUsj1REVKiI8AG0VQSSEaqE+FBRKHhCXJwIP5QUVIVUiQmmUVlQCVLJo5vz/f8/Mzs7Z9U7Ws+d8PlLy2505M+fMmTOz+931dw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTZ9cPpLtSzL6v81/rc+y95Q/3jt2PrGZe+71lsIAAAALNf/Nf7/6g3pgoOLuFHTMn/3jn/81tzc3Fz26cHfHf7q3Fy6YizLhtdkWeO66PK/P1hrXiZ4MhutDTR9PlCw+sGC64cKrh8uuH6k4Po1BdePFlw/bwfMszb/eUzjzrY0Plyf79Lsxmy4cd2WDrd6srZmYCD+LKeh1rjN3PCxbCY7kU1nky3L58vWGss/v6m+ro9lcV0DTevaWD9CfvjE0bgNtbCPt7Ss68p9Rj/4QDb2ox8+cfSPz718c6dZuBta7i/fzm2b69v5hXBJvq21bE3aJ3E7B5q2c2OH52SwZTtrjdvVP27fzlcXuZ2DVzZzRbU/56PZQOPjFxv7aaj5x3ppP20Ml/33rVmWXbyy2e3LzFtXNpCta7lk4MrzM5ofkfX7qB9Kb86GlnScblrEcVqfU1taj9P210R8/jeF2w0tsA3NT9MPPj8y73lf6nEa1R/1Qq+V9mOw16+VfjkG43HxYuNBP9XxGNwSHv8TWxc+BjseOx2OwfS4m47BzUXH4MDIYGOb05NQa9zmyjG4o2X5wcaaao350tbux+DEuZNnJmYfe/y9MyePHJ8+Pn1q144dk7v27Nm3b9/EsZkT05P5/69yb/e/ddlAeg1sDvsuvgbe3bZs86E69/XevQ5Hu7wO17ct2+vX4VD7g6utzAty/jGdvzbuq+/00UsD2QKvscbzs335r8P0uJteh0NNr8OOX1M6vA6HFvE6rC9zZvvivmcZavqv0za8Xl8L1jcdg+3fj7Qfg73+fqRfjsHRcFz86/aFvxZsDNv71PhSvx8ZnHcMpocb3nvql6Tv90f3NUan4/KW+hXXjWTnZ6fP3v7okXPnzu7IwlgRb2k6VtqP13VNjymbd7wOLPl4PTjzjqdu6XD5+rCvRt9b/9/ogs9VfZndt3d/rhpf3Trvz5ZLd2Zh9NhK789OX83r+zNlyS77s77MFyaW/714yqVN77/DC7z/xtz/Wr6+dFdPDg4P5a/fwbR3hlvej1ufqqHGe1etse5XJxb3fjwc/lvp9+Mbu7wfb2hbttfvx8PtDy6+H9eKftqxPO3P52g4Tk5Mdn8/ri+zYedSj8mhru/Ht4ZZC/v/PSEppFzUdOwsdNymdQ0NDYfHNRTX0Hqc7mpZfjhks/q6ntt5dcfptlvz+xpMj+6KlTpOx9qW7fVxmt6vFjpOa0U/fbs67c/naDgubtzV/TitL/PC7uW/d66NHza9d44UHYPDgyP1bR5OB2H+fj+3Nh6Dt2dHs9PZiWyqce1I43iqNdY1fsfijsGR8N9Kv1du6HIMbmtbttfHYPo6ttCxVxua/+B7oP35HA3HxTN3dD8G68t8aG9vv3fdFi5JyzR979r+87WFfuZ1S9tuej1/5lXfzr/Z2/1ns/VlTuxbas7svp9uC5dc12E/tb9+F3pNTWUrs582hO18ed/C+6m+PfVlvrp/kcfTwSzLLjxyZ+PnveH3K39+/rvfavm9S6ff6Vx45M5Xrj/2t0vZfgBWv9fysS7/Wtf0m6nF/P4fAAAAWBVi7h8IM5H/AQAAoDRi7o//KjyR/wEAAKA0Yu4fCjOpSP7f8KGXZ167kKVm/lwQr0+74a58udhxnQyfj81dUb/8zmenf/yXFxa37oEsy35y1290XH7DXXG7cmNhOy9/uPXy+Te8sKj1H77/ynLN/fWvhfuPj2exh0GnCu5klmXP3/B0Yz1jD15qzBfuOtyY91x86sn6Mq/uzz+Pt3/pLfnyfxDKvwePHWm5/UthP3w/zMmPd94f8XbfvPSejXsfuLK+eLva5jc2HvYzD+X3G/9OzleezJeP+3mh7f+rLz/3zfryj76r8/ZfGOi8/c+F+302zP95e75883NQ/zze7oth++P64u1u/8Z3Om7/5S/ly5/5SL7c4TDj+reFz7d85OWZ5v31aO1Iy+PKPpovF9c/+d3fblwf7y/ef/v2jx661LI/2o+PF/45v5+JtuXj5XE90V+0rb9+P83HZ1z/c791uGU/F63/8j0vvb1+v+3rv61tucG227f/xaY//OLTHdcXt+fgn51peTwH7w6v47D+Zx4Kx2O4/n8vP92y3ujw3a3vP3H5r62/0PJ4oo/9KF//5fcfb8z/GPvx71/3huvfePGd9X2XZS/em99f0fqP/9Hplu3/+k3bG89HvD529NvXv5C4/rOfGz91evb8zFTTXm387ZxP5NuzZnTtuvr23hDeW9s/P3T63MPTZ8cmxyazbKy8f0Lvqn0jzFfycXGpt99+f3g+b/m959dt/acvx8v/5b788ksfz79uvTss95Vw+fr8+ZurLXP9z2y6qfH6rr2Qf97SY++BjVv+c9+iFgyPv/37gni8n3nrw439UL+u8XUjvq6Xuf3fm8rv59thv86Fv8y8+aYr62tePv5thEv35q/3Ze+/8DYXn9c/Cc/3J7+f33/crvh4vxe+j/nOhtb3u3h8fPvCQPv9N/6Kx8XwfpJdzK+PS8X9fenVmzpuXvw7JNnFmxuf/066n5uX9DAXMvvY7MSJmVPnH504Nz17bmL2sccPnTx9/tS5Q42/5XnoM0W3v/L+tK7x/jQ1vWd3Nrk2y7LT2eQKvGG9Pttf/2hx23/m/qNTeye3Tk0fO3L+2Ln7z0yfPX50dvbo9NTs1iPHjk1/ruj2M1MHduzcv2vvzvHjM1MH9u3fv2v/+Myp0/XNyDeqwJ7Jz46fOnuocZPZA7v377jjjt2T4ydPT00f2Ds5OX6+6PaNr03j9Vv/+vjZ6RNHzs2cnB6fnXl8+sCO/Xv27Cz8a4AnzxybHZs4e/7UxPnZ6bMT+WMZO9e4uP61r+j2lNPsv+Xfz7ar5X+IL/vUbXvS32ete/bzC95VvkjbHxB9Ofwtmn9405l9i/k85v7hMJOK5H8AAACogpj7R8JM5H8AAAAojZj714SZyP8AAABQGjH3j4aZVCT/6//r/y+u/59fr/9frf7/mUfyXulq7//H/vyq6/8P52/K+v9Lc437/8tev/6//n/5+v+L78+v9u3X/9f/Z75+6//H3L82yyqZ/wEAAKAKYu5fF2Yi/wMAAEBpxNx/XZiJ/A8AAAClEXP/G8JMOuT/tSu2VStH/39R/f+dRYWr8vf/nf9f/z9bnf3/+OSsxv6/8/9flSX37x+4r+VT/f9A/1//X/9f/1//n2UbXvCaa9X/j7n/+jATv/8HAACA0oi5/41hJvI/AAAAlEbM/TeEmcj/AAAAUBox968PM6lI/tf/d/5//X/9/1L3/5d7/v+mjdH/Xx2c/z9qfyXl9P8LXHX/f1T/fzX2/4d7u/393f8v3Hz9f14X/Xb+/5j73xRmUpH8DwAAAFUQc/+bw0zkfwAAACiNmPvfEmYi/wMAAEBpxNx/Y5hJRfK//r/+v/6//r/+f+f1F5//P/9I/7+/6P93p/9fwPn/q9X/7/H293f/v9fn/x/+cPvt9f/ppN/6/zH3vzXMpCL5HwAAAKog5v6bwkzkfwAAACiNmPvfFmYi/wMAAEBpxNy/IcykIvlf/1//X/9f/1//v/P6i/v/Of3//qL/353+fwH9f/1//f/F9f87fPOr/08n/db/j7n/5jCTiuR/AAAAqIKY+28JM5H/AQAAoDRi7v+pMBP5HwAAAEoj5v6NYSYVyf/6//r/+v/V6v/fNqL/r/9fbvr/3en/F9D/1//X/1/k+f/nW0r/f03RnVEa/db/j7n/7WEmFcn/AAAAUAUx978jzET+BwAAgNKIuf+dYSbyPwAAAJRGzP1jYSYVyf/6/+Xq///pXz/zzkz/X/+/YP0l7f/Hw0D/v+L0/7vT/y+g/6//r/+/Iv1/qqPf+v8x928KM6lI/gcAAIAqiLl/c5iJ/A8AAAClEXP/rWEm8j8AAACURsz9W8JMKpL/9f/L1f+P9P/1/7utv6T9/0T/v9r0/ztoepHq/xfQ/9f/r3z/P373q/9Pb/Rb/z/m/neFmVQk/wMAAEAVxNy/NcxE/gcAAIDSiLn/3WEm8j8AAACURsz928JMKpL/9f/1//X/9f/1/zuvX/9/ddL/726p/f8R/X/9f/3/ivX/nf+f3uq3/n/M/e8JM6lI/gcAAIAqiLl/e5iJ/A8AAAClEf/9Zv7vXuV/AAAAKKOY+8fDTCqS//X/9f+r1P+v6f/r/+v/l57+f3fO/19A/1//X/9f/5+e6rf+f8z97w0zqUj+BwAAgCqIuf/2MBP5HwAAAEoj5v6JMBP5HwAAAEoj5v7JMJOK5H/9f/3/KvX/nf9f/1//v/z0/7vT/y+g/6//X7b+f5bp/3NN9Vv/P+b+HWEmFcn/AAAAUAUx9+8MM5H/AQAAoDRi7t8VZiL/AwAAQGnE3L87zKQi+V//X/9f/1//X/+/8/r1/1cn/f/u9P8L6P/r/5et/+/8/1xj/db/j7n/jjCTiuR/AAAAqIKY+/eEmcj/AAAAUBox9+8NMwn5v9O/6wYAAABWl5j794WZVOT3/039/5FM/3/19v9/8+9b1q3/r//fbf296f+v1f8PU/+/v5S0/9/+srhq+v8F9P/1//X/9f/pqX7r/8fcvz/MpCL5HwAAAKog5v73hZnI/wAAAFAaMff/dJiJ/A8AAAClEXP/z4SZVCT/O/9/Sfr/bfT/9f+7rd/5//X/y6yk/f+eKVX/f0D/X/+/v7Zf/1//n/le//5//Ghx/f+Y+w+EmVQk/wMAAEAVxNz/s2Em8j8AAACURsz97w8zkf8BAACgNGLuPxhmUpH8r/+v/6//r/+/vP7/2AL9//dn7fqx/18/ePT/y0X/v7tS9f+d/1//v8+2X/9f/5/5+u38/zH3fyDMpCL5HwAAAKog5v47w0zkfwAAACiNmPs/GGYi/wMAAEBpxNz/oTCTiuR//X/9f/1//X/n/++8fv3/1Un/vzv9/wL6//r/+v/6//RUv/X/Y+7/cJhJRfI/AAAAVEHM/R8JM5H/AQAAoDRi7v9omIn8DwAAAKURc//Hwkwqkv/1//X/9f/1//X/O69f/3910v/vTv+/gP6//r/+v/4/PdVv/f+Y+38uzKQi+R8AAADKZ+28S2LuvyvMRP4HAACA0oi5/+NhJvI/AAAAlEbM/Z8IM6lI/tf/1//X/9f/1//vvH79/9VJ/787/f8C+v/6//r/+v/0VL/1/2Pu/2SYSUXyPwAAAFRBzP0/H2Yi/wMAAEBpxNz/qTAT+R8AAABKI+b+XwgzqUj+1//X/++v/v/chebb6f/r/2e96v/Xb6T/Xwn6/93p/xfo0P9fo/+v/6//r//PVeu3/n/M/XeHmVQk/wMAAEAVxNx/T5iJ/A8AAAClEXP/vWEm8j8AAACURsz994WZVCT/6/9Xsv+fHnL/9f+d/1//3/n/9f+XR/+/O/3/As7/r/+v/6//T0/1W/8/5v77w0wqkv8BAACgCmLufyDMRP4HAACA0oi5/xfDTOR/AAAAKI2Y+z8dZlKR/K//X8n+fx+f/79s/f+hluOjSv3/0abnMx2X+v/6/ytA/787/f8C+v/6//3c/w9H89oFbq//Tz/qt/5/zP0PhplUJP8DAABAFcTc/0thJvI/AAAAlEbM/b8cZiL/AwAAQGnE3P8rYSYVyf/6//r/+v/O/+/8/53Xr/+/Oun/d6f/X0D/X/+/n/v/BfT/6Uf91v+Puf9Xw0wWDH6v/NciHiYAAADQR2LufyjMpCK//wcAAIAqiLn/UJiJ/A8AAAClEXP/4TCTiuR//f/2/n88o6r+v/6//r/+v/7/atS7/v/brs8y/X/9f/1//X/9f/1/lqPf+v8x9x8JM6lI/gcAAIAqiLn/18JM5H8AAAAojZj7j4aZyP8AAABQGjH3T4WZVCT/X8P+/3B/9v+d//9q+/8/0f/X/w/0/zvT/18Zzv/fnf5/Af1//X/9f/1/eqrf+v8x90+HmVQk/wMAAECJpR8Hx9x/LMxE/gcAAIDSiLn/eJiJ/A8AAAClEXP/w2EmFcn/zv+v/+/8/9ei/z/Usrz+f07/X/+/F/T/u9P/L6D/r/+v/6//T0/1W/8/5v6ZMJOK5H8AAACogpj7PxNmIv8DAABAacTc/9kwE/kfAAAASiPm/hNhJhXJ//r/+v9V7//Xsuyi8//r/3dav/7/6qT/353+fwH9f/1//X/9f3qq3/r/MfefDDOpSP4HAACAKoi5/1SYifwPAPD/7N1Hk2RnlcfhlEbtVjMfYdasWMJKfAS27IhgTQgjvJGE9yC8N8J7753w3nsvvLfCCiKaUPU5pyursu6t7rpVee/7Pk/ExJnuUE9lQ6GJP61fvADQjNz918Qt9j8AAAA0I3f/veKWtvd/xWj6f/1/7/3/aivv/6//9fr/C2bX/+8Jh/X/y7Cvv79q8193UBR+YP9/xztde3f9v/5f/z9I/6//1/+z19z6/9z9945b2t7/AAAA0JXc/feJW+x/AAAAaEbu/vvGLfY/AAAANCN3/7VxSyf7X/+v/9f/6//X+v+b9f/e/1827/8P0/+P0P/r//X/+n8mNbf+P3f//eKWTvY/AAAA9CB3//3jFvsfAAAAmpG7/wFxi/0PAAAAzcjd/8C4pZP9r/+fT/+f/6P/1/+n9f7/tPf/9/x+ov8/q/9nN/3/MP3/CP2//l//r/9nUnPr/3P3Pyhu6WT/AwAAQA9y9z84brH/AQAAoBm5+x8St9j/AAAA0Izc/Q+NWw7e/2eO/1OdHP3/fPr/lff/d+j/L/66rbz/v7z+3/v/rLlpdfHvCfr//fT/I0b6/9VK/z/k0P385t/ecj7/AfT/+n/2m1v/n7v/YXHLXVar05f7mwQAAABmJXf/w+MW//w/AAAANCN3/3Vxi/0PAAAAzcjdf33c0sn+1//r//X/+n/9/+avr/9fJu//Dzt6/3+H/7vnPfrt/73/P8z7/1P3/7d/Z+j/Wba59f+5+2+IWzrZ/wAAANCD3P2PiFvsfwAAAGhG7v5Hxi32PwAAADQjd/+j4pZO9r/+v7X+/3/Wft2u/n+ndtH/6//1//r/1un/h3n/f8TO3+bO1Q/1//r/4+j/Tx3w673/T4vm1v/n7n903NLJ/gcAAIAe5O5/TNxi/wMAAEAzcvc/Nm6x/wEAAKAZufsfF7d0sv/1/631/+u/zvv/+v9NX1//r/9vmf5/mP5/RCvv/1/md822+/mj2vbnn/79f/0/yze3/j93/+Pjlk72PwAAAPQgd/8T4hb7HwAAAJqRu/+JcYv9DwAAAM3I3f+kuKWT/a//1/8vo//Pr6D/1/8ff/+f9P/LpP8fpv8f0Ur/f5m23c8v/fPr//X/7De3/j93/5Pjlk72PwAAAPQgd/9T4hb7HwAAAJqRu/+pcYv9DwAAAM3I3f+0uKWT/a//1/8vo//3/r/+3/v/+v/D0f8P0/+P0P/r//X/+n8mNbf+P3f/jXFLJ/sfAAAAepC7/+lxi/0PAAAAzcjd/4y4xf4HAACAZuTuf2bc0sn+1//r//X/+n/9/+avr/9fJv3/MP3/CP2//l//r/9nUjPq/3f9qrOrZ8Utnex/AAAA6EHu/mfHLfY/AAAANCN3/3PiFvsfAAAAmpG7/7lxSyf7X/8/m/5/J+drq/8/t1qt9P+rTvv/c7v+/azvS/2//v8E6P+H6f9H6P/1//p//T+TmlH/v/Pj3P3Pi1s62f8AAADQg9z9z49b7H8AAABoRu7+F8Qt9j8AAAA0I3f/C+OWTva//n82/f+Otvp/7//v/f7oqf/3/v9++v+Tof8fpv8fof/X/+v/9f9Mam79f+7+F8VNp09d9m8RAAAAmJnc/S+OWzr5838AAADoQe7+l8Qt9j8AAAAs1I37fiZ3/0vjlk72v/5/2v7/9K6f0//r//d+f+j/9f/6/+On/x+m/x+h/9f/6//1/0xqbv1/7v6XxS2d7H8AAADoQe7+m+IW+x8AAACakbv/5XGL/Q8AAADNyN3/irilk/2v//f+v/5f/6//3/z19f/LpP8fpv8fof/X/2+3/z9z8X/V/9OGS+j/z58/f92x9/+5+18Zt3Sy/wEAAKAHuftfFbfY/wAAANCM3P2vjlvsfwAAAGhG7v7XxC2d7H/9f6f9f36rL6v/v3610v/r//X/+v9h+v9h+v8R+n/9v/f/9f9Mam7v/+fuf23c0sn+BwAAgB7k7n9d3GL/AwAAQDNy978+brH/AQAAoBm5+98Qt3Sy//X/nfb/3v/X/+v/T7r/v22l/z8Ri+j/zx389efe/9+g/9f/D+iu/7/rndd+qP/X/7Pf3Pr/3P1vjFs62f8AAADQg9z9b4pb7H8AAABoRu7+N8ct9j8AAAA0I3f/W+KmqzrZ//p//b/+X/+v/9/89U/4/f/Tq9VK/z+BRfT/A+be/0/z/v/e/5RfpP/X/y/58+v/9f/sN7f+P3f/W+OWTvY/AAAA9CB3/9viFvsfAAAAmpG7/+1xi/0PAAAAzcjd/464pZP9r/8/av9/4XtG/7/++fX/6/T/8f2wrf7/hkX0/97/n4j+f9g8+v+D6f/1/0v+/Pp//T+Ht63+P3f/O+OWTvY/AAAA9CB3/7viFvsfAAAAmpG7/91xi/0PAAAAzcjd/564pZP9r//3/v+l9P/5OfX/bfX/Z2bX/59d+7/Xyfv/+v+J6P+H6f9H6P/1//r/G/X/TGlu7//n7n9v3NLJ/gcAAIAe5O5/X9z6r27tfwAAAGhG7v73xy32PwAAADQjd/8H4pZO9r/+X//v/X/9/yHe/9/0Lb6c9/+31/+f2/0D/f/J0P8P0/+P0P/r//X/3v9nUnPr/3P3fzBu6WT/AwAAQA9y938obrH/AQAAoBm5+z8ct9j/AAAA0Izc/TfHLZ3sf/2//l//r/8/RP8fTur9/3Un0f9f6f3/Zuj/h51M/39O/6//r37+ivhPgf5f/z/262nT3Pr/3P0fiVs62f8AAADQg9z9H41b7H8AAABoRu7+j8Ut9j8AAAAs0lUbfi53/8fjlk72v/5f/6//1//r/zd/ff3/Mm2l/89vCv2/9/9DP/3//6/9aGnv/+/9/1/6f/0/05tb/5+7/xNxSyf7HwAAAHqQu/+TcYv9DwAAAM3I3f+puMX+BwAAgGbk7v903NLJ/tf/6//1//p//f/mr6//Xybv/w/T/4/Q/2/1/fylf379v/6f/ebW/+fu/0zc0sn+BwAAgB7k7v9s3GL/AwAAQDNy938ubrH/AQAAoBk7uz/jsg73v/5f/6//1//r/zd/ff3/Mun/h+n/R+j/9f/6f/0/k5pb///5nV91dvWFuKWT/Q8AAAA9yN3/xbjF/gcAAIBm5O7/Utxi/wMAAEAzcvd/OW7pZP/r//X/y+j/z58/f53+X/+//vu52P/fov+n6P+H6f9H6P/1//p//T+Tmlv/n7v/K3FLJ/sfAAAAepC7/6txi/0PAAAAzcjd/7W4xf4HAACAZuTu/3rc0sn+1//PoP8/q//3/r/+f+X9f/3/RPT/w/T/I1rs/88e/re/7X7+qLb9+fX/+n/2m1v/n7v/G3FLJ/sfAAAAepC7/5txi/0PAAAAzcjd/624xf4HAACAZuTu/3bc0sn+1/+fXP9/+792vbz/f261+fPr//X/+n/9/3HT/w/T/49osf+/BNvu55f++fX/+n/2m1v/n7v/O3HL+vA7dWm/SwAAAGBOcvd/N27p5M//AQAAoAe5+78Xt9j/AAAA0Izc/d+PWzrZ//r/Gbz/32D/7/3/zd8f+v9Z9/9X6v/boP8fpv8fof/X/+v/J+r/87tZ/9+7ufX/uft/ELd0sv8BAACgB7n7fxi32P8AAADQjNz9P4pb7H8AAABoRu7+W+KWXft/U9vdCv2//l//r//X/2/++vr/ZdL/Dzts/39mdbT+P+n/9f/6/177f+//c8Ex9v/XrC6j/8/d/+O4xZ//AwAAwOKcOuDnc/f/JG6x/wEAAKAZuft/GrfY/wAAANCM3P0/i1tuvXJbH+lE6f/1//p//b/+f/PX1/8vk/5/mPf/Rxyq/7/4T5Xq/9fF35+u1v+30f+vVvp/ju4Y+/8dl9r/5+7/edziz/8BAACgGbn7fxG32P8AAADQjNz9v4xb7H8AAABoRu7+X8Utnex//b/+/4j9/06aqf+/QP9/gf5/M/3/ydD/D9P/j/D+v/f/9f/e/2dSc+v/c/f/Om7pZP8DAABAD3L3/yZusf8BAACgGbn7fxu32P8AAADQjNz9v4tbOtn/W+v/419q/f/i+3/v/+v/9f/6/1nR/w/T/4/Q/+v/9f/6fyY1t/4/d//v45ZO9j8AAAD0IHf/H+IW+x8AAACakbv/j3GL/Q8AAADNyN3/p7ilk/3v/X/9v/5f/6//3/z19f/LpP8fpv/frP6N0v/r//X/+n8mNbf+P3f/n+OWTvY/AAAA9CB3/1/iFvsfAAAAmpG7/9a4xf4HAACAZuTu/2vc0sn+1//r//X/+n/9/+avr/9fJv3/sG32/3f73/Ev6/3/rff/+RH0//p//T+TmFv/n7v/b3FLJ/sfAAAAepC7/+9xi/0PAAAAzcjd/4+4xf4HAACAZuTu/2fc0sn+H+n/z9RfqP8fpP9f//zL6//PX6H/1//r/9twWf39rm86/X/o7P3/ov/3/r/+X//PpObW/+fu/1fc0sn+BwAAgB7k7r8tbrH/AQAAoBm5+/8dt9j/AAAA0Izc/f+JWzrZ/97/X1L/f7X+3/v/+n/9v/5/hPf/h+n/R+j/9f/6f/0/k5pb/5+7/78BAAD//7G8S+A=")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fdatasync(r0)

752.972334ms ago: executing program 4 (id=791):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x48, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cb90f9ea0c82a9c996935c85db"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40905}, 0x0)

722.137968ms ago: executing program 4 (id=793):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_io_uring_setup(0x48a7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0})
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0)

622.303474ms ago: executing program 4 (id=794):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@discard}, {@nodatacow}, {@commit={'commit', 0x3d, 0x80000001}}, {@usebackuproot}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x38, 0x67, 0x30, 0x65, 0x25]}}]}, 0x3, 0x510e, &(0x7f000000a240)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x40809440, &(0x7f0000000280)={0x0, 0x0, [0x0, 0x0, 0x1, 0x0, 0x1, 0x800000000]})

554.508634ms ago: executing program 1 (id=795):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x44040)

396.058878ms ago: executing program 1 (id=796):
pipe2$9p(&(0x7f0000000380), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)

306.134901ms ago: executing program 1 (id=797):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa)
sendto(r0, &(0x7f0000000540)="f6b4ff270e6532b2d40765f9e8b460bd68b7e03a08d842e54efc234e21b4fec0541e98608bd3070ff700079b3dc0d7520e7351a1b4266e018855fc4819c097783f98064577274ff947328e4fa0ac578dfad9dba45afb427b80a1b4825dc8e8f06667f93a3d429d004d1933f47ac6e2d5d8b1e58d4eb92fa0a5c5b87b800712e299d0c714c78406947586a02fb600029a4daeb3efe7cba41f2d2d6626f63c7c7f0271cbac55d23e0afc639d9810", 0xfe6d621e554cffe6, 0xd63a66976f7dfbe0, 0x0, 0x0)

140.776361ms ago: executing program 2 (id=798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0xfffffffffffffea1, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x6, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x4, 0x0, 0xfffffffc, 0xfffffffb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x1, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffff8, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9, 0x3ff, 0x3f7, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x402, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x4000000)

140.456956ms ago: executing program 1 (id=799):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b'], 0x8)

140.298911ms ago: executing program 1 (id=800):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd700000000000010000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0)

66.902364ms ago: executing program 3 (id=801):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000340)="bd", 0x1}], 0x1}}], 0x1, 0x46854)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0xfffffffd}, 0x8)
close(r0)

0s ago: executing program 1 (id=802):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
close(0x3)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r0])

kernel console output (not intermixed with test programs):

82][ T6948] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.107 (6948)
[   50.566510][ T6948] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   50.566618][ T6948] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[   50.566654][ T6948] BTRFS info (device loop1): disk space caching is enabled
[   50.566678][ T6948] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   50.699909][ T6948] BTRFS info (device loop1): rebuilding free space tree
[   50.712915][ T6948] BTRFS info (device loop1): disabling free space tree
[   50.713356][ T6948] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   50.713393][ T6948] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   50.773033][ T6961] loop0: detected capacity change from 0 to 32768
[   50.807928][ T6959] loop4: detected capacity change from 0 to 32768
[   50.888986][ T6961] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   50.940827][ T6524] (syz-executor,6524,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72
[   50.948534][ T6534] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   50.981504][ T6524] ocfs2: Unmounting device (7,0) on (node local)
[   51.226294][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'.
[   51.321447][ T7007] loop0: detected capacity change from 0 to 1024
[   51.385146][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'.
[   51.412276][ T7011] loop3: detected capacity change from 0 to 2048
[   51.449348][ T7012] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   51.525011][ T7012] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[   51.525148][ T7012] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2)
[   51.534348][ T7016] loop1: detected capacity change from 0 to 512
[   51.536933][ T7012] Remounting filesystem read-only
[   51.539047][ T6535] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[   51.559083][ T7016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   51.600172][ T7016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.680903][ T7002] loop4: detected capacity change from 0 to 32768
[   51.689814][ T7002] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.122 (7002)
[   51.706474][ T7002] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   51.709622][ T7002] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm
[   51.712314][ T7002] BTRFS info (device loop4): using free-space-tree
[   51.765054][ T6534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.804621][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'.
[   51.893827][ T7048] netlink: 'syz.0.134': attribute type 3 has an invalid length.
[   51.917488][ T7049] random: crng reseeded on system resumption
[   52.010509][ T7049] Restarting kernel threads ...
[   52.012808][ T7049] Done restarting kernel threads.
[   52.025010][ T7049] hibernate: Hibernate image not generated by this kernel!
[   52.025168][ T7049] PM: hibernation: Image mismatch: architecture specific data
[   52.154227][ T6525] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   52.271499][ T6995] loop2: detected capacity change from 0 to 40427
[   52.304318][ T6995] F2FS-fs (loop2): invalid crc value
[   52.376423][ T6995] F2FS-fs (loop2): Start checkpoint disabled!
[   52.396810][ T7063] pimreg: tun_chr_ioctl cmd 2148553947
[   52.403144][ T6995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   52.551222][  T304] kworker/u8:6: attempt to access beyond end of device
[   52.551222][  T304] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   52.552029][  T304] CPU: 1 UID: 0 PID: 304 Comm: kworker/u8:6 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   52.552061][  T304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   52.552069][  T304] Workqueue: writeback wb_workfn (flush-7:2)
[   52.552093][  T304] Call trace:
[   52.552097][  T304]  show_stack+0x2c/0x3c (C)
[   52.552112][  T304]  __dump_stack+0x30/0x40
[   52.552127][  T304]  dump_stack_lvl+0xd8/0x12c
[   52.552140][  T304]  dump_stack+0x1c/0x28
[   52.552153][  T304]  f2fs_handle_critical_error+0x34c/0x4b8
[   52.552165][  T304]  f2fs_stop_checkpoint+0x5c/0x70
[   52.552179][  T304]  f2fs_write_end_io+0x58c/0x818
[   52.552191][  T304]  bio_endio+0x804/0x840
[   52.552203][  T304]  submit_bio_noacct+0x158/0x176c
[   52.552216][  T304]  submit_bio+0x354/0x4d4
[   52.552228][  T304]  f2fs_submit_write_bio+0x13c/0x324
[   52.552240][  T304]  __submit_merged_bio+0x254/0x704
[   52.552251][  T304]  __submit_merged_write_cond+0x23c/0x4ac
[   52.552262][  T304]  f2fs_write_data_pages+0x1d28/0x2634
[   52.552274][  T304]  do_writepages+0x270/0x468
[   52.552288][  T304]  __writeback_single_inode+0x15c/0x13e8
[   52.552302][  T304]  writeback_sb_inodes+0x558/0xe38
[   52.552315][  T304]  wb_writeback+0x3cc/0xd70
[   52.552327][  T304]  wb_workfn+0x338/0xdc0
[   52.552339][  T304]  process_one_work+0x7e8/0x155c
[   52.552353][  T304]  worker_thread+0x958/0xed8
[   52.552366][  T304]  kthread+0x5fc/0x75c
[   52.552378][  T304]  ret_from_fork+0x10/0x20
[   52.559500][  T304] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   52.613071][ T7045] loop1: detected capacity change from 0 to 40427
[   52.616657][ T7045] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   52.618678][ T7045] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   52.801199][ T7045] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   52.801289][ T7045] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   52.887350][ T7078] loop4: detected capacity change from 0 to 2048
[   52.948384][ T6534] syz-executor: attempt to access beyond end of device
[   52.948384][ T6534] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   52.948479][ T6534] CPU: 1 UID: 0 PID: 6534 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   52.948493][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   52.948500][ T6534] Call trace:
[   52.948504][ T6534]  show_stack+0x2c/0x3c (C)
[   52.948522][ T6534]  __dump_stack+0x30/0x40
[   52.948537][ T6534]  dump_stack_lvl+0xd8/0x12c
[   52.948550][ T6534]  dump_stack+0x1c/0x28
[   52.948562][ T6534]  f2fs_handle_critical_error+0x34c/0x4b8
[   52.948576][ T6534]  f2fs_stop_checkpoint+0x5c/0x70
[   52.948589][ T6534]  f2fs_write_end_io+0x58c/0x818
[   52.948602][ T6534]  bio_endio+0x804/0x840
[   52.948613][ T6534]  submit_bio_noacct+0x158/0x176c
[   52.948627][ T6534]  submit_bio+0x354/0x4d4
[   52.948639][ T6534]  f2fs_submit_write_bio+0x13c/0x324
[   52.948650][ T6534]  __submit_merged_bio+0x254/0x704
[   52.948661][ T6534]  __submit_merged_write_cond+0x23c/0x4ac
[   52.948672][ T6534]  f2fs_write_data_pages+0x1d28/0x2634
[   52.948684][ T6534]  do_writepages+0x270/0x468
[   52.948699][ T6534]  filemap_fdatawrite+0x144/0x1e8
[   52.948709][ T6534]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   52.948723][ T6534]  f2fs_write_checkpoint+0x684/0x1694
[   52.948748][ T6534]  kill_f2fs_super+0x21c/0x584
[   52.948760][ T6534]  deactivate_locked_super+0xc4/0x12c
[   52.948771][ T6534]  deactivate_super+0xe0/0x100
[   52.948781][ T6534]  cleanup_mnt+0x31c/0x3ac
[   52.948792][ T6534]  __cleanup_mnt+0x20/0x30
[   52.948810][ T6534]  task_work_run+0x1dc/0x260
[   52.948823][ T6534]  do_notify_resume+0x174/0x1f4
[   52.948834][ T6534]  el0_svc+0xb8/0x180
[   52.948846][ T6534]  el0t_64_sync_handler+0x84/0x12c
[   52.948857][ T6534]  el0t_64_sync+0x198/0x19c
[   52.948871][ T6534] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   52.960627][ T7078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   53.034942][ T7078] EXT4-fs (loop4): shut down requested (1)
[   53.133237][ T6525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   53.164813][ T7086] loop2: detected capacity change from 0 to 512
[   53.165961][ T7086] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   53.170638][ T7086] EXT4-fs (loop2): 1 truncate cleaned up
[   53.171562][ T7086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.284780][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.337859][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'.
[   53.372204][ T7097] loop4: detected capacity change from 0 to 256
[   53.373510][ T7097] exfat: Deprecated parameter 'namecase'
[   53.424083][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'.
[   53.446642][ T7097] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[   53.457315][ T7070] loop3: detected capacity change from 0 to 32768
[   53.480883][ T7070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.142 (7070)
[   53.504797][ T7099] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   53.574929][ T7070] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   53.575078][ T7070] BTRFS info (device loop3): using sha256 (sha256-arm64) checksum algorithm
[   53.575123][ T7070] BTRFS info (device loop3): disk space caching is enabled
[   53.575147][ T7070] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   53.674372][ T7070] BTRFS info (device loop3): rebuilding free space tree
[   53.688179][ T7123] mmap: syz.4.158 (7123) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   53.688623][ T7116] loop1: detected capacity change from 0 to 2048
[   53.701776][ T7116] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   53.710310][ T7070] BTRFS info (device loop3): disabling free space tree
[   53.710405][ T7070] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   53.710433][ T7070] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   53.723602][ T7125] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   53.801824][ T7129] netlink: 112 bytes leftover after parsing attributes in process `syz.4.161'.
[   53.894698][   T42] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[   53.939023][   T31] audit: type=1326 audit(53.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7131 comm="syz.2.163" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5af28 code=0x0
[   54.031779][ T6535] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   54.388181][ T7139] loop1: detected capacity change from 0 to 32768
[   54.394240][ T7139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.165 (7139)
[   54.415388][ T7139] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   54.415496][ T7139] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[   54.415534][ T7139] BTRFS info (device loop1): using free-space-tree
[   54.510956][    C1] Illegal XDP return value 16128 on prog  (id 6) dev bridge0, expect packet loss!
[   54.843948][ T6534] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   54.873818][ T7183] warning: `syz.4.179' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.888802][ T7151] loop3: detected capacity change from 0 to 32768
[   54.894239][ T7151] 
[   54.894239][ T7151]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   54.894239][ T7151] 
[   54.945174][ T7151] 
[   54.945174][ T7151]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   54.945174][ T7151] 
[   54.945328][ T7151] 
[   54.945328][ T7151]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   54.945328][ T7151] 
[   54.952753][   T99] 
[   54.952753][   T99]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   54.952753][   T99] 
[   54.969206][ T7151] 
[   54.969206][ T7151]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   54.969206][ T7151] 
[   54.969299][ T7151] 
[   54.969299][ T7151]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   54.969299][ T7151] 
[   54.969378][ T7151] 
[   54.969378][ T7151]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   54.969378][ T7151] 
[   54.977221][  T100] 
[   54.977221][  T100]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   54.977221][  T100] 
[   55.054592][ T6535] 
[   55.054592][ T6535]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   55.054592][ T6535] 
[   55.056956][ T6535] 
[   55.056956][ T6535]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   55.056956][ T6535] 
[   55.490040][ T7198] loop2: detected capacity change from 0 to 4096
[   55.499164][ T7198] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   55.728994][ T7205] loop1: detected capacity change from 0 to 32768
[   55.808879][ T7177] loop0: detected capacity change from 0 to 65536
[   55.844329][ T7177] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   55.892750][ T7177] XFS (loop0): Ending clean mount
[   55.893979][ T7177] XFS (loop0): Quotacheck needed: Please wait.
[   55.904606][ T7205] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[   55.931045][ T7205]   allowing incompatible features above 0.0: (unknown version)
[   55.933500][ T7205]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   55.937877][ T7205] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   55.940822][ T7205] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   55.943558][ T7205] bcachefs (loop1): Version upgrade required:
[   55.943558][ T7205] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   55.943558][ T7205] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   55.943558][ T7205]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   55.966113][    C0] vkms_vblank_simulate: vblank timer overrun
[   55.968686][ T7205] bcachefs (loop1): dropping and reconstructing all alloc info
[   56.024310][ T7177] XFS (loop0): Quotacheck: Done.
[   56.038186][ T7205] bcachefs (loop1): accounting_read... done
[   56.099968][ T7205] bcachefs (loop1): alloc_read... done
[   56.100202][ T7205] bcachefs (loop1): snapshots_read... done
[   56.100858][ T7205] bcachefs (loop1): done starting filesystem
[   56.113559][ T7228] loop2: detected capacity change from 0 to 32768
[   56.132592][ T7228] 
[   56.132592][ T7228]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   56.132592][ T7228] 
[   56.265642][ T6523] 
[   56.265642][ T6523]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   56.265642][ T6523] 
[   56.290580][ T6523] 
[   56.290580][ T6523]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   56.290580][ T6523] 
[   56.291025][ T6534] bcachefs (loop1): shutting down
[   56.363628][ T7209] loop4: detected capacity change from 0 to 32768
[   56.373615][ T7209] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.188 (7209)
[   56.381882][ T7209] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   56.385050][ T7209] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   56.387994][ T7209] BTRFS info (device loop4): using free-space-tree
[   56.420417][ T6534] bcachefs (loop1): shutdown complete
[   56.557402][ T6524] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   56.693138][ T6525] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   56.781658][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'.
[   56.781759][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'.
[   56.796015][ T7263] loop3: detected capacity change from 0 to 256
[   56.844208][ T7265] loop2: detected capacity change from 0 to 1024
[   56.845176][ T7263] FAT-fs (loop3): Directory bread(block 1285) failed
[   56.901871][ T7263] FAT-fs (loop3): Directory bread(block 1285) failed
[   56.902215][ T7263] FAT-fs (loop3): Directory bread(block 1285) failed
[   56.902274][ T7263] FAT-fs (loop3): Directory bread(block 1285) failed
[   56.954669][ T7265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.176485][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.202651][ T7267] loop4: detected capacity change from 0 to 32768
[   57.318927][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'.
[   57.391846][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.396413][ T7283] bridge_slave_1: left allmulticast mode
[   57.398741][ T7283] bridge_slave_1: left promiscuous mode
[   57.409674][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.766542][ T7281] loop2: detected capacity change from 0 to 40427
[   57.808369][ T7281] F2FS-fs (loop2): invalid crc value
[   57.904841][ T7278] loop3: detected capacity change from 0 to 32768
[   57.928984][ T7281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   57.946775][ T7267] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[   57.952534][ T7267]   allowing incompatible features above 0.0: (unknown version)
[   57.955330][ T7267]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   57.966739][ T7267] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   57.966814][ T7267] bcachefs (loop4): initializing new filesystem
[   57.980405][ T7267] bcachefs (loop4): going read-write
[   58.010897][ T7267] bcachefs (loop4): marking superblocks
[   58.025523][ T7267] bcachefs (loop4): initializing freespace
[   58.056499][ T7267] bcachefs (loop4): done initializing freespace
[   58.057755][ T7267] bcachefs (loop4): reading snapshots table
[   58.057816][ T7267] bcachefs (loop4): reading snapshots done
[   58.116438][ T7267] bcachefs (loop4):  loop4: Superblock write was silently dropped! (seq 0 expected 42)
[   58.124290][ T7267] bcachefs (loop4): done starting filesystem
[   58.163156][ T7278] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,usrquota,nocow
[   58.163213][ T7278]   allowing incompatible features above 0.0: (unknown version)
[   58.163243][ T7278]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   58.163301][ T7278] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   58.163348][ T7278] bcachefs (loop3): initializing new filesystem
[   58.166941][ T7278] bcachefs (loop3): going read-write
[   58.287403][ T7292] loop0: detected capacity change from 0 to 32768
[   58.321237][ T7292] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   58.333711][ T7278] bcachefs (loop3): marking superblocks
[   58.337879][ T7278] bcachefs (loop3): initializing freespace
[   58.350876][ T7278] bcachefs (loop3): done initializing freespace
[   58.351972][ T7278] bcachefs (loop3): reading snapshots table
[   58.352042][ T7278] bcachefs (loop3): reading snapshots done
[   58.407883][ T7278] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[   58.408374][ T7278] bcachefs (loop3): done starting filesystem
[   58.481937][ T7292] XFS (loop0): Ending clean mount
[   58.545889][ T6525] bcachefs (loop4): shutting down
[   58.545951][ T6525] bcachefs (loop4): going read-only
[   58.546008][ T6525] bcachefs (loop4): finished waiting for writes to stop
[   58.582103][ T6525] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[   58.586360][ T6535] bcachefs (loop3): shutting down
[   58.586420][ T6535] bcachefs (loop3): going read-only
[   58.586459][ T6535] bcachefs (loop3): finished waiting for writes to stop
[   58.587192][ T6524] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   58.637889][ T6535] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[   58.645074][ T7331] loop1: detected capacity change from 0 to 32768
[   58.676166][ T6525] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[   58.683986][ T6525] bcachefs (loop4): clean shutdown complete, journal seq 4
[   58.687028][ T6525] bcachefs (loop4): marking filesystem clean
[   58.726086][ T6535] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[   58.731628][ T6535] bcachefs (loop3): clean shutdown complete, journal seq 4
[   58.732389][ T6535] bcachefs (loop3): marking filesystem clean
[   58.745442][ T7331] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   58.838171][ T6535] bcachefs (loop3): shutdown complete
[   58.850499][ T6525] bcachefs (loop4): shutdown complete
[   58.916426][ T7281] F2FS-fs (loop2): build fault injection rate: 690
[   58.919167][ T7281] F2FS-fs (loop2): Image doesn't support compression
[   58.921804][ T7281] F2FS-fs (loop2): Image doesn't support compression
[   58.924186][ T7281] F2FS-fs (loop2): LFS is not compatible with IPU
[   59.025419][ T6534] ocfs2: Unmounting device (7,1) on (node local)
[   59.555055][ T7363] use of bytesused == 0 is deprecated and will be removed in the future,
[   59.558803][ T7363] use the actual size instead.
[   59.747369][ T7369] loop3: detected capacity change from 0 to 4096
[   59.806820][ T7369] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   59.825797][ T7369] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[   59.866943][ T7360] loop2: detected capacity change from 0 to 32768
[   59.881170][ T7360] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.218 (7360)
[   59.894886][ T7360] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   59.894991][ T7360] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   59.895027][ T7360] BTRFS info (device loop2): disk space caching is enabled
[   59.895051][ T7360] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   59.896076][ T7369] ntfs3(loop3): ino=1e, "file1" attr_set_size
[   60.015624][ T7361] loop0: detected capacity change from 0 to 32768
[   60.016278][ T7361] XFS: ikeep mount option is deprecated.
[   60.016343][ T7361] XFS: ikeep mount option is deprecated.
[   60.035241][ T7360] BTRFS info (device loop2): rebuilding free space tree
[   60.045353][ T7361] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   60.048567][ T7360] BTRFS info (device loop2): disabling free space tree
[   60.051218][ T7360] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   60.054718][ T7360] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   60.195197][ T7361] XFS (loop0): Ending clean mount
[   60.333328][ T6523] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   60.463966][ T6524] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   60.861412][ T7422] loop0: detected capacity change from 0 to 128
[   60.943711][ T7410] loop1: detected capacity change from 0 to 32768
[   61.078070][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[   61.078142][ T7410]   allowing incompatible features above 0.0: (unknown version)
[   61.131307][ T7410]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   61.131369][ T7410]   with devices loop1
[   61.131450][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[   61.131494][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[   61.134880][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[   61.190626][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[   61.195088][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[   61.196494][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[   61.197472][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[   61.197527][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[   61.294148][ T7430] loop2: detected capacity change from 0 to 32768
[   61.304111][ T7410] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[   61.344330][ T7430] 
[   61.344330][ T7430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.344330][ T7430] 
[   61.420957][ T7430] 
[   61.420957][ T7430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.420957][ T7430] 
[   61.421045][ T7430] 
[   61.421045][ T7430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.421045][ T7430] 
[   61.421070][ T7430] 
[   61.421070][ T7430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.421070][ T7430] 
[   61.430070][ T7430] 
[   61.430070][ T7430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.430070][ T7430] 
[   61.464702][ T7430] 
[   61.464702][ T7430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.464702][ T7430] 
[   61.464950][ T7430] 
[   61.464950][ T7430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.464950][ T7430] 
[   61.482375][ T7430] 
[   61.482375][ T7430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.482375][ T7430] 
[   61.566406][ T6523] 
[   61.566406][ T6523]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.566406][ T6523] 
[   61.570375][ T6523] 
[   61.570375][ T6523]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   61.570375][ T6523] 
[   61.643775][ T6534] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[   61.643844][ T6534] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[   61.651925][ T6534] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[   61.699423][ T6534] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[   61.741566][ T6534] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[   61.758356][ T6534] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4
[   61.759126][ T6534] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[   61.897274][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'.
[   61.902559][ T6534] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[   61.905663][ T7408] loop3: detected capacity change from 0 to 131072
[   61.960075][ T7408] F2FS-fs (loop3): invalid crc value
[   62.025326][ T7464] loop2: detected capacity change from 0 to 512
[   62.081262][ T7408] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   62.149297][ T7464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.163291][ T7467] loop0: detected capacity change from 0 to 4096
[   62.240161][ T7446] loop4: detected capacity change from 0 to 40427
[   62.317083][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.372377][ T7446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   62.549763][ T6525] syz-executor: attempt to access beyond end of device
[   62.549763][ T6525] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   62.550151][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   62.550168][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   62.550175][ T6525] Call trace:
[   62.550180][ T6525]  show_stack+0x2c/0x3c (C)
[   62.550197][ T6525]  __dump_stack+0x30/0x40
[   62.550212][ T6525]  dump_stack_lvl+0xd8/0x12c
[   62.550225][ T6525]  dump_stack+0x1c/0x28
[   62.550238][ T6525]  f2fs_handle_critical_error+0x34c/0x4b8
[   62.550251][ T6525]  f2fs_stop_checkpoint+0x5c/0x70
[   62.550265][ T6525]  f2fs_write_end_io+0x58c/0x818
[   62.550277][ T6525]  bio_endio+0x804/0x840
[   62.550289][ T6525]  submit_bio_noacct+0x158/0x176c
[   62.550302][ T6525]  submit_bio+0x354/0x4d4
[   62.550314][ T6525]  f2fs_submit_write_bio+0x13c/0x324
[   62.550325][ T6525]  __submit_merged_bio+0x254/0x704
[   62.550336][ T6525]  __submit_merged_write_cond+0x23c/0x4ac
[   62.550348][ T6525]  f2fs_write_data_pages+0x1d28/0x2634
[   62.550360][ T6525]  do_writepages+0x270/0x468
[   62.550374][ T6525]  filemap_fdatawrite+0x144/0x1e8
[   62.550385][ T6525]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   62.550398][ T6525]  f2fs_write_checkpoint+0x684/0x1694
[   62.550412][ T6525]  kill_f2fs_super+0x21c/0x584
[   62.550423][ T6525]  deactivate_locked_super+0xc4/0x12c
[   62.550435][ T6525]  deactivate_super+0xe0/0x100
[   62.550445][ T6525]  cleanup_mnt+0x31c/0x3ac
[   62.550457][ T6525]  __cleanup_mnt+0x20/0x30
[   62.550468][ T6525]  task_work_run+0x1dc/0x260
[   62.550479][ T6525]  do_notify_resume+0x174/0x1f4
[   62.550491][ T6525]  el0_svc+0xb8/0x180
[   62.550503][ T6525]  el0t_64_sync_handler+0x84/0x12c
[   62.550514][ T6525]  el0t_64_sync+0x198/0x19c
[   62.550708][ T6525] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   62.758570][ T7481] Injecting memory failure for pfn 0x13ebde at process virtual address 0x20dde000
[   62.762421][ T7481] Memory failure: 0x13ebde: Sending SIGBUS to syz.0.262:7481 due to hardware memory corruption
[   62.762634][ T7481] Memory failure: 0x13ebde: recovery action for unsplit thp: Failed
[   62.856042][ T7480] loop2: detected capacity change from 0 to 32768
[   62.862560][ T7480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.263 (7480)
[   62.874430][ T7480] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   62.874544][ T7480] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm
[   62.874581][ T7480] BTRFS info (device loop2): disk space caching is enabled
[   62.874605][ T7480] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   63.034723][ T7480] BTRFS info (device loop2): rebuilding free space tree
[   63.081313][ T7480] BTRFS info (device loop2): disabling free space tree
[   63.081414][ T7480] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   63.081465][ T7480] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   63.454052][ T6523] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   63.505651][ T7499] loop0: detected capacity change from 0 to 32768
[   63.618098][ T7510] loop4: detected capacity change from 0 to 32768
[   63.843718][ T7537] overlayfs: missing 'workdir'
[   63.858551][ T7499] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   63.872843][ T7539] netlink: 92 bytes leftover after parsing attributes in process `syz.2.276'.
[   63.889711][ T7499]   allowing incompatible features above 0.0: (unknown version)
[   63.889779][ T7499]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   63.889850][ T7499] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   63.889957][ T7499] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   63.890096][ T7499] bcachefs (loop0): Version upgrade required:
[   63.890096][ T7499] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   63.890096][ T7499] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   63.890096][ T7499]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   63.930862][ T7499] bcachefs (loop0): dropping and reconstructing all alloc info
[   64.009979][ T7499] bcachefs (loop0): accounting_read... done
[   64.050902][ T7499] bcachefs (loop0): alloc_read... done
[   64.051523][ T7499] bcachefs (loop0): snapshots_read... done
[   64.052230][ T7499] bcachefs (loop0): check_allocations... done
[   64.210605][ T7499] bcachefs (loop0): going read-write
[   64.279802][ T7499] bcachefs (loop0): done starting filesystem
[   64.747377][ T7545] loop3: detected capacity change from 0 to 40427
[   64.749233][ T7545] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   64.749276][ T7545] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   64.750401][ T7545] F2FS-fs (loop3): heap/no_heap options were deprecated
[   64.752011][ T7545] F2FS-fs (loop3): invalid crc value
[   64.753197][ T2403] ieee802154 phy0 wpan0: encryption failed: -22
[   64.753331][ T2403] ieee802154 phy1 wpan1: encryption failed: -22
[   64.894209][ T7545] F2FS-fs (loop3): Start checkpoint disabled!
[   64.939065][ T7545] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   64.939141][ T7545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   64.978638][ T7557] loop1: detected capacity change from 0 to 32768
[   64.988121][ T7499] bcachefs (loop0): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[   64.988121][ T7499]   set version_upgrade=incompat to enable
[   65.063524][ T7557] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   65.112113][ T7545] syz.3.279: attempt to access beyond end of device
[   65.112113][ T7545] loop3: rw=2049, sector=45096, nr_sectors = 72 limit=40427
[   65.117507][ T6524] bcachefs (loop0): shutting down
[   65.120980][ T6524] bcachefs (loop0): going read-only
[   65.122803][ T6524] bcachefs (loop0): finished waiting for writes to stop
[   65.136682][ T7557] XFS (loop1): Ending clean mount
[   65.149099][ T7557] XFS (loop1): Quotacheck needed: Please wait.
[   65.160699][ T6524] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11
[   65.195991][ T6524] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11
[   65.208137][ T6524] bcachefs (loop0): unclean shutdown complete, journal seq 12
[   65.210592][ T6524] bcachefs (loop0): done going read-only, filesystem not clean
[   65.221134][ T7557] XFS (loop1): Quotacheck: Done.
[   65.265054][  T179] kworker/u8:5: attempt to access beyond end of device
[   65.265054][  T179] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[   65.265178][  T179] CPU: 0 UID: 0 PID: 179 Comm: kworker/u8:5 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   65.265193][  T179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   65.265201][  T179] Workqueue: writeback wb_workfn (flush-7:3)
[   65.265223][  T179] Call trace:
[   65.265227][  T179]  show_stack+0x2c/0x3c (C)
[   65.265242][  T179]  __dump_stack+0x30/0x40
[   65.265257][  T179]  dump_stack_lvl+0xd8/0x12c
[   65.265269][  T179]  dump_stack+0x1c/0x28
[   65.265282][  T179]  f2fs_handle_critical_error+0x34c/0x4b8
[   65.265295][  T179]  f2fs_stop_checkpoint+0x5c/0x70
[   65.265308][  T179]  f2fs_write_end_io+0x58c/0x818
[   65.265320][  T179]  bio_endio+0x804/0x840
[   65.265332][  T179]  submit_bio_noacct+0x158/0x176c
[   65.265345][  T179]  submit_bio+0x354/0x4d4
[   65.265358][  T179]  f2fs_submit_write_bio+0x13c/0x324
[   65.265369][  T179]  __submit_merged_bio+0x254/0x704
[   65.265380][  T179]  __submit_merged_write_cond+0x23c/0x4ac
[   65.265391][  T179]  f2fs_write_data_pages+0x1d28/0x2634
[   65.265403][  T179]  do_writepages+0x270/0x468
[   65.265417][  T179]  __writeback_single_inode+0x15c/0x13e8
[   65.265431][  T179]  writeback_sb_inodes+0x558/0xe38
[   65.265443][  T179]  wb_writeback+0x3cc/0xd70
[   65.265456][  T179]  wb_workfn+0x338/0xdc0
[   65.265468][  T179]  process_one_work+0x7e8/0x155c
[   65.265481][  T179]  worker_thread+0x958/0xed8
[   65.265495][  T179]  kthread+0x5fc/0x75c
[   65.265506][  T179]  ret_from_fork+0x10/0x20
[   65.266985][  T179] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   65.275669][ T6524] bcachefs (loop0): shutdown complete
[   65.327841][ T6534] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   65.615208][ T7585] loop3: detected capacity change from 0 to 1764
[   66.027198][ T7597] loop1: detected capacity change from 0 to 512
[   66.038845][ T7597] EXT4-fs: Ignoring removed nobh option
[   66.073023][ T7597] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   66.074841][ T7597] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.297: invalid indirect mapped block 2683928664 (level 1)
[   66.105948][ T7597] EXT4-fs (loop1): 1 truncate cleaned up
[   66.118389][ T7597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.176696][ T7597] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.297: invalid indirect mapped block 480848489 (level 1)
[   66.241141][ T7593] loop4: detected capacity change from 0 to 32768
[   66.282605][ T6534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.365690][ T7598] loop2: detected capacity change from 0 to 32768
[   66.372787][ T7598] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.298 (7598)
[   66.415049][ T7598] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   66.415154][ T7598] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm
[   66.415196][ T7598] BTRFS info (device loop2): using free-space-tree
[   66.672685][ T7593] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[   66.672765][ T7593]   allowing incompatible features above 0.0: (unknown version)
[   66.698916][ T7593]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   66.699012][ T7593] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   66.699105][ T7593] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[   66.699235][ T7593] bcachefs (loop4): Version upgrade required:
[   66.699235][ T7593] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   66.699235][ T7593] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   66.699235][ T7593]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   66.699599][ T7593] bcachefs (loop4): dropping and reconstructing all alloc info
[   66.741927][ T7593] bcachefs (loop4): accounting_read... done
[   66.790872][ T7593] bcachefs (loop4): alloc_read... done
[   66.791069][ T7593] bcachefs (loop4): snapshots_read... done
[   66.791505][ T7593] bcachefs (loop4): done starting filesystem
[   66.836860][  T788] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   66.913748][ T7593] bcachefs (loop4): Error setting device state: device_state_not_allowed
[   66.985475][ T6523] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   66.985748][ T6525] bcachefs (loop4): shutting down
[   67.099681][ T6525] bcachefs (loop4): shutdown complete
[   67.179257][ T7655] loop0: detected capacity change from 0 to 4096
[   67.193167][ T7655] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   67.222344][ T7629] loop1: detected capacity change from 0 to 32768
[   67.243692][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.312'.
[   67.273046][ T7629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.305 (7629)
[   67.315284][ T7629] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   67.315392][ T7629] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm
[   67.315432][ T7629] BTRFS info (device loop1): using free-space-tree
[   67.480806][ T7682] loop2: detected capacity change from 0 to 512
[   67.531553][ T7683] sctp: [Deprecated]: syz.3.319 (pid 7683) Use of int in maxseg socket option.
[   67.531553][ T7683] Use struct sctp_assoc_value instead
[   67.583840][ T6534] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   67.626264][ T7682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.689238][ T7682] EXT4-fs error (device loop2): ext4_get_first_dir_block:3525: inode #12: comm syz.2.318: Attempting to read directory block (0) that is past i_size (3)
[   67.706101][ T7682] EXT4-fs (loop2): Remounting filesystem read-only
[   67.765382][  T788] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   67.765581][  T788] Quota error (device loop2): write_blk: dquota write failed
[   67.772369][  T788] Quota error (device loop2): free_dqentry: Can't write quota data block 5
[   67.790027][ T7698] loop0: detected capacity change from 0 to 1024
[   67.791859][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.880520][ T7704] Bluetooth: MGMT ver 1.23
[   67.909046][ T7698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.981687][ T7698] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   67.991044][ T7698] EXT4-fs (loop0): Remounting filesystem read-only
[   68.005685][   T42] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30
[   68.013104][ T7702] loop2: detected capacity change from 0 to 4096
[   68.032054][ T7713] loop1: detected capacity change from 0 to 512
[   68.050653][ T7713] EXT4-fs: Ignoring removed mblk_io_submit option
[   68.061529][ T7702] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   68.085085][ T6524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.089952][ T7713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.115580][ T7702] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   68.171462][ T6534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.181255][ T7717] syz.0.333 uses obsolete (PF_INET,SOCK_PACKET)
[   68.840796][ T7742] loop0: detected capacity change from 0 to 16
[   68.893069][ T7742] erofs (device loop0): mounted with root inode @ nid 36.
[   68.916960][ T7723] loop3: detected capacity change from 0 to 40427
[   69.010793][ T7723] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   69.145446][ T6535] syz-executor: attempt to access beyond end of device
[   69.145446][ T6535] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   69.146492][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   69.146514][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   69.146522][ T6535] Call trace:
[   69.146526][ T6535]  show_stack+0x2c/0x3c (C)
[   69.146545][ T6535]  __dump_stack+0x30/0x40
[   69.146559][ T6535]  dump_stack_lvl+0xd8/0x12c
[   69.146572][ T6535]  dump_stack+0x1c/0x28
[   69.146585][ T6535]  f2fs_handle_critical_error+0x34c/0x4b8
[   69.146598][ T6535]  f2fs_stop_checkpoint+0x5c/0x70
[   69.146611][ T6535]  f2fs_write_end_io+0x58c/0x818
[   69.146623][ T6535]  bio_endio+0x804/0x840
[   69.146635][ T6535]  submit_bio_noacct+0x158/0x176c
[   69.146648][ T6535]  submit_bio+0x354/0x4d4
[   69.146660][ T6535]  f2fs_submit_write_bio+0x13c/0x324
[   69.146671][ T6535]  __submit_merged_bio+0x254/0x704
[   69.146682][ T6535]  __submit_merged_write_cond+0x23c/0x4ac
[   69.146693][ T6535]  f2fs_write_data_pages+0x1d28/0x2634
[   69.146705][ T6535]  do_writepages+0x270/0x468
[   69.146719][ T6535]  filemap_fdatawrite+0x144/0x1e8
[   69.146741][ T6535]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   69.146755][ T6535]  f2fs_write_checkpoint+0x684/0x1694
[   69.146769][ T6535]  kill_f2fs_super+0x21c/0x584
[   69.146780][ T6535]  deactivate_locked_super+0xc4/0x12c
[   69.146791][ T6535]  deactivate_super+0xe0/0x100
[   69.146801][ T6535]  cleanup_mnt+0x31c/0x3ac
[   69.146813][ T6535]  __cleanup_mnt+0x20/0x30
[   69.146823][ T6535]  task_work_run+0x1dc/0x260
[   69.146835][ T6535]  do_notify_resume+0x174/0x1f4
[   69.146847][ T6535]  el0_svc+0xb8/0x180
[   69.146858][ T6535]  el0t_64_sync_handler+0x84/0x12c
[   69.146869][ T6535]  el0t_64_sync+0x198/0x19c
[   69.146883][ T6535] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   69.281656][ T7743] loop2: detected capacity change from 0 to 32768
[   69.331380][ T7726] loop1: detected capacity change from 0 to 65536
[   69.355242][ T7743] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   69.379185][ T7726] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   69.423824][ T7762] capability: warning: `syz.4.313' uses 32-bit capabilities (legacy support in use)
[   69.483591][ T6523] ocfs2: Unmounting device (7,2) on (node local)
[   69.525624][ T7726] XFS (loop1): Ending clean mount
[   69.708798][ T7726] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 
[   69.709036][ T7726] XFS (loop1): Unmount and run xfs_repair
[   69.709059][ T7726] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   69.709083][ T7726] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[   69.709104][ T7726] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[   69.709124][ T7726] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[   69.709145][ T7726] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[   69.709165][ T7726] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   69.709186][ T7726] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[   69.709206][ T7726] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   69.709226][ T7726] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   69.709252][ T7726] XFS (loop1): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74
[   69.864877][ T7779] netlink: 'syz.0.356': attribute type 2 has an invalid length.
[   69.891230][   T26] cfg80211: failed to load regulatory.db
[   70.009907][ T6534] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   70.039565][ T6534] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[   70.638649][ T7784] loop3: detected capacity change from 0 to 32768
[   70.758678][ T7790] loop2: detected capacity change from 0 to 40427
[   70.769102][ T7790] F2FS-fs (loop2): heap/no_heap options were deprecated
[   70.769197][ T7790] F2FS-fs (loop2): build fault injection rate: 19
[   70.769247][ T7790] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[   70.771016][ T7790] F2FS-fs (loop2): invalid crc value
[   70.835453][ T7790] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac
[   70.857981][ T7790] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0
[   70.901882][ T7801] binder: 7801:7800 cannot find target node
[   70.901950][ T7801] binder: 7800:7801 transaction call to 0:0 failed 2/29189/-22, code 0 size 0-0 line 3152
[   70.908373][ T7793] loop1: detected capacity change from 0 to 32768
[   70.916452][ T7793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.359 (7793)
[   70.949583][    T9] binder: undelivered TRANSACTION_ERROR: 29189
[   70.966169][ T7788] loop4: detected capacity change from 0 to 32768
[   70.979524][ T7793] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.979637][ T7793] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm
[   70.979677][ T7793] BTRFS info (device loop1): using free-space-tree
[   70.991546][ T7806] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.996232][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'.
[   71.002761][ T7790] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   71.078892][ T7790] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x9ac
[   71.100828][ T7793] BTRFS info (device loop1): rebuilding free space tree
[   71.111181][ T7790] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x9ac
[   71.126823][ T7790] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xe50/0x1678
[   71.127043][ T7790] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[   71.254708][ T6523] syz-executor: attempt to access beyond end of device
[   71.254708][ T6523] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   71.254825][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   71.254842][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   71.254850][ T6523] Call trace:
[   71.254854][ T6523]  show_stack+0x2c/0x3c (C)
[   71.254872][ T6523]  __dump_stack+0x30/0x40
[   71.254887][ T6523]  dump_stack_lvl+0xd8/0x12c
[   71.254900][ T6523]  dump_stack+0x1c/0x28
[   71.254912][ T6523]  f2fs_handle_critical_error+0x34c/0x4b8
[   71.254945][ T6523]  f2fs_stop_checkpoint+0x5c/0x70
[   71.254958][ T6523]  f2fs_write_end_io+0x58c/0x818
[   71.254970][ T6523]  bio_endio+0x804/0x840
[   71.254982][ T6523]  submit_bio_noacct+0x158/0x176c
[   71.254995][ T6523]  submit_bio+0x354/0x4d4
[   71.255007][ T6523]  f2fs_submit_write_bio+0x13c/0x324
[   71.255018][ T6523]  __submit_merged_bio+0x254/0x704
[   71.255029][ T6523]  __submit_merged_write_cond+0x23c/0x4ac
[   71.255041][ T6523]  f2fs_write_data_pages+0x1d28/0x2634
[   71.255052][ T6523]  do_writepages+0x270/0x468
[   71.255067][ T6523]  filemap_fdatawrite+0x144/0x1e8
[   71.255078][ T6523]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   71.255091][ T6523]  f2fs_write_checkpoint+0x684/0x1694
[   71.255105][ T6523]  kill_f2fs_super+0x21c/0x584
[   71.255116][ T6523]  deactivate_locked_super+0xc4/0x12c
[   71.255127][ T6523]  deactivate_super+0xe0/0x100
[   71.255137][ T6523]  cleanup_mnt+0x31c/0x3ac
[   71.255149][ T6523]  __cleanup_mnt+0x20/0x30
[   71.255159][ T6523]  task_work_run+0x1dc/0x260
[   71.255171][ T6523]  do_notify_resume+0x174/0x1f4
[   71.255182][ T6523]  el0_svc+0xb8/0x180
[   71.255194][ T6523]  el0t_64_sync_handler+0x84/0x12c
[   71.255205][ T6523]  el0t_64_sync+0x198/0x19c
[   71.255402][ T6523] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   71.521398][  T169] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   71.527245][ T6534] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.940932][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'.
[   71.991181][ T7859] loop1: detected capacity change from 0 to 512
[   72.044742][ T7859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.168158][ T7859] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 3: comm syz.1.383: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0
[   72.214974][ T6534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.491670][ T7879] loop2: detected capacity change from 0 to 4096
[   72.492868][ T7879] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   72.724128][ T7885] loop4: detected capacity change from 0 to 1024
[   72.755524][ T7887] sch_fq: defrate 2048 ignored.
[   72.948258][ T7881] loop0: detected capacity change from 0 to 32768
[   72.963200][ T7878] loop1: detected capacity change from 0 to 32768
[   72.966532][ T7881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.392 (7881)
[   72.986186][ T7881] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.986295][ T7881] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm
[   72.986332][ T7881] BTRFS info (device loop0): using free-space-tree
[   73.136522][ T7878] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[   73.136589][ T7878]   allowing incompatible features above 0.0: (unknown version)
[   73.140369][ T7878]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   73.140445][ T7878] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   73.140489][ T7878] bcachefs (loop1): initializing new filesystem
[   73.145698][ T7878] bcachefs (loop1): going read-write
[   73.211745][ T7878] bcachefs (loop1): marking superblocks
[   73.242821][ T7878] bcachefs (loop1): initializing freespace
[   73.257416][ T7878] bcachefs (loop1): done initializing freespace
[   73.266481][ T7878] bcachefs (loop1): reading snapshots table
[   73.266586][ T7878] bcachefs (loop1): reading snapshots done
[   73.305834][ T7878] bcachefs (loop1): done starting filesystem
[   73.385095][ T7924] loop2: detected capacity change from 0 to 512
[   73.497398][ T6534] bcachefs (loop1): shutting down
[   73.499129][ T6534] bcachefs (loop1): going read-only
[   73.500874][ T6534] bcachefs (loop1): finished waiting for writes to stop
[   73.511703][ T7924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.561354][ T6534] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8
[   73.576306][ T7924] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 3: comm syz.2.401: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0
[   73.597607][ T6524] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   73.681763][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.780431][ T6534] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13
[   73.803650][ T6534] bcachefs (loop1): clean shutdown complete, journal seq 14
[   73.804441][ T6534] bcachefs (loop1): marking filesystem clean
[   73.903421][ T7933] loop4: detected capacity change from 0 to 1024
[   73.916968][ T7933] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   73.937785][ T6534] bcachefs (loop1): shutdown complete
[   73.970795][ T7933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.984869][ T7883] loop3: detected capacity change from 0 to 131072
[   73.993040][ T7883] F2FS-fs (loop3): invalid crc value
[   74.098158][ T7883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   74.145451][ T6525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.536944][ T7935] loop2: detected capacity change from 0 to 32768
[   74.605915][ T7935] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   74.678827][ T7935] XFS (loop2): Ending clean mount
[   74.771233][ T6523] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   74.917233][ T7948] loop4: detected capacity change from 0 to 40427
[   74.928204][ T7948] F2FS-fs (loop4): build fault injection rate: 690
[   74.928286][ T7948] F2FS-fs (loop4): Image doesn't support compression
[   74.928321][ T7948] F2FS-fs (loop4): Image doesn't support compression
[   74.928345][ T7948] F2FS-fs (loop4): build fault injection type: 0x4
[   74.992596][ T7953] loop0: detected capacity change from 0 to 32768
[   74.997089][ T7953] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.411 (7953)
[   75.018713][ T7953] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   75.018835][ T7953] BTRFS info (device loop0): using sha256 (sha256-arm64) checksum algorithm
[   75.018875][ T7953] BTRFS info (device loop0): using free-space-tree
[   75.044996][ T7948] F2FS-fs (loop4): invalid crc value
[   75.112699][ T7948] F2FS-fs (loop4): Start checkpoint disabled!
[   75.118609][ T7948] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   75.331748][ T6524] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   75.472661][ T7963] loop2: detected capacity change from 0 to 32768
[   75.555075][ T7963] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[   75.555075][ T7963] 
[   75.804149][ T8002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.421'.
[   75.914318][ T8007] loop4: detected capacity change from 0 to 524255232
[   75.991564][ T8012] pimreg0: tun_chr_ioctl cmd 1074812117
[   76.071242][ T8011] loop4: detected capacity change from 524255232 to 524288000
[   76.094689][ T7988] loop3: detected capacity change from 0 to 32768
[   76.123818][ T7988] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   76.186882][ T7988] XFS (loop3): Ending clean mount
[   76.188497][ T7988] XFS (loop3): Quotacheck needed: Please wait.
[   76.238607][ T7988] XFS (loop3): Quotacheck: Done.
[   76.249976][    T9] hid-generic 0005:0C45:1010.0003: item fetching failed at offset 0/3
[   76.252769][    T9] hid-generic 0005:0C45:1010.0003: probe with driver hid-generic failed with error -22
[   76.267085][ T8024] ALSA: seq fatal error: cannot create timer (-22)
[   76.445616][ T6535] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   76.506681][ T8033] mkiss: ax0: crc mode is auto.
[   76.852923][ T8053] loop4: detected capacity change from 0 to 524255232
[   76.952950][ T8056] ALSA: seq fatal error: cannot create timer (-22)
[   76.981932][ T8053] loop4: detected capacity change from 524255232 to 524288000
[   77.466689][ T8051] loop2: detected capacity change from 0 to 32768
[   77.467322][ T8051] btrfs: Deprecated parameter 'usebackuproot'
[   77.467358][ T8051] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   77.478330][ T8051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.437 (8051)
[   77.495104][ T8051] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.495217][ T8051] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm
[   77.495255][ T8051] BTRFS info (device loop2): using free-space-tree
[   77.575396][   T12] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   77.582071][ T8051] BTRFS error (device loop2): failed to load root extent
[   77.584242][ T8051] BTRFS warning (device loop2): try to load backup roots slot 1
[   77.587377][   T42] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   77.597200][ T8051] BTRFS warning (device loop2): couldn't read tree root
[   77.597286][ T8051] BTRFS warning (device loop2): try to load backup roots slot 2
[   77.597638][   T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   77.607823][ T8051] BTRFS warning (device loop2): couldn't read tree root
[   77.607897][ T8051] BTRFS warning (device loop2): try to load backup roots slot 3
[   77.694152][ T8051] BTRFS info (device loop2): rebuilding free space tree
[   77.722100][ T8051] BTRFS info (device loop2): checking UUID tree
[   77.858072][ T6523] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.889288][ T8065] loop0: detected capacity change from 0 to 32768
[   77.948121][ T8065] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   77.973367][ T8067] loop3: detected capacity change from 0 to 32768
[   77.987830][ T8065] XFS (loop0): Ending clean mount
[   78.060220][ T8067] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.119283][ T8076] loop4: detected capacity change from 0 to 32768
[   78.121102][ T8076] btrfs: Deprecated parameter 'usebackuproot'
[   78.121143][ T8076] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   78.125997][ T8069] loop1: detected capacity change from 0 to 32768
[   78.128431][ T8067] XFS (loop3): Ending clean mount
[   78.136758][ T8076] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.446 (8076)
[   78.157744][ T6524] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.166077][ T8076] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   78.166181][ T8076] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   78.166255][ T8076] BTRFS info (device loop4): disk space caching is enabled
[   78.166286][ T8076] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   78.186160][ T8069] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.245923][ T8124] loop2: detected capacity change from 0 to 4096
[   78.286615][ T8069] XFS (loop1): Ending clean mount
[   78.298067][ T6535] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.303019][  T169] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0
[   78.303348][ T8076] BTRFS error (device loop4): failed to load root extent
[   78.303410][ T8076] BTRFS warning (device loop4): try to load backup roots slot 1
[   78.322909][ T8124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.334683][ T8069] XFS (loop1): Quotacheck needed: Please wait.
[   78.341877][ T8076] BTRFS info (device loop4): rebuilding free space tree
[   78.376108][ T8076] BTRFS info (device loop4): disabling free space tree
[   78.376207][ T8076] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   78.376257][ T8076] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.395100][ T8076] BTRFS info (device loop4): checking UUID tree
[   78.404756][ T8069] XFS (loop1): Quotacheck: Done.
[   78.411571][ T8124] fs-verity: sha256 using implementation "sha256-arm64"
[   78.491778][ T6534] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.565806][ T8141] mkiss: ax0: crc mode is auto.
[   78.649947][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.730098][ T6525] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   78.795808][ T8148] sctp: [Deprecated]: syz.2.454 (pid 8148) Use of int in max_burst socket option.
[   78.795808][ T8148] Use struct sctp_assoc_value instead
[   79.148473][ T8144] loop3: detected capacity change from 0 to 32768
[   79.215531][ T8144] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.403690][ T8144] XFS (loop3): Ending clean mount
[   79.481186][ T8184] XFS (loop3): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   79.481348][ T8184] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x8 
[   79.481463][ T8184] XFS (loop3): Unmount and run xfs_repair
[   79.481491][ T8184] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   79.481520][ T8184] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   79.481547][ T8184] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   79.481574][ T8184] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   79.481600][ T8184] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   79.481626][ T8184] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   79.481653][ T8184] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.481679][ T8184] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.481746][ T8184] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.481776][ T8184] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x8 len 4 error 74
[   79.482067][ T8184] XFS (loop3): page discard on page 000000008a791932, inode 0x2446, pos 1048576.
[   79.641547][ T6535] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.668621][ T6535] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[   79.748194][ T8165] loop0: detected capacity change from 0 to 32768
[   79.816664][ T8165] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   79.884717][ T8165] XFS (loop0): Ending clean mount
[   80.067947][ T6524] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.201461][ T8188] loop1: detected capacity change from 0 to 32768
[   80.391446][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[   80.420045][ T8188] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   80.425938][ T8188]   allowing incompatible features above 0.0: (unknown version)
[   80.428811][ T8188]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   80.433482][ T8188] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   80.436210][ T8188] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   80.438918][ T8188] bcachefs (loop1): Version upgrade required:
[   80.438918][ T8188] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   80.438918][ T8188] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   80.438918][ T8188]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   80.506357][ T8188] bcachefs (loop1): dropping and reconstructing all alloc info
[   80.568331][ T8188] bcachefs (loop1): accounting_read... done
[   80.634232][ T8188] bcachefs (loop1): alloc_read... done
[   80.634986][ T8188] bcachefs (loop1): snapshots_read... done
[   80.635686][ T8188] bcachefs (loop1): check_allocations... done
[   80.697563][ T8188] bcachefs (loop1): going read-write
[   80.715223][ T8188] bcachefs (loop1): done starting filesystem
[   80.919657][ T6534] bcachefs (loop1): shutting down
[   80.919726][ T6534] bcachefs (loop1): going read-only
[   80.919789][ T6534] bcachefs (loop1): finished waiting for writes to stop
[   80.940062][ T6687] udevd[6687]: incorrect bcachefs checksum on /dev/loop1
[   80.975923][ T6534] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[   80.982081][ T6534] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11
[   80.993964][ T6534] bcachefs (loop1): unclean shutdown complete, journal seq 12
[   81.007124][ T6534] bcachefs (loop1): done going read-only, filesystem not clean
[   81.025403][ T6515] udevd[6515]: incorrect bcachefs checksum on /dev/loop1
[   81.087257][ T8247] process 'syz.0.488' launched './file1' with NULL argv: empty string added
[   81.100238][ T6534] bcachefs (loop1): shutdown complete
[   81.153011][ T8249] netlink: 112 bytes leftover after parsing attributes in process `syz.0.490'.
[   81.167606][ T8251] loop2: detected capacity change from 0 to 1024
[   81.171107][ T8251] EXT4-fs: inline encryption not supported
[   81.173480][ T8251] EXT4-fs: Ignoring removed i_version option
[   81.191778][ T8223] loop3: detected capacity change from 0 to 32768
[   81.194572][ T8223] btrfs: Deprecated parameter 'usebackuproot'
[   81.196410][ T8223] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   81.197033][ T8215] loop4: detected capacity change from 0 to 32768
[   81.204711][ T8223] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.478 (8223)
[   81.230033][ T8223] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.230145][ T8223] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm
[   81.254025][ T8251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.260237][ T8215] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[   81.260237][ T8215] 
[   81.313710][   T12] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   81.314100][ T8223] BTRFS error (device loop3): failed to load root extent
[   81.314140][ T8223] BTRFS warning (device loop3): try to load backup roots slot 1
[   81.314364][   T12] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   81.314453][ T8223] BTRFS warning (device loop3): couldn't read tree root
[   81.314478][ T8223] BTRFS warning (device loop3): try to load backup roots slot 2
[   81.314874][   T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   81.315077][ T8223] BTRFS warning (device loop3): couldn't read tree root
[   81.315105][ T8223] BTRFS warning (device loop3): try to load backup roots slot 3
[   81.371513][ T8223] BTRFS info (device loop3): rebuilding free space tree
[   81.398275][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.408678][ T8223] BTRFS info (device loop3): disabling free space tree
[   81.408794][ T8223] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   81.408823][ T8223] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   81.444351][ T8268] loop0: detected capacity change from 0 to 2048
[   81.468232][ T8268] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   81.513141][ T8273] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.730699][ T6535] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.864940][ T8287] io-wq is not configured for unbound workers
[   82.174612][ T8277] loop2: detected capacity change from 0 to 32768
[   82.191860][ T8277] btrfs: Deprecated parameter 'usebackuproot'
[   82.193889][ T8277] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   82.197414][ T8277] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.494 (8277)
[   82.211894][ T8277] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   82.212015][ T8277] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   82.212061][ T8277] BTRFS info (device loop2): disk space caching is enabled
[   82.212085][ T8277] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   82.248236][  T179] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0
[   82.249020][ T8277] BTRFS error (device loop2): failed to load root extent
[   82.249072][ T8277] BTRFS warning (device loop2): try to load backup roots slot 1
[   82.268582][ T8277] BTRFS info (device loop2): rebuilding free space tree
[   82.273539][   T31] audit: type=1326 audit(81.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8306 comm="syz.0.503" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f35af28 code=0x0
[   82.307015][ T8277] BTRFS info (device loop2): disabling free space tree
[   82.307112][ T8277] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   82.307140][ T8277] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   82.315589][ T8277] BTRFS info (device loop2): checking UUID tree
[   82.507382][ T8296] loop3: detected capacity change from 0 to 32768
[   82.510958][ T8296] btrfs: Deprecated parameter 'usebackuproot'
[   82.513066][ T8296] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   82.519727][ T8296] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.502 (8296)
[   82.531706][ T8296] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   82.535097][ T8296] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm
[   82.535180][ T8296] BTRFS info (device loop3): using free-space-tree
[   82.561164][ T6523] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   82.644412][  T304] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   82.648715][ T8296] BTRFS error (device loop3): failed to load root extent
[   82.648810][ T8296] BTRFS warning (device loop3): try to load backup roots slot 1
[   82.649192][  T304] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   82.658299][ T8296] BTRFS warning (device loop3): couldn't read tree root
[   82.658364][ T8296] BTRFS warning (device loop3): try to load backup roots slot 2
[   82.660526][   T41] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   82.665967][ T8296] BTRFS warning (device loop3): couldn't read tree root
[   82.666034][ T8296] BTRFS warning (device loop3): try to load backup roots slot 3
[   82.704047][ T8296] BTRFS info (device loop3): rebuilding free space tree
[   82.726807][ T8296] BTRFS info (device loop3): checking UUID tree
[   82.809707][ T8334] loop4: detected capacity change from 0 to 4096
[   82.842182][ T8336] pimreg: tun_chr_ioctl cmd 2148553947
[   82.876149][ T8334] ntfs3(loop4): ino=1a, mi_enum_attr
[   82.876239][ T8334] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[   82.969463][ T6535] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.236603][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'.
[   83.575323][ T8342] loop2: detected capacity change from 0 to 32768
[   83.790569][ T8342] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[   83.790624][ T8342]   allowing incompatible features above 0.0: (unknown version)
[   83.790658][ T8342]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   83.790717][ T8342] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   83.790776][ T8342] bcachefs (loop2): initializing new filesystem
[   83.828499][ T8355] loop4: detected capacity change from 0 to 32768
[   83.839967][ T8357] loop0: detected capacity change from 0 to 32768
[   83.841360][ T8342] bcachefs (loop2): going read-write
[   83.865926][ T8357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.514 (8357)
[   83.893293][ T8357] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   83.893396][ T8357] BTRFS info (device loop0): using sha256 (sha256-arm64) checksum algorithm
[   83.893436][ T8357] BTRFS info (device loop0): disk space caching is enabled
[   83.893460][ T8357] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   83.895055][ T8342] bcachefs (loop2): marking superblocks
[   83.898624][ T8342] bcachefs (loop2): initializing freespace
[   83.927742][ T8353] loop3: detected capacity change from 0 to 32768
[   83.951861][ T8342] bcachefs (loop2): done initializing freespace
[   83.959152][ T8342] bcachefs (loop2): reading snapshots table
[   83.959264][ T8342] bcachefs (loop2): reading snapshots done
[   83.978302][ T8342] bcachefs (loop2): done starting filesystem
[   83.980939][ T8355] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[   84.075174][ T8357] BTRFS info (device loop0): rebuilding free space tree
[   84.133886][ T8357] BTRFS info (device loop0): disabling free space tree
[   84.133988][ T8357] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.134041][ T8357] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.140416][ T8387] loop1: detected capacity change from 0 to 256
[   84.245723][ T8390] loop3: detected capacity change from 0 to 256
[   84.246410][ T8390] exfat: Deprecated parameter 'namecase'
[   84.284059][ T6523] bcachefs (loop2): shutting down
[   84.284132][ T6523] bcachefs (loop2): going read-only
[   84.284162][ T6523] bcachefs (loop2): finished waiting for writes to stop
[   84.298321][  T179] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   84.303139][ T6523] bcachefs (loop2): flushing journal and stopping allocators, journal seq 9
[   84.331682][ T6525] ocfs2: Unmounting device (7,4) on (node local)
[   84.357415][ T8390] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[   84.407389][ T6524] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.489653][ T6523] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14
[   84.496267][ T6523] bcachefs (loop2): clean shutdown complete, journal seq 15
[   84.497061][ T6523] bcachefs (loop2): marking filesystem clean
[   84.736030][ T6523] bcachefs (loop2): shutdown complete
[   84.858516][ T8413] loop1: detected capacity change from 0 to 2048
[   84.865446][ T8413] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485
[   84.946018][ T8413] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.996218][ T8413] mkiss: ax0: crc mode is auto.
[   85.368148][ T8417] loop3: detected capacity change from 0 to 32768
[   85.382565][ T8417] XFS: noikeep mount option is deprecated.
[   85.404572][ T8408] loop4: detected capacity change from 0 to 40427
[   85.408371][ T8408] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   85.408453][ T8408] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   85.415121][ T8408] F2FS-fs (loop4): invalid crc value
[   85.437533][ T8417] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   85.495660][ T8415] loop0: detected capacity change from 0 to 32768
[   85.502956][ T8417] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   85.514606][ T8417] XFS (loop3): Starting recovery (logdev: internal)
[   85.558040][ T8408] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   85.558111][ T8408] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   85.582495][ T8417] XFS (loop3): Ending recovery (logdev: internal)
[   85.617409][ T8417] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x320/0x44c, xfs_bnobt block 0x8
[   85.622176][ T8417] XFS (loop3): Unmount and run xfs_repair
[   85.652062][ T6535] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   85.656072][ T6535] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[   85.681898][ T6525] syz-executor: attempt to access beyond end of device
[   85.681898][ T6525] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   85.683284][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   85.683313][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   85.683321][ T6525] Call trace:
[   85.683325][ T6525]  show_stack+0x2c/0x3c (C)
[   85.683347][ T6525]  __dump_stack+0x30/0x40
[   85.683362][ T6525]  dump_stack_lvl+0xd8/0x12c
[   85.683377][ T6525]  dump_stack+0x1c/0x28
[   85.683390][ T6525]  f2fs_handle_critical_error+0x34c/0x4b8
[   85.683405][ T6525]  f2fs_stop_checkpoint+0x5c/0x70
[   85.683418][ T6525]  f2fs_write_end_io+0x58c/0x818
[   85.683433][ T6525]  bio_endio+0x804/0x840
[   85.683445][ T6525]  submit_bio_noacct+0x158/0x176c
[   85.683460][ T6525]  submit_bio+0x354/0x4d4
[   85.683472][ T6525]  f2fs_submit_write_bio+0x13c/0x324
[   85.683483][ T6525]  __submit_merged_bio+0x254/0x704
[   85.683499][ T6525]  __submit_merged_write_cond+0x380/0x4ac
[   85.683510][ T6525]  f2fs_submit_merged_write+0x38/0x48
[   85.683523][ T6525]  f2fs_sync_node_pages+0x1718/0x18d0
[   85.683536][ T6525]  f2fs_write_checkpoint+0xac8/0x1694
[   85.683552][ T6525]  kill_f2fs_super+0x21c/0x584
[   85.683564][ T6525]  deactivate_locked_super+0xc4/0x12c
[   85.683576][ T6525]  deactivate_super+0xe0/0x100
[   85.683588][ T6525]  cleanup_mnt+0x31c/0x3ac
[   85.683599][ T6525]  __cleanup_mnt+0x20/0x30
[   85.683610][ T6525]  task_work_run+0x1dc/0x260
[   85.683623][ T6525]  do_notify_resume+0x174/0x1f4
[   85.683635][ T6525]  el0_svc+0xb8/0x180
[   85.683649][ T6525]  el0t_64_sync_handler+0x84/0x12c
[   85.683660][ T6525]  el0t_64_sync+0x198/0x19c
[   85.712035][ T6525] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   85.793831][ T8419] loop1: detected capacity change from 0 to 32768
[   85.829902][ T8419] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.530 (8419)
[   85.865809][ T8419] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.865923][ T8419] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm
[   85.865963][ T8419] BTRFS info (device loop1): disk space caching is enabled
[   85.865987][ T8419] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   85.946956][ T8419] BTRFS info (device loop1): rebuilding free space tree
[   85.976551][ T8419] BTRFS info (device loop1): disabling free space tree
[   85.976641][ T8419] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   85.976695][ T8419] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   85.981793][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'.
[   86.172268][  T304] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   86.189722][ T6534] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   86.222778][ T8463] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[   86.227354][ T8463] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[   86.333666][ T8464] support for the xor transformation has been removed.
[   86.351196][ T8476] 8021q: VLANs not supported on xfrm0
[   86.367641][ T8415] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[   86.367710][ T8415]   allowing incompatible features above 0.0: (unknown version)
[   86.403753][ T8415]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   86.408293][ T8415] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   86.411298][ T8415] bcachefs (loop0): initializing new filesystem
[   86.416888][ T8415] bcachefs (loop0): going read-write
[   86.449684][ T8415] bcachefs (loop0): marking superblocks
[   86.456215][ T8415] bcachefs (loop0): initializing freespace
[   86.467212][ T8415] bcachefs (loop0): done initializing freespace
[   86.470764][ T8415] bcachefs (loop0): reading snapshots table
[   86.472647][ T8415] bcachefs (loop0): reading snapshots done
[   86.522969][ T8415] bcachefs (loop0): done starting filesystem
[   86.798869][ T6524] bcachefs (loop0): shutting down
[   86.798950][ T6524] bcachefs (loop0): going read-only
[   86.798980][ T6524] bcachefs (loop0): finished waiting for writes to stop
[   86.814748][ T6524] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8
[   86.830459][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'.
[   86.873595][ T8504] loop3: detected capacity change from 0 to 64
[   86.930886][ T6524] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12
[   86.941515][ T6524] bcachefs (loop0): clean shutdown complete, journal seq 13
[   86.942308][ T6524] bcachefs (loop0): marking filesystem clean
[   87.018759][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'.
[   87.024319][ T8506] loop1: detected capacity change from 0 to 2048
[   87.043784][ T6524] bcachefs (loop0): shutdown complete
[   87.080020][ T8506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   87.142235][ T8506] EXT4-fs (loop1): shut down requested (1)
[   87.208409][ T6534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   87.397618][ T8534] loop1: detected capacity change from 0 to 256
[   88.104675][ T8542] loop3: detected capacity change from 0 to 32768
[   88.117778][ T8542] XFS: ikeep mount option is deprecated.
[   88.146175][ T8542] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   88.216630][ T8542] XFS (loop3): Ending clean mount
[   88.218765][ T8542] XFS (loop3): Quotacheck needed: Please wait.
[   88.277424][ T8568] loop1: detected capacity change from 0 to 1024
[   88.319689][ T8542] XFS (loop3): Quotacheck: Done.
[   88.413660][ T8568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.487639][ T6535] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   88.496707][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.580'.
[   88.496842][ T8583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.497250][ T8583] IPv6: NLM_F_CREATE should be set when creating new route
[   88.497280][ T8583] IPv6: NLM_F_CREATE should be set when creating new route
[   88.633278][ T6534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.888981][ T8601] loop2: detected capacity change from 0 to 512
[   88.918501][ T8601] EXT4-fs: Ignoring removed nobh option
[   88.958121][ T8601] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   88.962529][ T8601] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.589: invalid indirect mapped block 2683928664 (level 1)
[   88.970255][ T8601] EXT4-fs (loop2): 1 truncate cleaned up
[   88.972031][ T8601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.041708][ T8601] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.589: Invalid block bitmap block 3 in block_group 0
[   89.048661][ T8601] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   89.052391][ T8601] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.589: invalid indirect mapped block 480848489 (level 1)
[   89.123286][ T8616] loop0: detected capacity change from 0 to 1024
[   89.155311][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.268264][ T8616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.402517][ T6524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.663479][ T8631] loop3: detected capacity change from 0 to 32768
[   89.667170][ T8631] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.601 (8631)
[   89.708232][ T8631] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   89.708340][ T8631] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   89.708385][ T8631] BTRFS info (device loop3): using free-space-tree
[   89.816391][ T8627] loop2: detected capacity change from 0 to 32768
[   89.821303][ T8627] XFS: ikeep mount option is deprecated.
[   89.823762][ T8627] XFS: ikeep mount option is deprecated.
[   89.894241][ T8627] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   89.929180][ T6535] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   90.058983][ T8627] XFS (loop2): Ending clean mount
[   90.306493][ T6523] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   90.425189][ T8691] loop3: detected capacity change from 0 to 16
[   90.425859][ T8691] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   90.745062][ T8713] netlink: 236 bytes leftover after parsing attributes in process `syz.1.624'.
[   91.209180][ T8710] loop4: detected capacity change from 0 to 32768
[   91.214503][ T8710] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.627 (8710)
[   91.261762][ T8710] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   91.261872][ T8710] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   91.261909][ T8710] BTRFS info (device loop4): disk space caching is enabled
[   91.261932][ T8710] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   91.356402][ T8710] BTRFS info (device loop4): rebuilding free space tree
[   91.386497][ T8710] BTRFS info (device loop4): disabling free space tree
[   91.386587][ T8710] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   91.386634][ T8710] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   91.594283][ T6525] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   91.750868][ T8760] netlink: 64 bytes leftover after parsing attributes in process `syz.2.642'.
[   91.753298][ T8758] loop3: detected capacity change from 0 to 512
[   91.758907][ T8758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   91.792592][ T8758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.835282][ T8758] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.641: verity file corrupted; can't find descriptor
[   91.847979][ T8758] EXT4-fs (loop3): Remounting filesystem read-only
[   91.848354][ T8758] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[   91.859263][ T8758] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[   91.990668][ T6535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.230598][ T8771] Falling back ldisc for ttyS3.
[   92.829182][ T6527] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   92.834756][ T6527] CPU: 1 UID: 0 PID: 6527 Comm: kworker/u9:3 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   92.834786][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   92.834795][ T6527] Workqueue: hci2 hci_rx_work
[   92.834820][ T6527] Call trace:
[   92.834824][ T6527]  show_stack+0x2c/0x3c (C)
[   92.834840][ T6527]  __dump_stack+0x30/0x40
[   92.834855][ T6527]  dump_stack_lvl+0xd8/0x12c
[   92.834870][ T6527]  dump_stack+0x1c/0x28
[   92.834884][ T6527]  sysfs_create_dir_ns+0x22c/0x24c
[   92.834899][ T6527]  kobject_add_internal+0x5a8/0xb20
[   92.834913][ T6527]  kobject_add+0x134/0x200
[   92.834925][ T6527]  device_add+0x394/0xa60
[   92.834940][ T6527]  hci_conn_add_sysfs+0xc0/0x1d0
[   92.834951][ T6527]  le_conn_complete_evt+0x98c/0xe84
[   92.834966][ T6527]  hci_le_enh_conn_complete_evt+0x114/0x3f8
[   92.834981][ T6527]  hci_le_meta_evt+0x2cc/0x4b0
[   92.834994][ T6527]  hci_event_packet+0x60c/0xe9c
[   92.835005][ T6527]  hci_rx_work+0x320/0xb18
[   92.835019][ T6527]  process_one_work+0x7e8/0x155c
[   92.835034][ T6527]  worker_thread+0x958/0xed8
[   92.835049][ T6527]  kthread+0x5fc/0x75c
[   92.835062][ T6527]  ret_from_fork+0x10/0x20
[   92.838617][ T6527] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   92.838678][ T6527] Bluetooth: hci2: failed to register connection device
[   92.993350][ T8789] loop1: detected capacity change from 0 to 1024
[   93.077472][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'.
[   93.237172][  T304] hfsplus: b-tree write err: -5, ino 8
[   93.276573][ T8793] bridge1: entered allmulticast mode
[   93.307577][ T8776] loop2: detected capacity change from 0 to 262144
[   93.360245][ T8776] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   93.466251][ T8806] loop3: detected capacity change from 0 to 64
[   93.744698][ T6535] hfs: node 4:3 still has 1 user(s)!
[   93.804810][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'.
[   94.024577][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'.
[   94.030232][ T6527] Bluetooth: hci4: command 0x0405 tx timeout
[   94.072926][ T8811] loop1: detected capacity change from 0 to 32768
[   94.096873][ T8811] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   94.156543][ T8811] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   94.171570][ T8811] XFS (loop1): Starting recovery (logdev: internal)
[   94.199628][ T8811] XFS (loop1): Ending recovery (logdev: internal)
[   94.327818][ T8835] loop2: detected capacity change from 0 to 2048
[   94.355946][ T8836] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.432759][ T8836] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   94.436654][ T8836] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[   94.441738][ T8836] Remounting filesystem read-only
[   94.514711][ T6523] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[   94.537707][ T8811] XFS (loop1): User initiated shutdown received.
[   94.537884][ T8811] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x15c (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[   94.537927][ T8811] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   94.626567][ T6534] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   94.656037][ T8838] loop2: detected capacity change from 0 to 1024
[   94.733841][ T8838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.882832][ T8838] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   95.133649][ T6527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   95.142081][ T6527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   95.144515][ T6527] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   95.149437][ T6527] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   95.159641][ T6527] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   95.314033][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.788433][ T8850] chnl_net:caif_netlink_parms(): no params data found
[   95.957943][ T8882] ALSA: mixer_oss: invalid OSS volume ''
[   96.013271][ T8871] loop4: detected capacity change from 0 to 32768
[   96.014485][ T8871] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.686 (8871)
[   96.042656][ T8864] loop0: detected capacity change from 0 to 32768
[   96.057970][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.058104][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.058300][ T8850] bridge_slave_0: entered allmulticast mode
[   96.061836][ T8850] bridge_slave_0: entered promiscuous mode
[   96.063386][ T8871] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.063468][ T8871] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm
[   96.063505][ T8871] BTRFS info (device loop4): using free-space-tree
[   96.068337][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.068430][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.068595][ T8850] bridge_slave_1: entered allmulticast mode
[   96.073338][ T8850] bridge_slave_1: entered promiscuous mode
[   96.153085][ T8864] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   96.204819][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.220956][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.263523][ T8864] XFS (loop0): Ending clean mount
[   96.273796][ T8864] XFS (loop0): Quotacheck needed: Please wait.
[   96.339100][ T8864] XFS (loop0): Quotacheck: Done.
[   96.404559][ T6525] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.473497][ T8850] team0: Port device team_slave_0 added
[   96.490795][ T8850] team0: Port device team_slave_1 added
[   96.517207][ T8913] loop1: detected capacity change from 0 to 32768
[   96.587174][ T8916] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[   96.601763][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.601832][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.604889][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.607137][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.607171][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.607228][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.666863][ T6524] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   96.754106][ T8913] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[   96.754173][ T8913]   allowing incompatible features above 0.0: (unknown version)
[   96.754205][ T8913]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   96.754259][ T8913] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   96.754984][ T8913] bcachefs (loop1): invalid bkey in superblock btree=snapshots level=1: u64s 11 type inode SPOS_MAX len 0 ver 0: (unpack error)
[   96.755027][ T8913]   invalid key type for btree internal btree node (inode), deleting
[   96.755272][ T8913] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   96.755412][ T8913] bcachefs (loop1): Version upgrade required:
[   96.755412][ T8913] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   96.755412][ T8913] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   96.755412][ T8913]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   96.755604][ T8913] bcachefs (loop1): dropping and reconstructing all alloc info
[   96.801534][    C1] vkms_vblank_simulate: vblank timer overrun
[   96.814759][ T8913] bcachefs (loop1): accounting_read...
[   96.823668][ T8927] loop4: detected capacity change from 0 to 512
[   96.824865][ T8927] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   96.842225][ T8913]  done
[   96.842334][ T8913] bcachefs (loop1): alloc_read... done
[   96.842502][ T8913] bcachefs (loop1): snapshots_read... done
[   96.842973][ T8913] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[   96.843140][ T8913] bcachefs (loop1): done starting filesystem
[   96.887551][ T8927] EXT4-fs (loop4): 1 orphan inode deleted
[   96.887640][ T8927] EXT4-fs (loop4): 1 truncate cleaned up
[   96.896410][ T8927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.904511][ T8850] hsr_slave_0: entered promiscuous mode
[   96.911074][ T8850] hsr_slave_1: entered promiscuous mode
[   96.913362][ T8850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.915858][ T8913] bcachefs (loop1): shutdown by ioctl type 1emergency read only at seq 10
[   96.918342][ T8850] Cannot create hsr debugfs directory
[   96.931421][ T8927] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   96.947841][ T8927] EXT4-fs (loop4): Remounting filesystem read-only
[   96.948382][ T8927] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -30)
[   96.995896][ T6534] bcachefs (loop1): shutting down
[   97.032480][ T6525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.098333][ T6534] bcachefs (loop1): shutdown complete
[   97.229775][ T6526] Bluetooth: hci4: command tx timeout
[   97.389260][ T8946] loop2: detected capacity change from 0 to 512
[   97.413191][ T8946] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.706: bad orphan inode 15
[   97.418221][ T8946] ext4_test_bit(bit=14, block=18) = 1
[   97.418284][ T8946] is_bad_inode(inode)=0
[   97.418321][ T8946] NEXT_ORPHAN(inode)=1023
[   97.418345][ T8946] max_ino=32
[   97.418368][ T8946] i_nlink=0
[   97.439607][ T8946] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.706: corrupted xattr block 19: invalid header
[   97.445658][ T8946] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[   97.446642][ T8946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   97.453698][ T8850] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.609027][ T8952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.708'.
[   97.626438][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   97.668295][ T8850] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.724266][ T8956] netlink: 'syz.2.709': attribute type 10 has an invalid length.
[   97.850468][ T8956] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   97.864406][ T8950] loop0: detected capacity change from 0 to 32768
[   97.878637][ T8955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.894000][ T8950] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   97.931984][ T8850] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.937177][ T8950] XFS (loop0): Ending clean mount
[   97.984213][ T6524] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   98.051925][ T8850] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.093870][ T8954] loop4: detected capacity change from 0 to 32768
[   98.130857][ T8954] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   98.228690][ T8954] XFS (loop4): Ending clean mount
[   98.244678][ T8954] XFS (loop4): Quotacheck needed: Please wait.
[   98.313724][ T8954] XFS (loop4): Quotacheck: Done.
[   98.452628][ T8850] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.467242][ T8982] random: crng reseeded on system resumption
[   98.482025][ T8850] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.486402][ T8850] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.506004][ T6525] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   98.506929][ T8850] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.540807][ T8982] Restarting kernel threads ...
[   98.544257][ T8982] Done restarting kernel threads.
[   98.703799][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.715709][ T8850] 8021q: adding VLAN 0 to HW filter on device team0
[   98.733437][  T179] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.733549][  T179] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.741978][  T179] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.742070][  T179] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.792403][ T8850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.910869][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.975302][ T8850] veth0_vlan: entered promiscuous mode
[   98.987082][ T8850] veth1_vlan: entered promiscuous mode
[   99.028233][ T8850] veth0_macvtap: entered promiscuous mode
[   99.038967][ T8850] veth1_macvtap: entered promiscuous mode
[   99.058509][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.113932][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.115756][ T8850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.115803][ T8850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.115842][ T8850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.115872][ T8850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.310658][ T6526] Bluetooth: hci4: command tx timeout
[   99.383064][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.383143][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.532278][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.532350][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.541809][ T8994] loop0: detected capacity change from 0 to 40427
[   99.555356][ T8994] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   99.555435][ T8994] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   99.571612][ T8994] F2FS-fs (loop0): invalid crc value
[   99.702843][ T8994] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   99.702918][ T8994] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   99.761502][ T8994] syz.0.717: attempt to access beyond end of device
[   99.761502][ T8994] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   99.763460][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.0.717 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   99.763487][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   99.763495][ T8994] Call trace:
[   99.763499][ T8994]  show_stack+0x2c/0x3c (C)
[   99.763519][ T8994]  __dump_stack+0x30/0x40
[   99.763536][ T8994]  dump_stack_lvl+0xd8/0x12c
[   99.763550][ T8994]  dump_stack+0x1c/0x28
[   99.763565][ T8994]  f2fs_handle_critical_error+0x34c/0x4b8
[   99.763580][ T8994]  f2fs_stop_checkpoint+0x5c/0x70
[   99.763594][ T8994]  f2fs_write_end_io+0x58c/0x818
[   99.763608][ T8994]  bio_endio+0x804/0x840
[   99.763620][ T8994]  submit_bio_noacct+0x158/0x176c
[   99.763636][ T8994]  submit_bio+0x354/0x4d4
[   99.763649][ T8994]  f2fs_submit_write_bio+0x13c/0x324
[   99.763661][ T8994]  __submit_merged_bio+0x254/0x704
[   99.763673][ T8994]  f2fs_submit_page_write+0x9bc/0x182c
[   99.763685][ T8994]  do_write_page+0x4ac/0x6d8
[   99.763697][ T8994]  f2fs_outplace_write_data+0x114/0x210
[   99.763709][ T8994]  f2fs_do_write_data_page+0xf98/0x14f0
[   99.763722][ T8994]  f2fs_write_single_data_page+0x6c0/0x10b0
[   99.763750][ T8994]  f2fs_write_data_pages+0x134c/0x2634
[   99.763763][ T8994]  do_writepages+0x270/0x468
[   99.763779][ T8994]  filemap_fdatawrite+0x144/0x1e8
[   99.763790][ T8994]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   99.763805][ T8994]  f2fs_write_checkpoint+0x684/0x1694
[   99.763821][ T8994]  f2fs_issue_checkpoint+0x2e8/0x420
[   99.763836][ T8994]  f2fs_sync_fs+0x1e0/0x4f4
[   99.763847][ T8994]  f2fs_do_sync_file+0x974/0x14f0
[   99.763861][ T8994]  f2fs_sync_file+0x110/0x15c
[   99.763874][ T8994]  vfs_fsync_range+0x160/0x19c
[   99.763887][ T8994]  f2fs_file_write_iter+0x5c0/0x1d10
[   99.763900][ T8994]  vfs_write+0x62c/0x97c
[   99.763915][ T8994]  ksys_write+0x120/0x210
[   99.763929][ T8994]  __arm64_sys_write+0x7c/0x90
[   99.763943][ T8994]  invoke_syscall+0x98/0x2b8
[   99.763953][ T8994]  el0_svc_common+0x130/0x23c
[   99.763964][ T8994]  do_el0_svc+0x48/0x58
[   99.763974][ T8994]  el0_svc+0x58/0x180
[   99.763987][ T8994]  el0t_64_sync_handler+0x84/0x12c
[   99.763998][ T8994]  el0t_64_sync+0x198/0x19c
[   99.780010][ T8994] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   99.780262][ T8994] syz.0.717: attempt to access beyond end of device
[   99.780262][ T8994] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   99.780324][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.0.717 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   99.780339][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   99.780346][ T8994] Call trace:
[   99.780350][ T8994]  show_stack+0x2c/0x3c (C)
[   99.780368][ T8994]  __dump_stack+0x30/0x40
[   99.780385][ T8994]  dump_stack_lvl+0xd8/0x12c
[   99.780399][ T8994]  dump_stack+0x1c/0x28
[   99.780413][ T8994]  f2fs_handle_critical_error+0x34c/0x4b8
[   99.780427][ T8994]  f2fs_stop_checkpoint+0x5c/0x70
[   99.780442][ T8994]  f2fs_write_end_io+0x58c/0x818
[   99.780455][ T8994]  bio_endio+0x804/0x840
[   99.780467][ T8994]  submit_bio_noacct+0x158/0x176c
[   99.780483][ T8994]  submit_bio+0x354/0x4d4
[   99.780496][ T8994]  f2fs_submit_write_bio+0x13c/0x324
[   99.780508][ T8994]  __submit_merged_bio+0x254/0x704
[   99.780520][ T8994]  __submit_merged_write_cond+0x23c/0x4ac
[   99.780532][ T8994]  f2fs_write_single_data_page+0xc00/0x10b0
[   99.780545][ T8994]  f2fs_write_data_pages+0x134c/0x2634
[   99.780557][ T8994]  do_writepages+0x270/0x468
[   99.780574][ T8994]  filemap_fdatawrite+0x144/0x1e8
[   99.780585][ T8994]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   99.780601][ T8994]  f2fs_write_checkpoint+0x684/0x1694
[   99.780616][ T8994]  f2fs_issue_checkpoint+0x2e8/0x420
[   99.780631][ T8994]  f2fs_sync_fs+0x1e0/0x4f4
[   99.780641][ T8994]  f2fs_do_sync_file+0x974/0x14f0
[   99.780655][ T8994]  f2fs_sync_file+0x110/0x15c
[   99.780668][ T8994]  vfs_fsync_range+0x160/0x19c
[   99.780680][ T8994]  f2fs_file_write_iter+0x5c0/0x1d10
[   99.780694][ T8994]  vfs_write+0x62c/0x97c
[   99.780708][ T8994]  ksys_write+0x120/0x210
[   99.780722][ T8994]  __arm64_sys_write+0x7c/0x90
[   99.780754][ T8994]  invoke_syscall+0x98/0x2b8
[   99.780765][ T8994]  el0_svc_common+0x130/0x23c
[   99.780775][ T8994]  do_el0_svc+0x48/0x58
[   99.780785][ T8994]  el0_svc+0x58/0x180
[   99.780798][ T8994]  el0t_64_sync_handler+0x84/0x12c
[   99.780810][ T8994]  el0t_64_sync+0x198/0x19c
[   99.780825][ T8994] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   99.864849][ T9022] loop3: detected capacity change from 0 to 128
[   99.930464][ T9022] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   99.993148][ T9018] loop4: detected capacity change from 0 to 32768
[   99.999515][ T9018] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.725 (9018)
[  100.010594][ T9018] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  100.010705][ T9018] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  100.010753][ T9018] BTRFS info (device loop4): using free-space-tree
[  100.054981][ T8850] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.238336][ T9014] loop1: detected capacity change from 0 to 32768
[  100.328876][ T6525] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  100.449252][ T9014] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=/dev/loop1,nojournal_transaction_names
[  100.455616][ T9014]   allowing incompatible features above 0.0: (unknown version)
[  100.458041][ T9014]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  100.462585][ T9014] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  100.465549][ T9014] bcachefs (loop1): initializing new filesystem
[  100.471113][ T9014] bcachefs (loop1): going read-write
[  100.579494][ T9014] bcachefs (loop1): marking superblocks
[  100.628654][ T9014] bcachefs (loop1): initializing freespace
[  100.649831][ T9014] bcachefs (loop1): done initializing freespace
[  100.658342][ T9054] loop0: detected capacity change from 0 to 32768
[  100.661620][ T9054] btrfs: Deprecated parameter 'usebackuproot'
[  100.669399][ T9054] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  100.673807][ T9004] loop2: detected capacity change from 0 to 131072
[  100.681713][ T9014] bcachefs (loop1): reading snapshots table
[  100.681833][ T9014] bcachefs (loop1): reading snapshots done
[  100.699492][ T9004] F2FS-fs (loop2): invalid crc value
[  100.728361][ T9054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.730 (9054)
[  100.742580][ T9054] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.745653][ T9054] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm
[  100.748585][ T9054] BTRFS info (device loop0): using free-space-tree
[  100.764870][ T9014] bcachefs (loop1): done starting filesystem
[  100.803890][ T9004] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  100.853945][ T9054] BTRFS info (device loop0): rebuilding free space tree
[  101.031388][ T6524] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  101.092249][ T6534] bcachefs (loop1): shutting down
[  101.092313][ T6534] bcachefs (loop1): going read-only
[  101.092368][ T6534] bcachefs (loop1): finished waiting for writes to stop
[  101.199798][ T6534] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  101.268185][ T9089] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  101.395243][ T6527] Bluetooth: hci4: command tx timeout
[  101.417850][ T6534] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  101.423321][ T6534] bcachefs (loop1): clean shutdown complete, journal seq 4
[  101.424132][ T6534] bcachefs (loop1): marking filesystem clean
[  101.500472][ T9097] loop3: detected capacity change from 0 to 256
[  101.546446][ T9097] FAT-fs (loop3): Directory bread(block 1285) failed
[  101.551436][ T6534] bcachefs (loop1): shutdown complete
[  101.604859][ T9097] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  102.021068][ T9093] loop4: detected capacity change from 0 to 40427
[  102.025750][ T9093] F2FS-fs (loop4): heap/no_heap options were deprecated
[  102.025854][ T9093] F2FS-fs (loop4): build fault injection rate: 19
[  102.025903][ T9093] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  102.027782][ T9093] F2FS-fs (loop4): invalid crc value
[  102.038555][ T9093] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac
[  102.055189][ T9093] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0
[  102.085601][ T9093] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  102.364640][ T9110] loop0: detected capacity change from 0 to 32768
[  102.371206][ T9110] btrfs: Unknown parameter 'check_int_print_mask'
[  102.758369][ T9122] sp0: Synchronizing with TNC
[  102.843666][ T9118] loop0: detected capacity change from 0 to 32768
[  102.929861][ T9125] sp0: Synchronizing with TNC
[  103.225297][ T9118] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  103.225348][ T9118]   allowing incompatible features above 0.0: (unknown version)
[  103.225372][ T9118]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  103.225431][ T9118] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  103.225479][ T9118] bcachefs (loop0): initializing new filesystem
[  103.242084][ T9118] bcachefs (loop0): going read-write
[  103.290229][ T9118] bcachefs (loop0): marking superblocks
[  103.327791][ T9118] bcachefs (loop0): initializing freespace
[  103.353740][ T9118] bcachefs (loop0): done initializing freespace
[  103.392356][ T9118] bcachefs (loop0): reading snapshots table
[  103.392458][ T9118] bcachefs (loop0): reading snapshots done
[  103.401927][ T9153] loop2: detected capacity change from 0 to 1024
[  103.412163][ T9153] EXT4-fs: Ignoring removed oldalloc option
[  103.412246][ T9153] EXT4-fs: Ignoring removed bh option
[  103.434282][ T9153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.469608][ T6527] Bluetooth: hci4: command tx timeout
[  103.559790][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.560009][ T9118] bcachefs (loop0): done starting filesystem
[  103.576816][ T9166] netlink: 232 bytes leftover after parsing attributes in process `syz.4.760'.
[  103.577303][ T9166] NCSI netlink: No device for ifindex 0
[  103.823882][ T6524] bcachefs (loop0): shutting down
[  103.823952][ T6524] bcachefs (loop0): going read-only
[  103.825790][ T6524] bcachefs (loop0): finished waiting for writes to stop
[  103.870164][ T6524] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  103.952032][ T6524] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  103.956253][ T6524] bcachefs (loop0): clean shutdown complete, journal seq 4
[  103.957116][ T6524] bcachefs (loop0): marking filesystem clean
[  104.022527][ T9169] loop1: detected capacity change from 0 to 32768
[  104.026729][ T9169] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.762 (9169)
[  104.037258][ T9169] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  104.041022][ T9169] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  104.041107][ T9169] BTRFS info (device loop1): using free-space-tree
[  104.049222][ T9186] loop2: detected capacity change from 0 to 64
[  104.058965][ T6524] bcachefs (loop0): shutdown complete
[  104.147628][ T9205] netlink: 'syz.3.772': attribute type 1 has an invalid length.
[  104.147703][ T9205] netlink: 144 bytes leftover after parsing attributes in process `syz.3.772'.
[  104.147727][ T9205] netlink: 36 bytes leftover after parsing attributes in process `syz.3.772'.
[  104.186185][ T6534] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  105.561670][ T9260] sit0: entered promiscuous mode
[  105.570571][ T9260] netlink: 'syz.1.796': attribute type 1 has an invalid length.
[  105.570626][ T9260] netlink: 1 bytes leftover after parsing attributes in process `syz.1.796'.
[  105.629826][ T9248] loop2: detected capacity change from 0 to 32768
[  105.653121][ T9245] loop3: detected capacity change from 0 to 32768
[  105.684004][ T9256] loop4: detected capacity change from 0 to 32768
[  105.687702][ T9256] BTRFS warning: excessive commit interval 2147483649, use with care
[  105.690870][ T9256] btrfs: Deprecated parameter 'usebackuproot'
[  105.692933][ T9256] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  105.696962][ T9256] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.794 (9256)
[  105.698034][ T9245] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  105.753599][ T9256] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.753707][ T9256] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm
[  105.753776][ T9256] BTRFS info (device loop4): using free-space-tree
[  105.833204][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'.
[  105.846611][ T9280] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.798'.
[  105.866201][  T304] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  105.867685][ T9256] BTRFS error (device loop4): failed to load root extent
[  105.867756][ T9256] BTRFS warning (device loop4): try to load backup roots slot 1
[  105.868655][  T304] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  105.868730][ T9256] BTRFS warning (device loop4): couldn't read tree root
[  105.868771][ T9256] BTRFS warning (device loop4): try to load backup roots slot 2
[  105.869013][  T304] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  105.869064][ T9256] BTRFS warning (device loop4): couldn't read tree root
[  105.869089][ T9256] BTRFS warning (device loop4): try to load backup roots slot 3
[  105.900016][ T9256] BTRFS info (device loop4): rebuilding free space tree
[  105.932917][ T9256] BTRFS info (device loop4): checking UUID tree
[  105.952169][ T8850] 
[  105.952910][ T8850] ======================================================
[  105.954991][ T8850] WARNING: possible circular locking dependency detected
[  105.957051][ T8850] 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 Not tainted
[  105.959071][ T8850] ------------------------------------------------------
[  105.961166][ T8850] syz-executor/8850 is trying to acquire lock:
[  105.962965][ T8850] ffff0000dd36df40 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}, at: __ocfs2_flush_truncate_log+0x2e8/0xf6c
[  105.966774][ T8850] 
[  105.966774][ T8850] but task is already holding lock:
[  105.969079][ T8850] ffff0000f6cbc2c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}, at: ocfs2_flush_truncate_log+0x44/0x6c
[  105.972916][ T8850] 
[  105.972916][ T8850] which lock already depends on the new lock.
[  105.972916][ T8850] 
[  105.976016][ T8850] 
[  105.976016][ T8850] the existing dependency chain (in reverse order) is:
[  105.978716][ T8850] 
[  105.978716][ T8850] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}:
[  105.981984][ T8850]        down_write+0x50/0xc0
[  105.983340][ T8850]        __ocfs2_move_extents_range+0x13ec/0x2abc
[  105.985308][ T8850]        ocfs2_move_extents+0x314/0x7f0
[  105.987115][ T8850]        ocfs2_ioctl_move_extents+0x424/0x5f0
[  105.989021][ T8850]        ocfs2_ioctl+0x1c4/0x738
[  105.990530][ T8850]        __arm64_sys_ioctl+0x14c/0x1c4
[  105.992168][ T8850]        invoke_syscall+0x98/0x2b8
[  105.994024][ T8850]        el0_svc_common+0x130/0x23c
[  105.995569][ T8850]        do_el0_svc+0x48/0x58
[  105.996898][ T8850]        el0_svc+0x58/0x180
[  105.998226][ T8850]        el0t_64_sync_handler+0x84/0x12c
[  105.999840][ T8850]        el0t_64_sync+0x198/0x19c
[  106.001313][ T8850] 
[  106.001313][ T8850] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}:
[  106.004510][ T8850]        __lock_acquire+0x1774/0x30a4
[  106.006124][ T8850]        lock_acquire+0x14c/0x2e0
[  106.007598][ T8850]        down_write+0x50/0xc0
[  106.009069][ T8850]        __ocfs2_flush_truncate_log+0x2e8/0xf6c
[  106.010986][ T8850]        ocfs2_flush_truncate_log+0x4c/0x6c
[  106.012722][ T8850]        ocfs2_sync_fs+0xf8/0x2a4
[  106.014301][ T8850]        sync_filesystem+0x1a0/0x218
[  106.015958][ T8850]        generic_shutdown_super+0x70/0x2b8
[  106.017752][ T8850]        kill_block_super+0x44/0x90
[  106.019336][ T8850]        deactivate_locked_super+0xc4/0x12c
[  106.021089][ T8850]        deactivate_super+0xe0/0x100
[  106.022669][ T8850]        cleanup_mnt+0x31c/0x3ac
[  106.024176][ T8850]        __cleanup_mnt+0x20/0x30
[  106.025688][ T8850]        task_work_run+0x1dc/0x260
[  106.027163][ T8850]        do_notify_resume+0x174/0x1f4
[  106.028757][ T8850]        el0_svc+0xb8/0x180
[  106.030108][ T8850]        el0t_64_sync_handler+0x84/0x12c
[  106.031843][ T8850]        el0t_64_sync+0x198/0x19c
[  106.033326][ T8850] 
[  106.033326][ T8850] other info that might help us debug this:
[  106.033326][ T8850] 
[  106.036350][ T8850]  Possible unsafe locking scenario:
[  106.036350][ T8850] 
[  106.038581][ T8850]        CPU0                    CPU1
[  106.040157][ T8850]        ----                    ----
[  106.041766][ T8850]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2);
[  106.043927][ T8850]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  106.046806][ T8850]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2);
[  106.049815][ T8850]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  106.052064][ T8850] 
[  106.052064][ T8850]  *** DEADLOCK ***
[  106.052064][ T8850] 
[  106.054593][ T8850] 2 locks held by syz-executor/8850:
[  106.056215][ T8850]  #0: ffff0000da7840e0 (&type->s_umount_key#73){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100
[  106.059311][ T8850]  #1: ffff0000f6cbc2c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}, at: ocfs2_flush_truncate_log+0x44/0x6c
[  106.063253][ T8850] 
[  106.063253][ T8850] stack backtrace:
[  106.064891][ T8850] CPU: 0 UID: 0 PID: 8850 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[  106.067795][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  106.070386][ T8850] Call trace:
[  106.071241][ T8850]  show_stack+0x2c/0x3c (C)
[  106.072417][ T8850]  __dump_stack+0x30/0x40
[  106.073596][ T8850]  dump_stack_lvl+0xd8/0x12c
[  106.075085][ T8850]  dump_stack+0x1c/0x28
[  106.076376][ T8850]  print_circular_bug+0x324/0x32c
[  106.077878][ T8850]  check_noncircular+0x154/0x174
[  106.079343][ T8850]  __lock_acquire+0x1774/0x30a4
[  106.080850][ T8850]  lock_acquire+0x14c/0x2e0
[  106.082207][ T8850]  down_write+0x50/0xc0
[  106.083478][ T8850]  __ocfs2_flush_truncate_log+0x2e8/0xf6c
[  106.085163][ T8850]  ocfs2_flush_truncate_log+0x4c/0x6c
[  106.086763][ T8850]  ocfs2_sync_fs+0xf8/0x2a4
[  106.088084][ T8850]  sync_filesystem+0x1a0/0x218
[  106.089554][ T8850]  generic_shutdown_super+0x70/0x2b8
[  106.091121][ T8850]  kill_block_super+0x44/0x90
[  106.092563][ T8850]  deactivate_locked_super+0xc4/0x12c
[  106.094186][ T8850]  deactivate_super+0xe0/0x100
[  106.095604][ T8850]  cleanup_mnt+0x31c/0x3ac
[  106.096917][ T8850]  __cleanup_mnt+0x20/0x30
[  106.098252][ T8850]  task_work_run+0x1dc/0x260
[  106.099614][ T8850]  do_notify_resume+0x174/0x1f4
[  106.101060][ T8850]  el0_svc+0xb8/0x180
[  106.102207][ T8850]  el0t_64_sync_handler+0x84/0x12c
[  106.103672][ T8850]  el0t_64_sync+0x198/0x19c
[  106.136061][ T8850] ocfs2: Unmounting device (7,3) on (node local)
[  106.154234][ T6525] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf