last executing test programs:

2.263000715s ago: executing program 2 (id=3121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x28, 0x1c, 0x1, 0x70bd2d, 0x25dfdbff, "", [@nested={0x18, 0x136, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @fd}, @typed={0xc, 0x11, 0x0, 0x0, @u64=0x4}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2.194444215s ago: executing program 2 (id=3126):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9)

2.128171859s ago: executing program 2 (id=3132):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000102010800000000000000000a000004300001802c000180140003"], 0x44}, 0x1, 0x0, 0x0, 0x4f27f69b0618d8ae}, 0x10)

2.0813428s ago: executing program 2 (id=3137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8000, 0x8400}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xffffffff}]}, 0x28}}, 0x0)

2.032067775s ago: executing program 2 (id=3140):
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5950, &(0x7f0000000340)="$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")
truncate(&(0x7f0000000640)='./file2\x00', 0xa00)

1.322922454s ago: executing program 0 (id=3181):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

1.259102383s ago: executing program 2 (id=3185):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$bt_BT_VOICE(r0, 0x12, 0x2, 0x0, &(0x7f0000000080))

1.147984822s ago: executing program 3 (id=3190):
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}, 0xbd2}, 0x1c)

1.123591583s ago: executing program 3 (id=3192):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="380200002100390d0000000000000000fe8000000000000000000000000000bbffffffff0000000000000000000000004e22000000030000020000002e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c000400fdff4e234e200000fe8000000000000000000000000000aa50001100ac1e0001000000000000000000000000fe8000000000000000000000000000bb0a010101000000000000000000000000000000000000000000000000000000006c020000000000000a000a00e400060020010000000000000000000000000001fe8000000000000000000000000000184e2200054e220007020080002f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f000001000000000000000000000000000004d3ff000000ac1414430000000000030000000000000000000000000000080000000000000007000000000000007d000000000000000400000000000000070000000000000000040000000000000900000000000000000000000000000010bd1a62000000000000000000000000080000000000000008000000ff0f0000040000002dbd7000000000000200020528000000000000008b0013"], 0x238}}, 0x0)

1.074026344s ago: executing program 3 (id=3194):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/pid\x00')
ioctl$NS_GET_USERNS(r0, 0x8004b707, 0x0)

1.060853523s ago: executing program 3 (id=3196):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x5def4000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)

1.05762152s ago: executing program 4 (id=3197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xfd}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)

1.021566584s ago: executing program 3 (id=3198):
r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$smackfs_ipv6host(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='0x0000000000000000:0x0000000000000000:0x0000000000000400:0x0000000000000000:0x0000000000000000:0x0000000000000000:0x0000000000000000:0x0000000000000401/00000000000000000031 ]'], 0xb1)

1.020631328s ago: executing program 4 (id=3199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)=ANY=[@ANYBLOB="340000003d00090000000000000000000100000004000000140001801000108009000800e000000104003280080002"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

1.003422408s ago: executing program 3 (id=3200):
r0 = syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0x58b4, &(0x7f0000005980)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJIgEFCCCy4UYKGlpagf0EJq0WhRBatESuRlE1ZRitWltpBa3UU/+BTykBLIQ1k+5qmZvqfTc6fv3J7unpDA71fJ3D6nb//PueeevtP/Mz3TAQAAgNeE3ddv2XvOUR/41RdHX7rmwz/bcG3oL4/XV+MOA+n2ileqhxxIvZVF49vsvHjTVT/489DF7/vl3X3ff3nXmmPX/v79h118/2fO3Hnbtx96ce69/3ymKG6cTyfuLyfPJSFUf77n61/a9diRY3VJCKGcDGwPYUGy8KEFSSbE8N9DCGvSwqLMnfe8dMrase21N/VOqJ+f2c98f22rpvNs297LTwp/eO+q636z+Mc/6tnx7Pb9uyTVhvkUwrwLGx/fE0KYnf4fE2dbnI9x0q4MIfQ1PO6Mgn4d12L/l+WUj063s9Jtf0GceP+STLmU2S9bjnoy276C9jqV14929ysyJ1POXow6ldfPWL8g3f403Z44zfjl+D8JpSRU6t1fn+yfI6HhvCUhGT+X1Xq5VD+3IT3+TDnJlEuZcrknc1zj7aYTrZwkE+vjfpn6eDmupPXHNl6rmzg3p/716baaPlFfjuWQvVHTP+lG/bjGxX7tmaIvB0Kp4RrUrL5+4tOT0Z/W9ScLJz1mXxPxvl2rbl5aXv3w7oGcfiR3J2n8pK342369YM6nfnjjZdnv6/X4F5bS+KW24v/xrMefP//G730rN/6tMX65rfgnP9D33FmPXL8kd3z2xPGptBV/5JlHb1l8+EU7cvt/e4xfbSv+ip2P987d+8CDuf0fjuMzu634T7/zg3+668n7ns2NH2L8vrbir9656cu9g3tPyI3/YByf/vbmzws7Tn9qcPAvQ3nxn4jx57YV/87tt73jjvk3nZl7flfG8RloK/7Zx99/3Zy99x2Td+1Mbu/Wd06A16bD0tdYN6TldvPMTjXkC98cqtRe881J/8/tZkMZY+3Mm8H4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALw2HXHS//zQ///4wHOVtNyb3ni6VNvG+lkhJLNDCFu2jmzeum7jJUOfufSyzRtH1g+NbB0a3bh185VDp75laPPopvUjV47dO/zWU2qPWxiS2jY5ZlLb+/bt21camFgX2/tPx+/4w9Iz/uWvIQwf8bvBSm7/l9224Y7Dm3zNSFbse8+Gy8753WnfTY9rIO3XQE6/Qk6//vW8f9zx1T1/PiGE4ddN1a9Hn373LyZ0aLxif5xUqTfUOtSb9DXtR73XaX/ieFXWrls/Olw8vuWc4/jPVz3797VXfOUftfGt5h5Hi+M7e8W+9aVvrDr7379xda3iYD3vReMdjyL2L45fNR3veelxzcs5rkrOcV3/mwef/PlRN764PQxXXlg8ue2i4+pJJ0BP8vqW2o0t9CULJtRX0/3jGY+PW7Z1w6ZlW67c9tZ1G0YuGb1kdOPbl5+6/PTh004/bdn4kS/r8vHH9t/Y4vEfmPk0/3Pbfxq/tjafivpVNB5j/Soej8Ye5T3/+s790tfeftsj59QqiuZ53Lt+PUm3fWPneXlomG+Tx6rZcRWNQwhhqNk4PP/imeHI/7PuuqLrUOOZafyakazY99iSv333jO8selet4oBc5xs71OZ1vt7r/f0ZH69qej4O1vHtDeX0uPqb9mv5Y4/03Lz7r5+v92/WrHDFyNatm5fXvs5JezonObppv7K18bgWj38th3RYQn2aNpmvY3pCrX/Z62fcPTuq/el9/cnCpseVFe/btermpeXVD+/OG+nk7lqLs8Pc2jZ5Q86e6zMPLNc73Kz9Q3V+DH7oO/d+/N6fnDppfpxc+1p0XEnOcf34yTu/9v2v/NefdO+4PvTuxwf+9n8/vbRWcahcV+q9TvuTNF5XTg6h6Pm3ODQ/jtznX6n58RQ9/7Lt7N+/ebyhTLk/lNt6vp78QN9zZz1y/ZLc5+ueVp+vV08olQuerwfL/Hnlnl8TJkqyYt8vbzhs+0PXrDyqVlE0r+t7N5vXp7SQf+Qc1y/Of2rw0qH/8r+7d934wVvuueD3Iyu+UKs4WM57NR3fas741nsd887G8X3bxZeuX1OrP3hf/6bbgvwnXkq2XLntsyPr149u3tLacbX6/TS2kx3ldr+fxqvbwoLjKk06rpm70cp4tfp8i/1f0/Z4TXy+9Yekre8L2369YM6nfnjjZQOTHpU2dGEpjV9qK/4fz3r8+fNv/N63cuPfGuNX2oo/8syjtyw+/KIdufFvT9L41bbir9j5eO/cvQ88mBt/OPZ/dlvxn37nB/9015P3PZsbP8T4/e2N/ws7Tn9qcPAvufGfSNJ2xl4jhXDPS6esrZWT0JM+32I/eib0K2TLSaZcypTLjeVSba213kA5SSbWx/3S+mMb+tLMJ3Lq46uw6qLa9uVYDtkbU9cfbEoN1/5m9UWvUwEAXu3iz//ja9D48//R9IVS/koD7NdpHrYoJ27Mw/av58yacP+iNH58fFwHHHxbGB7bXjtUe6E/3XXO+HzIrnPGdk44bmKMdtc5i9bfl2TKsV+19fJKQx6ampzXVEIL6++T25l6/T1z+MXr40M3TOrWUMO6Vfb89aQrZs3e75Dpb2UsQt78yK6LxfdzDM4LK8fba3F+ZN9HE89D9n00sZ2jMhfOdt9H0+n8iN2eYn6Md7n45xuTz1+YYnz3n7/m0bLnbxrnuzq2/0z/fPbQXzec2Z+HWZfMiZ8+wQ72dcNYH4+j0uJ64sdz6ru1nhgvF7Ffe6boy4FgPRF4tYr5f/weMZb/j70A/7fMfkWvQ7OvGmO83PcJlZv3pyjvmPw+vb62vo+v3rnpy72De0/IfZ3zYKvv+9k0odRX8L6fonFcmikXjmPOAk1Rvpdtp2jcs+/L6A9z2xr3O7ff9o475t90Zu64r6x9Iy0e969NKM0tGHf5Qk58+cJBkS/M9PrZK5aPpG98mql85GM59dPNR/om3agf17hDLh/pObD9AgAOHTH/r//8LM3//19mv6K89cRMOcbLzVtzXp/k5a0fSbdXZPbvT3+jYrqvm88+/v7r5uy975jcvOX2VvPQ/zahNFCYh3aWN+fmESu7837x3Dyinmd1lifm9r+eJ3aWp+fGr+fpneXRueNTz6M7WwfIjV9fBzjU89yZXa971ebR6a/PzlQefW5O/XTz6P5JN+rHNU4eDQDwyor5f3wZF/P/RzL7dfq6PTcv6NLr9uzfA6nHf+JA5ZUznffNdN4603n9TK9LHOp58UyvC83sOpm8OC2H7I0aeTEAAAeDmP/PTsv5+X9n+Ulu/lbPT+TnTePLzw+S/PxQX/+S/8v/i8n/AQBe3WL+H3/tMf79v/+RlrN/t16enhNfni5Pn2r+tJynz/Q6m3UA6wDFrAMAALy69IxnSpN/z/6T6Tb7e/Z5v5d/fs7+raqM/459CBdt3Tw6esFlm9aMbB29YOOla0a3XHD55nVbt45urO3Xad6Ym7ekeWNPqKTj0Xy/bN42P/17CPNz/h5Cdv8Y9ujxG5P/HkK22dkFf0dg//lrrb955680xf7N5kfe+c6L/4mc/aP6+b/40ydfsHbLBes2rtu6bmT9um2jE/cby1r7pvG5mXFYpvW5mZkvk5Sm//md3elHaVI/etLxyPt89iTTjwVpTxbkff5BTr9/9b+++rnj9/3jrhCGjyi/oaPxS1bs++/njX5k6+7fbRrrf2nK/tf3TPtV9Hml2f3j8VTWX7pl60lrL71sY/YTJdsT1zNK9fIMrWekT/9yi+sTq3Pqp7s+UZ504+DU8voEAAATxJ//x9ez8eeHX0lfQMX61vP0zn5+nJunD7eWp2c/l6woT8/uH4+31Ty92mGenm2/KE9vtn+zPD0v786L/7Gc/aer9XnS2fs8cufJha3Nk+znGRTNk+z+050nSYfzJNt+0Txptn+zeZJ33vPifzRn/zytz4fO3peTOx9ubW0+vDlTLpoP2f2nOx9KHc6HbPtF86HZ/s3mQ975zYt/Ts7+rZo4P8Ymxvi8GL3g8ks3f7Zhv5n+/IvO+zezn//Rrtb7P7Pv+5r5/s/s+8pmvv+dva8st/9PdLYS1nr/Z/bzXdp1wNZr0zebFb3/rGgdd1VO/XTXcWdNunFwso4Lr5yY/8cf98T8/6Z02+0fAx36n5Pmc8yaxu/S55gVvY7x/XyKxg4Cvp8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtKa3smh8u/v6LXvPOeoDv/ri6EvXfPhnG65901U/+PPQxe/75d19339515pj1/7+/YddfP9nztx527cfenHuvf98pjDwQG1zYlqshpA8l4RQ/fmer39p12NHjtUlIYRyMrA9hAXJwocWJJkIw38PIayp93Pinfe8dMrase21N/VOqJ+fCZI9rtBfjv2Z0M9wReERcQiqpvNs297LTwp/eO+q636z+Mc/6tnx7Pb9uyTVhvkUwrwLGx/fE0KYnf4fE2fbovjgdLsyhNDX8LgzCvp1XIv9X5ZTPjrdzkq3/QVx4v1LMuVSZr9sOerJbPsK2utUXj/a3a/InEw5ezHqVF4/Y/2CdPvTdHviNOOX4/8klJJQqXd/fbJ/joSG85aEZPxcVuvlUv3chvT4M+UkUy5lyuWezHGNt5tOtHKSTKyP+2Xq4+W4ktYf23itbuLcnPrXp9tq+kR9OZZD9kZN/6Qb9eMaF/u1Z4q+HAilhmtQs/r6iU9PRn9a158snPSYfU3E+3atunlpefXDuwdy+pHcnaTxk7bib/v1gjmf+uGNly3Ki39hKY1faiv+H896/Pnzb/zet3Lj3xrjl9uKf/IDfc+d9cj1S3LHZ08cn0pb8UeeefSWxYdftCO3/7fH+NW24q/Y+Xjv3L0PPJjb/+E4PrPbiv/0Oz/4p7uevO/Z3Pghxu9rK/7qnZu+3Du494Tc+A/G8elvb/68sOP0pwYH/zKUF/+JGH9uW/Hv3H7bO+6Yf9OZued3ZRyfgbbin338/dfN2XvfMXnXzuT2bn3nBHhtOix9jXVDWm43z+xUQ77wzaFK7TXfnPT/3G42lDHWzrwZjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKvTb68+9ZPnveejqypJCEnOPvuaiPeVZ61YMdRGuyPPPHrL4sMv2tFYt6iNOAAAAECxmIeX6jXVsChcnswORzfdP64RHB1LycT67BpCjJNdI2g3TqlLccpdilPpUpyeLsWZ1aU4vV2KUy2IUw2txZk9ZZxSy/3p61Kc/i7FmdOlOHO7FGdel+LM71KcgSnjtD4PF3QpzsIuxTmsS3EO71KcI7oU53VdinNkl+Jk15SnOw/npnselRdn/Ea5ME4lKdfvaLaeHts5psN2+ltsJ/f7cYvtzG6xneMyjytNs51qi+28scN2khbbeXOH7ZQK2onz9ops/2I7sdTi/L+yS3G2dSnOVV2Kc3WX4ny+S3G+0KU413QYB6BVMf/fn+8NhN7Ku0JfesXJrgLEfHfx+NfJ3+/yLkgx3hsy9bOy8bJhsol6Jt7i6fYvu4CQibckU98zIV6lno9MEa/aGG9p5s5Jx5vtX3ZBIdO/EzP1vUXxsgsLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCDfnv1qZ887z0fXRWSMPavqX1NxPvKs1asGGqj3V2rbl5aXv3w7sa63kobgQAAAIBCMQ/vqddUQ29leehNZk3Yr5quA1TTcnmgth2cF1aObZOh0ni5L1kw5eMq6eOWbd2wadmWK7e9dd2GkUtGLxnd+Pblpy4/ffi0009btnbd+tHh2tcQegvihRDGlx+2XLntsyPr149u3lKrzPZ/Ufq4RWk5SR83+LYwPLa9Nu3/woL2SpPam7kbxWcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2DX/kLdPOs4gD9vkpNkZ6uN7F9W1tPQP6Pq0LZm0ulYXhAcbG3pYSDJ9DiKa3F4upatHXXGreA2WxRho1AqvanU4ebwZn/cEPeHQmVWC55aZBu6C71QNp10oxfSEek5eXOSNGlO41i37vO5eN/keX7P88uTiwPf9wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA/WVL08Ua2M10ajEKI+NY0ekrl0No5LQ/T9+vNbf5wbO7m8fSyXGWIjAAAAYKAkh4+0RvIhl0mHdLhq+t3i0DYRZnM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw8TNVL09UK+O1i6MQoj41jR6SuXQ2jktD9H3jnSe/8OrY2D/ax4pD7AMAAAAMluTwVGskH4phSRiJruqoS54NLOha312X7LNwjnXdzw761S2ZY901c6z71IC6dc37jgAAAAAffUn+z7RGCiGXmdc3/w/K9Undoq66dPM+zG8FAAAAgP9Pkv9zrZFiyGWKrbw+17y/uKsuWT/o//bJ+mV91g/6f/7a5t3/6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgo2OqXp6oVsZr6SiEqE9No4dkLp2N49IQfVe9MPqvWw49tLh9LJcZYiMAAABgoCSHz0bvfMhlRsNIuHg694/dtP/prz79bDmEMBPzs9mwY8O2bXevmrkmdSuPHBr50eG3vndG3cqZ63k7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L6ZqpcnqpXx2kVRCFGfmkYPyVw6G8elIfq+/qWv/O3x48+92T5WHGIfAAAAYLAkh89m/3wohmzIhium37Vn/dNSXev7PTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhz3fOe+b2+YnNx4txdeeOFF68X5/ssEAAC83xaFKDTO0ZXrz/enBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgym6uWJamW8lo9CiPrUNHpI5tLZOC4N0Td+/mhu3skXXmofKw6xDwAAADBYksNns38+FMNIGAmXT7/r9UxgOv8XPsAPCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyoTNXLE9XKeG1eFELUp6bRQzKXzsZxaYi+j+3c98WD8394c/tYLjPERgAAAMBASQ7PtkbyIZf5dMiFq5vvJzsXROnmvfdzgdl1WzuWjc55Xb1jXXrO63Z1nSzTPM3MunyyX2Hm3lpXOnNdqW1dMbTalzrWhT0dq+YN+JwBAAAAzqMk/+daI4WQy+Tacu7PO+oLci4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0MdUvTxRrYzXoiiEqE9No4dkLp2N49IQfe/7/Scv+cYvdm9vHysOsQ8AAAAwWJLDZ7N/PhTDwvCJsHA694dCZ31S9+/qqYOP/ufvy0NYccWxsUzf/X/7+o0vdl9CSHUWpUKY3+wX9en3uz8+eu/SxqnHQ1hxefrqc+3XuWXceKa6ce22w8e2nuWLAQAAgAtIkv9HWiOFkMvc1Tf/J8n7nPL//Ht3/uqy5rWZyLtWpArNfqk+/b689Mm/Llv9z7dO5/+z9fvcvs0HL+toODPSJYoblc3b1x277kAqOfVM/3RX/+R7+dp33/zvph2PnJrpnw/55viCTK/+Z167XBQ3JlN7a2ve21vv7J/pc/6H/vDS8d8s2P3u6f7vLBpt9b/mLOc/e//RWx/ec/2+Q+s6+4cQSr36v/3uzeHKP9/5YPf5R7s2bv/m269dorhxZPGJA6v3F2/o7B919U++/18ef2zPzx75wbNJ/+S3IsuXzLV/qqv/K7su3fnyA+sXdPZP9Tn/i7e9Oral9P0/dZ//jqHP/8S1T93+2ob4/u4pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC8tUvTxRrYzXUlEIUZ+aRg/JXDobx6Uh+r5xy9G3b9v905+0jxWH2AcAAAAYLMnhs9k/H4ohG7JhdDr3P1PduHbb4WNbQ2FmNmreM5Nb7tn2mU1btt91x3n65AAAAMBcJfk/0xophFxmaRhp5v/K5u3rjl13IJXk/1SS/zfdOblxRWjVvbLr0p0vP7B+Qes5QQjTPwvIn677/GzdTTceLZz4y7eW9axbNVt3ZPGJA6v3F29I6kJ73crQej7xxLVP3f7ahvj+1udrr/vsN7dMNh9PJPuO3vrwnuv3HVrXOkfzPtrcN6mbTO2trXlvbz2pSzfv+ea5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAzTdXLE9XKeC2kQ4j61DR6SObS2TguDdF3zdJfP3jJyecWto/lMkNsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs101oHVUfB+Bz7k3e3OYmbdK+YFRM06oodWFRENGNioq0IgVXlSLV1i5EQRBR6sJUWrFUxY1gdVNEBTVKQcHGYmmVVPwqblyooFBdCKUY0IbiQiXJObc304xXJ1VQnweGc8+Zmd/8Z87J5F4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4R+npGpppD++4f+qWc2746NG7Tjxy0zv3brvo4Ve/G9l03Yd7e186ObF5xZYvr1+2af/da8Z3P3/op/63fjnaMfih2WZV6jZCiMdjCI13J595bOLjs6bHYgihHgdGQxiMSw8NxkLC6p9DCJtbdc7d+eaJy7dMt9t29cwZX1IIKd5XaNZzPbMG5tbLv0sjrbOtUw9eEr6+dv32T5e/8Xr32LHRU4fERtt6CmHxxvbzu0MIi9I2La+2oXxyateFEHrbzruyQ13n/8H6Ly3pn5va/6W22SEn719Z6NcKxxX7WXeh7e1wvYUqq6PqcZ30FfrFl9FCldWZxwdT+3ZqV/3J/HreYqjF0NUq/554ao2EtnmLIc7MZaPVr7XmNqT7L/RjoV8r9OvdhfuauW5aaPUY547n4wrj+XXclcZXtL+r53FryfjZqW2kP9STuR+KH2Y1T/vQuq8Zua7J36nl71BrewfNN96a+DQZzTTWjEtPO+fXeeR9E+ufuLC+4b3DAyV1xL0x5cdK+Vs/Gey7/bWdDwyV5W+spfxapfxv1h754badLzxXmv90zq9Xyr/sQO/xte/vWFn6fCbz8+mqlH/H0Q+eXP7/O8dK69+T8xuV8q8ZP9LTP3XgYGn9q/PzWVQp/6urb/z2lc/3HSvNDzm/t1L+hvH7nuoZnrq4NP9gfj7Nauvnx7Ervhge/n6kLP+znN9fKf/l0d1Xvbhk15rS+V2Xn89ApfybL9i/vW9q33ll786450z95wT4b1qWvmM9nvpVf2cuVNvvhWdHuma/8/Wlrf9MXqhg+jqL/8J8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngoAAP//pkA1WQ==")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc040bc0b, 0x0)

971.37216ms ago: executing program 4 (id=3201):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001000)=@newsa={0xf0, 0x10, 0x832152701231f605, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc0, 0xf0, 0x2b}, {@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x6c}, @in=@remote, {0x0, 0x5, 0x2000000000}, {0x0, 0x4, 0x0, 0x39c76b4a}, {0x0, 0xe}, 0x0, 0x0, 0x2, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

911.627343ms ago: executing program 4 (id=3203):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0})

873.090003ms ago: executing program 4 (id=3204):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x200002f, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

464.607037ms ago: executing program 0 (id=3213):
setrlimit(0x1, &(0x7f0000000000))
add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff)

397.96096ms ago: executing program 0 (id=3214):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000004280)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

358.047428ms ago: executing program 1 (id=3215):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b3709094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b39310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006)

340.247734ms ago: executing program 0 (id=3216):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x223, &(0x7f0000000480)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x48880, 0x0, 0x0, 0x0, 0x0)

290.503655ms ago: executing program 1 (id=3217):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)

289.62217ms ago: executing program 1 (id=3218):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x10, 0x3a, '\\:\x00'/12, 0x3a, '^%-\xd6}[)#[)\x95[', 0x3a, './file0'}, 0x3f)

268.261152ms ago: executing program 1 (id=3219):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040))

243.79007ms ago: executing program 1 (id=3220):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000940)=[0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)

190.955683ms ago: executing program 1 (id=3221):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12, 0x0, 0x0, 0x0, &(0x7f0000000000))

136.316448ms ago: executing program 0 (id=3222):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f00000000c0), 0x4)

5.946647ms ago: executing program 4 (id=3223):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0xb, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcc"]}]}, 0x1c}], 0x1}, 0x0)

0s ago: executing program 0 (id=3224):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0)

kernel console output (not intermixed with test programs):

0106] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   51.089309][T10175] loop1: detected capacity change from 0 to 256
[   51.129902][T10175] FAT-fs (loop1): Directory bread(block 64) failed
[   51.129935][T10175] FAT-fs (loop1): Directory bread(block 65) failed
[   51.129970][T10175] FAT-fs (loop1): Directory bread(block 66) failed
[   51.129984][T10175] FAT-fs (loop1): Directory bread(block 67) failed
[   51.130007][T10175] FAT-fs (loop1): Directory bread(block 68) failed
[   51.130020][T10175] FAT-fs (loop1): Directory bread(block 69) failed
[   51.130059][T10175] FAT-fs (loop1): Directory bread(block 70) failed
[   51.130072][T10175] FAT-fs (loop1): Directory bread(block 71) failed
[   51.130094][T10175] FAT-fs (loop1): Directory bread(block 72) failed
[   51.130107][T10175] FAT-fs (loop1): Directory bread(block 73) failed
[   51.200400][T10185] loop0: detected capacity change from 0 to 4096
[   51.208856][T10185] EXT4-fs (loop0): Test dummy encryption mode enabled
[   51.239664][T10185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.248673][T10196] netlink: 'syz.4.1540': attribute type 2 has an invalid length.
[   51.287109][T10185] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   51.292779][T10182] loop2: detected capacity change from 0 to 32768
[   51.337788][ T6556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.421692][T10182] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   51.429257][T10182]   allowing incompatible features above 0.0: (unknown version)
[   51.430624][T10182]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   51.430683][T10182] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   51.430757][T10182] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[   51.430825][T10182] bcachefs (loop2): Version upgrade required:
[   51.430825][T10182] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   51.430825][T10182] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   51.430825][T10182]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   51.464410][T10182] bcachefs (loop2): dropping and reconstructing all alloc info
[   51.473137][T10234] IPVS: length: 139 != 8
[   51.491019][T10182] bcachefs (loop2): accounting_read...
[   51.527084][T10182]  done
[   51.527107][T10182] bcachefs (loop2): alloc_read... done
[   51.527411][T10182] bcachefs (loop2): snapshots_read... done
[   51.527675][T10182] bcachefs (loop2): check_allocations... done
[   51.568314][T10182] bcachefs (loop2): going read-write
[   51.575472][T10218] loop4: detected capacity change from 0 to 32768
[   51.578397][T10182] bcachefs (loop2): done starting filesystem
[   51.621503][ T6558] bcachefs (loop2): shutting down
[   51.621535][ T6558] bcachefs (loop2): going read-only
[   51.621563][ T6558] bcachefs (loop2): finished waiting for writes to stop
[   51.642464][T10218] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[   51.642496][T10218]   allowing incompatible features above 0.0: (unknown version)
[   51.646748][ T6558] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10
[   51.648385][ T6558] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10
[   51.652242][ T6558] bcachefs (loop2): unclean shutdown complete, journal seq 11
[   51.659546][T10218]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   51.659593][T10218] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   51.659622][T10218] bcachefs (loop4): initializing new filesystem
[   51.661132][T10218] bcachefs (loop4): going read-write
[   51.677845][ T6558] bcachefs (loop2): done going read-only, filesystem not clean
[   51.723488][T10218] bcachefs (loop4): marking superblocks
[   51.730817][T10218] bcachefs (loop4): initializing freespace
[   51.749128][T10218] bcachefs (loop4): done initializing freespace
[   51.749185][ T6558] bcachefs (loop2): shutdown complete
[   51.752540][T10218] bcachefs (loop4): reading snapshots table
[   51.753579][T10218] bcachefs (loop4): reading snapshots done
[   51.761300][T10218] bcachefs (loop4):  loop4: Superblock write was silently dropped! (seq 0 expected 42)
[   51.764160][T10218] bcachefs (loop4): done starting filesystem
[   51.784714][T10271] netlink: 'syz.3.1567': attribute type 5 has an invalid length.
[   51.792309][T10273] loop0: detected capacity change from 0 to 256
[   51.793750][T10273] exfat: Deprecated parameter 'utf8'
[   51.813006][T10273] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d)
[   51.855550][ T6555] bcachefs (loop4): shutting down
[   51.855577][ T6555] bcachefs (loop4): going read-only
[   51.859772][ T6555] bcachefs (loop4): finished waiting for writes to stop
[   51.885039][ T6555] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[   51.940577][ T6555] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[   51.943232][ T6555] bcachefs (loop4): clean shutdown complete, journal seq 4
[   51.943792][ T6555] bcachefs (loop4): marking filesystem clean
[   52.004340][ T6555] bcachefs (loop4): shutdown complete
[   52.070440][T10289] loop0: detected capacity change from 0 to 4096
[   52.098069][T10289] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   52.113840][T10289] ntfs3(loop0): ino=0, "file0" The size of extended attributes must not exceed 64KiB
[   52.121905][T10291] loop3: detected capacity change from 0 to 4096
[   52.128783][T10291] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   52.149446][T10291] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[   52.161428][T10291] ntfs3(loop3): ino=1e, mi_enum_attr
[   52.161462][T10291] ntfs3(loop3): ino=1e, mi_enum_attr
[   52.299053][T10304] loop3: detected capacity change from 0 to 16
[   52.302898][T10304] erofs (device loop3): mounted with root inode @ nid 36.
[   52.401023][T10312] loop2: detected capacity change from 0 to 4096
[   52.401478][T10312] ntfs3: Unknown parameter 'LJb�\R�˿io'
[   52.405799][   T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   52.407441][   T52] Bluetooth: hci2: Injecting HCI hardware error event
[   52.409250][   T52] Bluetooth: hci2: hardware error 0x00
[   52.590300][T10332] loop1: detected capacity change from 0 to 1024
[   52.592007][T10334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.612019][T10317] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   52.705249][ T1997] hfsplus: b-tree write err: -5, ino 4
[   52.740778][T10356] netlink: 'syz.1.1602': attribute type 1 has an invalid length.
[   52.765633][T10359] IPVS: length: 139 != 8
[   52.784153][T10362] netlink: zone id is out of range
[   52.784298][T10362] netlink: zone id is out of range
[   52.784390][T10362] netlink: zone id is out of range
[   52.784395][T10362] netlink: zone id is out of range
[   52.784399][T10362] netlink: zone id is out of range
[   52.784403][T10362] netlink: zone id is out of range
[   52.784407][T10362] netlink: zone id is out of range
[   52.784411][T10362] netlink: zone id is out of range
[   52.784415][T10362] netlink: zone id is out of range
[   52.846718][T10370] cgroup: release_agent respecified
[   53.007296][T10372] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[   53.215224][T10410] loop1: detected capacity change from 0 to 256
[   53.238529][T10410] FAT-fs (loop1): Directory bread(block 64) failed
[   53.238571][T10410] FAT-fs (loop1): Directory bread(block 65) failed
[   53.238626][T10410] FAT-fs (loop1): Directory bread(block 66) failed
[   53.238653][T10410] FAT-fs (loop1): Directory bread(block 67) failed
[   53.238691][T10410] FAT-fs (loop1): Directory bread(block 68) failed
[   53.238714][T10410] FAT-fs (loop1): Directory bread(block 69) failed
[   53.238752][T10410] FAT-fs (loop1): Directory bread(block 70) failed
[   53.238774][T10410] FAT-fs (loop1): Directory bread(block 71) failed
[   53.238808][T10410] FAT-fs (loop1): Directory bread(block 72) failed
[   53.238826][T10410] FAT-fs (loop1): Directory bread(block 73) failed
[   53.339766][T10419] netlink: 'syz.1.1625': attribute type 2 has an invalid length.
[   53.394548][T10425] ieee802154 phy0 wpan0: encryption failed: -22
[   53.569536][T10447] loop0: detected capacity change from 0 to 2048
[   53.583697][T10455] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   53.625213][T10436] loop1: detected capacity change from 0 to 32768
[   53.629345][T10436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1631 (10436)
[   53.642913][T10436] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   53.644742][T10436] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   53.646278][T10436] BTRFS info (device loop1): using free-space-tree
[   53.654715][T10447] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   53.670350][T10447] Remounting filesystem read-only
[   53.670468][T10447] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   53.803373][ T6550] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   53.810576][T10503] __nla_validate_parse: 4 callbacks suppressed
[   53.810625][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'.
[   54.022913][T10543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1661'.
[   54.024501][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'.
[   54.027878][T10516] loop0: detected capacity change from 0 to 4096
[   54.030612][T10516] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   54.052726][T10516] ntfs3(loop0): ino=19, mi_enum_attr
[   54.052777][T10516] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   54.133684][T10557] loop2: detected capacity change from 0 to 512
[   54.153768][T10557] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.198912][T10557] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #17: comm syz.2.1667: iget: bad i_size value: -6917529027641081756
[   54.199109][T10557] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1667: couldn't read orphan inode 17 (err -117)
[   54.199647][T10557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.227323][T10569] qrtr: Invalid version 0
[   54.270921][T10557] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1667: bg 0: block 65: padding at end of block bitmap is not set
[   54.279656][T10557] Quota error (device loop2): write_blk: dquota write failed
[   54.279727][T10557] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   54.279754][T10557] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1667: Failed to acquire dquot type 0
[   54.306309][T10577] tmpfs: Bad value for 'mpol'
[   54.336787][ T6558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.541846][T10624] loop0: detected capacity change from 0 to 64
[   54.565022][   T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   54.572917][T10633] loop4: detected capacity change from 0 to 64
[   54.817918][T10667] loop0: detected capacity change from 0 to 16
[   54.822465][T10667] erofs (device loop0): mounted with root inode @ nid 36.
[   54.840907][T10671] loop3: detected capacity change from 0 to 256
[   54.869015][T10671] FAT-fs (loop3): Directory bread(block 64) failed
[   54.869056][T10671] FAT-fs (loop3): Directory bread(block 65) failed
[   54.869078][T10671] FAT-fs (loop3): Directory bread(block 66) failed
[   54.869089][T10671] FAT-fs (loop3): Directory bread(block 67) failed
[   54.869109][T10671] FAT-fs (loop3): Directory bread(block 68) failed
[   54.869119][T10671] FAT-fs (loop3): Directory bread(block 69) failed
[   54.869138][T10671] FAT-fs (loop3): Directory bread(block 70) failed
[   54.869148][T10671] FAT-fs (loop3): Directory bread(block 71) failed
[   54.869167][T10671] FAT-fs (loop3): Directory bread(block 72) failed
[   54.869177][T10671] FAT-fs (loop3): Directory bread(block 73) failed
[   54.939854][T10642] loop1: detected capacity change from 0 to 40427
[   54.952299][T10642] F2FS-fs (loop1): build fault injection rate: 771
[   54.952960][T10642] F2FS-fs (loop1): invalid crc value
[   54.981840][T10642] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   55.013304][T10642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   55.018479][T10689] loop4: detected capacity change from 0 to 256
[   55.022279][T10689] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   55.353655][T10700] loop3: detected capacity change from 0 to 32768
[   55.379112][T10700] ERROR: (device loop3): diAllocBit: iag inconsistent
[   55.379112][T10700] 
[   55.380441][T10700] ialloc: diAlloc returned -5!
[   55.395805][T10706] loop4: detected capacity change from 0 to 32768
[   55.408590][T10706] ERROR: (device loop4): diNewExt: no free extents
[   55.408590][T10706] 
[   55.409500][T10706] ERROR: (device loop4): remounting filesystem as read-only
[   55.409585][T10706] ialloc: diAlloc returned -5!
[   55.833764][T10801] loop4: detected capacity change from 0 to 256
[   55.873341][T10812] netlink: 'syz.1.1763': attribute type 4 has an invalid length.
[   56.150642][T10864] overlayfs: unescaped trailing colons in lowerdir mount option.
[   56.209495][T10880] loop1: detected capacity change from 0 to 256
[   56.279001][T10892] netlink: 'syz.2.1802': attribute type 16 has an invalid length.
[   56.279051][T10892] netlink: 'syz.2.1802': attribute type 17 has an invalid length.
[   56.284756][T10880] FAT-fs (loop1): Directory bread(block 64) failed
[   56.285618][T10880] FAT-fs (loop1): Directory bread(block 65) failed
[   56.285657][T10880] FAT-fs (loop1): Directory bread(block 66) failed
[   56.285674][T10880] FAT-fs (loop1): Directory bread(block 67) failed
[   56.285699][T10880] FAT-fs (loop1): Directory bread(block 68) failed
[   56.285713][T10880] FAT-fs (loop1): Directory bread(block 69) failed
[   56.285737][T10880] FAT-fs (loop1): Directory bread(block 70) failed
[   56.285750][T10880] FAT-fs (loop1): Directory bread(block 71) failed
[   56.285772][T10880] FAT-fs (loop1): Directory bread(block 72) failed
[   56.285785][T10880] FAT-fs (loop1): Directory bread(block 73) failed
[   56.461461][T10917] loop4: detected capacity change from 0 to 128
[   56.494298][T10921] bridge2: entered promiscuous mode
[   56.496617][T10921] bridge2: entered allmulticast mode
[   56.641910][T10928] loop2: detected capacity change from 0 to 32768
[   56.647219][T10928] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1821 (10928)
[   56.660478][T10928] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   56.660549][T10928] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   56.660573][T10928] BTRFS info (device loop2): using free-space-tree
[   56.768300][T10934] loop4: detected capacity change from 0 to 32768
[   56.769887][T10934] btrfs: Deprecated parameter 'usebackuproot'
[   56.770968][T10934] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   56.772612][T10934] btrfs: Deprecated parameter 'usebackuproot'
[   56.773591][T10934] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   56.776137][T10934] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1824 (10934)
[   56.789138][T10934] BTRFS info (device loop4 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   56.789197][T10934] BTRFS info (device loop4 state S): using blake2b (blake2b-256-generic) checksum algorithm
[   56.789236][T10934] workqueue: max_active 4349 requested for btrfs-worker is out of range, clamping between 1 and 2048
[   56.790381][T10934] workqueue: max_active 4349 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[   56.797115][ T6558] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   56.800164][T10934] workqueue: max_active 4349 requested for btrfs-endio is out of range, clamping between 1 and 2048
[   56.802812][T10934] workqueue: max_active 4349 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[   56.807764][T10934] workqueue: max_active 4349 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[   56.811214][T10934] workqueue: max_active 4349 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[   56.812737][T10934] workqueue: max_active 4349 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[   56.842509][ T1997] BTRFS warning (device loop4 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xc31f6b8dd4e8410de7c99134cc770d2b2c9962171fae204af998e9068094381a level 0, ignored
[   56.851888][T10934] BTRFS warning (device loop4 state S): devid 1099511599873 uuid a3373a75-1192-444c-9807-48156503709a is missing
[   56.851940][T10934] BTRFS warning (device loop4 state S): devid 1 uuid a3370675-1192-444c-9807-48156503709a is missing
[   56.860564][T10934] BTRFS warning (device loop4 state S): couldn't read tree root
[   56.860601][T10934] BTRFS warning (device loop4 state S): try to load backup roots slot 1
[   56.861280][T10934] BTRFS warning (device loop4 state S): couldn't read tree root
[   56.861304][T10934] BTRFS warning (device loop4 state S): try to load backup roots slot 2
[   56.863963][T10934] BTRFS warning (device loop4 state S): couldn't read tree root
[   56.863975][T10934] BTRFS warning (device loop4 state S): try to load backup roots slot 3
[   56.869950][T10934] BTRFS warning (device loop4 state S): couldn't read tree root
[   56.899045][T10934] BTRFS error (device loop4 state S): open_ctree failed: -5
[   57.147621][T10934] loop4: detected capacity change from 0 to 32768
[   57.170282][T10934] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   57.170343][T10934] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   57.170368][T10934] BTRFS info (device loop4): using free-space-tree
[   57.220206][T10934] BTRFS error (device loop4): dev extent devid 1 physical offset 1048576 len 4194304 is beyond device boundary 0
[   57.220248][T10934] BTRFS error (device loop4): failed to verify dev extents against chunks: -117
[   57.235862][T10934] BTRFS error (device loop4): open_ctree failed: -117
[   57.271670][T11048] netlink: 'syz.3.1859': attribute type 24 has an invalid length.
[   57.398761][T11019] loop1: detected capacity change from 0 to 40427
[   57.405610][T11019] F2FS-fs (loop1): Image doesn't support compression
[   57.405634][T11019] F2FS-fs (loop1): build fault injection rate: 690
[   57.425876][T11019] F2FS-fs (loop1): invalid crc value
[   57.452407][T11019] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   57.455774][T11019] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   57.476749][T11024] loop0: detected capacity change from 0 to 32768
[   57.637642][T11095] netlink: 'syz.2.1873': attribute type 1 has an invalid length.
[   57.641660][T11097] netlink: 'syz.3.1874': attribute type 1 has an invalid length.
[   57.666187][T11024] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[   57.666480][T11024]   allowing incompatible features above 0.0: (unknown version)
[   57.666487][T11024]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   57.666498][T11024] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   57.666557][T11024] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   57.666612][T11024] bcachefs (loop0): Version upgrade required:
[   57.666612][T11024] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   57.666612][T11024] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   57.666612][T11024]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   57.666698][T11024] bcachefs (loop0): dropping and reconstructing all alloc info
[   57.680241][T11024] bcachefs (loop0): accounting_read... done
[   57.726017][T11024] bcachefs (loop0): alloc_read... done
[   57.726121][T11024] bcachefs (loop0): snapshots_read... done
[   57.726334][T11024] bcachefs (loop0): done starting filesystem
[   57.762460][T11106] netlink: 'syz.3.1878': attribute type 3 has an invalid length.
[   57.762500][T11106] netlink: 'syz.3.1878': attribute type 1 has an invalid length.
[   57.762525][T11106] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1878'.
[   57.826870][ T6556] bcachefs (loop0): shutting down
[   57.884610][ T6556] bcachefs (loop0): shutdown complete
[   57.899112][T11130] loop4: detected capacity change from 0 to 64
[   57.972335][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1894'.
[   57.997000][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'.
[   57.998446][T11145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1896'.
[   57.998458][T11145] tc_dump_action: action bad kind
[   58.029070][T11149] netlink: 'syz.1.1900': attribute type 1 has an invalid length.
[   58.033453][T11150] loop2: detected capacity change from 0 to 512
[   58.056140][T11153] loop3: detected capacity change from 0 to 8
[   58.065035][T11150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.140128][ T6558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.193797][T11174] net_ratelimit: 53 callbacks suppressed
[   58.195207][T11174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.227986][T11183] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.242905][T11185] loop1: detected capacity change from 0 to 512
[   58.250766][T11185] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   58.261159][T11185] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.1915: iget: bad i_size value: -6917529027641081756
[   58.261323][T11185] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1915: couldn't read orphan inode 17 (err -117)
[   58.285641][T11185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.307236][T11185] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1915: bg 0: block 65: padding at end of block bitmap is not set
[   58.310183][T11185] Quota error (device loop1): write_blk: dquota write failed
[   58.311994][T11185] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   58.313616][T11185] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1915: Failed to acquire dquot type 0
[   58.337664][T11199] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   58.369723][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.456858][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'.
[   58.526807][T11201] loop2: detected capacity change from 0 to 32768
[   58.627055][T11222] loop1: detected capacity change from 0 to 32768
[   58.629051][T11222] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1932 (11222)
[   58.632178][T11222] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   58.632233][T11222] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   58.632250][T11222] BTRFS info (device loop1): disk space caching is enabled
[   58.632259][T11222] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   58.701346][T11222] BTRFS info (device loop1): rebuilding free space tree
[   58.708622][T11222] BTRFS info (device loop1): disabling free space tree
[   58.708656][T11222] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   58.708677][T11222] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   58.737600][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'.
[   58.758039][   T52] Bluetooth: hci0: unexpected event for opcode 0x1005
[   58.772818][T11222] BTRFS info (device loop1): balance: start -d -m -s
[   58.779908][T11222] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[   58.792543][T11222] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata
[   58.807571][T11274] loop4: detected capacity change from 0 to 512
[   58.807905][T11274] EXT4-fs: Ignoring removed nobh option
[   58.831206][T11222] BTRFS info (device loop1): found 9 extents, stage: move data extents
[   58.837443][T11274] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1949: iget: bad i_size value: 38620345925642
[   58.838244][T11274] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1949: couldn't read orphan inode 15 (err -117)
[   58.839274][T11274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.873724][T11222] BTRFS info (device loop1): found 1 extents, stage: update data pointers
[   58.913834][T11222] BTRFS info (device loop1): relocating block group 1048576 flags system
[   58.918848][ T6555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.944035][T11271] loop2: detected capacity change from 0 to 32768
[   58.946437][T11271] (syz.2.1950,11271,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   58.946935][T11271] (syz.2.1950,11271,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   58.947244][T11271] (syz.2.1950,11271,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x3e7ae20f. Applying ECC.
[   58.947682][T11271] (syz.2.1950,11271,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x3e7ae20f. Applying ECC.
[   58.950288][T11271] JBD2: Ignoring recovery information on journal
[   58.971791][T11222] BTRFS info (device loop1): found 1 extents, stage: move data extents
[   58.978560][T11271] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   58.986461][T11222] BTRFS info (device loop1): balance: ended with status: 0
[   59.090183][T11271] (syz.2.1950,11271,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xa015abf9. Applying ECC.
[   59.090219][T11271] (syz.2.1950,11271,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0xa015abf9
[   59.090244][T11271] (syz.2.1950,11271,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[   59.090257][T11271] (syz.2.1950,11271,0):ocfs2_quota_read:201 ERROR: status = -5
[   59.090328][T11271] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[   59.090418][T11271] (syz.2.1950,11271,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[   59.096072][ T6550] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   59.141597][T11299] loop3: detected capacity change from 0 to 4096
[   59.168384][ T6558] ocfs2: Unmounting device (7,2) on (node local)
[   59.332182][T11313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1968'.
[   59.463467][T11333] loop0: detected capacity change from 0 to 256
[   59.475617][T11333] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   59.564367][T11341] netlink: 'syz.3.1980': attribute type 1 has an invalid length.
[   59.664967][T11335] loop2: detected capacity change from 0 to 32768
[   59.673201][T11335] (syz.2.1978,11335,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   59.677642][T11335] (syz.2.1978,11335,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   59.686616][T11335] JBD2: Ignoring recovery information on journal
[   59.707366][T11335] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   59.790129][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1992'.
[   59.821446][T11303] loop1: detected capacity change from 0 to 131072
[   59.858503][T11303] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   59.865609][T11303] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[   59.900710][ T6558] ocfs2: Unmounting device (7,2) on (node local)
[   60.027842][T11369] loop3: detected capacity change from 0 to 32768
[   60.068660][T11367] loop0: detected capacity change from 0 to 32768
[   60.092588][T11369] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[   60.102030][T11367] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   60.149912][ T6549] ocfs2: Unmounting device (7,3) on (node local)
[   60.174442][T11367] XFS (loop0): Ending clean mount
[   60.185876][T11410] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2007'.
[   60.213363][T11413] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2008'.
[   60.245091][ T6556] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   60.311863][T11424] loop4: detected capacity change from 0 to 1024
[   60.312208][T11424] hfsplus: Bad value for 'session'
[   60.387401][ T1997] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   60.589426][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'.
[   60.594069][T11427] loop2: detected capacity change from 0 to 32768
[   60.606365][T11427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2015 (11427)
[   60.608732][T11469] geneve3: entered promiscuous mode
[   60.608762][T11469] geneve3: entered allmulticast mode
[   60.614645][   T15] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 36699 - 0
[   60.614690][   T15] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 36699 - 0
[   60.614704][   T15] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 36699 - 0
[   60.614715][   T15] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 36699 - 0
[   60.616670][T11427] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.616714][T11427] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   60.616739][T11427] BTRFS info (device loop2): using free-space-tree
[   60.747424][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2043'.
[   60.771011][ T6558] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.972025][T11513] loop4: detected capacity change from 0 to 32768
[   61.024563][T11539] kAFS: unparsable volume name
[   61.083338][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'.
[   61.306283][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'.
[   61.322183][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2088'.
[   61.322231][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2088'.
[   61.346467][T11590] bridge4: entered promiscuous mode
[   61.346499][T11590] bridge4: entered allmulticast mode
[   61.393641][T11598] loop1: detected capacity change from 0 to 256
[   61.404132][T11598] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[   61.464753][T11598] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[   61.464858][T11598] exFAT-fs (loop1): Filesystem has been set read-only
[   61.538067][T11596] loop2: detected capacity change from 0 to 32768
[   61.676072][T11611] loop4: detected capacity change from 0 to 64
[   61.929478][T11627] ALSA: mixer_oss: invalid OSS volume 'u'
[   61.963454][T11630] loop1: detected capacity change from 0 to 1024
[   61.966387][T11630] EXT4-fs: Ignoring removed orlov option
[   61.972367][T11630] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   62.002929][T11630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.267812][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.317486][T11596] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[   62.317519][T11596]   allowing incompatible features above 0.0: (unknown version)
[   62.317542][T11596]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   62.317555][T11596] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   62.317614][T11596] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[   62.317669][T11596] bcachefs (loop2): Version upgrade required:
[   62.317669][T11596] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   62.317669][T11596] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   62.317669][T11596]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   62.317764][T11596] bcachefs (loop2): dropping and reconstructing all alloc info
[   62.343193][T11660] sock: sock_timestamping_bind_phc: sock not bind to device
[   62.351322][T11596] bcachefs (loop2): accounting_read...
[   62.359341][T11662] loop1: detected capacity change from 0 to 164
[   62.362033][T11662] iso9660: Unknown parameter 'f�triderockperm'
[   62.375304][T11596]  done
[   62.375334][T11596] bcachefs (loop2): alloc_read... done
[   62.375435][T11596] bcachefs (loop2): snapshots_read... done
[   62.375658][T11596] bcachefs (loop2): done starting filesystem
[   62.410810][ T6558] bcachefs (loop2): shutting down
[   62.431626][ T6558] bcachefs (loop2): shutdown complete
[   62.506295][T11682] tmpfs: Bad value for 'mpol'
[   62.568363][T11696] loop0: detected capacity change from 0 to 764
[   62.605907][T11702] validate_nla: 2 callbacks suppressed
[   62.607275][T11696] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   62.610202][T11702] netlink: 'syz.3.2141': attribute type 21 has an invalid length.
[   62.656459][T11711] loop3: detected capacity change from 0 to 512
[   62.658444][T11711] EXT4-fs: Ignoring removed i_version option
[   62.667949][T11711] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.2144: inode #13: comm syz.3.2144: iget: illegal inode #
[   62.668080][T11711] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2144: couldn't read orphan inode 13 (err -117)
[   62.669674][T11711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.694086][T11711] EXT4-fs error (device loop3): ext4_resize_begin:60: comm syz.3.2144: resize_inode disabled but reserved GDT blocks non-zero
[   62.730251][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.793913][T11704] loop4: detected capacity change from 0 to 32768
[   62.970319][T11754] netlink: 'syz.3.2165': attribute type 21 has an invalid length.
[   62.977951][T11753] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   63.078896][T11774] netlink: 'syz.3.2174': attribute type 3 has an invalid length.
[   63.121690][T11773] loop0: detected capacity change from 0 to 1764
[   63.190067][T11764] loop4: detected capacity change from 0 to 32768
[   63.197041][T11783] overlay: Unknown parameter '\'
[   63.216629][T11764] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[   63.216951][T11764] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   63.246852][T11797] netlink: 'syz.3.2182': attribute type 10 has an invalid length.
[   63.247211][T11797] bridge0: port 3(bond0) entered disabled state
[   63.248001][T11797] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.248134][T11797] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.259636][T11764] XFS (loop4): Ending clean mount
[   63.277322][T11764] XFS (loop4): Quotacheck needed: Please wait.
[   63.282727][T11797] bridge0: port 3(bond0) entered blocking state
[   63.282787][T11797] bridge0: port 3(bond0) entered forwarding state
[   63.282883][T11797] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.282915][T11797] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.282972][T11797] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.283010][T11797] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.300051][T11764] XFS (loop4): Quotacheck: Done.
[   63.306662][T11797] bridge0: port 3(bond0) entered disabled state
[   63.306765][T11797] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.306810][T11797] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.347328][ T6555] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   63.427637][T11809] loop3: detected capacity change from 0 to 512
[   63.451838][T11809] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   63.451882][T11809] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   63.451908][T11809] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2188: Corrupt directory, running e2fsck is recommended
[   63.462614][T11809] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   63.464484][T11809] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2188: corrupted in-inode xattr: invalid ea_ino
[   63.467449][T11809] EXT4-fs (loop3): Remounting filesystem read-only
[   63.467945][T11809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.517033][T11801] loop1: detected capacity change from 0 to 32768
[   63.528803][T11809] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[   63.543511][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.582288][T11801] jfs_mkdir: dtInsert returned -EIO
[   63.582323][T11801] ERROR: (device loop1): txAbort: 
[   63.582323][T11801] 
[   63.583101][T11801] ERROR: (device loop1): remounting filesystem as read-only
[   63.884306][T11852] loop4: detected capacity change from 0 to 32768
[   63.907301][T11852] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2202 (11852)
[   63.927579][T11852] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   63.927638][T11852] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   63.927657][T11852] BTRFS info (device loop4): disk space caching is enabled
[   63.927665][T11852] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   63.930143][T11868] loop1: detected capacity change from 0 to 1024
[   63.955273][T11852] BTRFS info (device loop4): rebuilding free space tree
[   63.957870][T11868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.971423][T11889] loop0: detected capacity change from 0 to 256
[   63.976616][T11889] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[   63.976740][T11889] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   63.982968][T11852] BTRFS info (device loop4): disabling free space tree
[   63.983003][T11852] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   63.983014][T11852] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   64.022118][T11857] loop2: detected capacity change from 0 to 32768
[   64.024205][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.032583][T11857] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 0b6c5414-253d-4bfb-a62c-3077f1028cab
[   64.032625][T11857] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2124 (11857)
[   64.040556][T11857] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   64.040608][T11857] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   64.040628][T11857] BTRFS info (device loop2): disk space caching is enabled
[   64.040638][T11857] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   64.066384][T11852] BTRFS info (device loop4): balance: start -f -sprofiles=raid1c4,drange=1..7
[   64.066484][T11852] BTRFS info (device loop4): balance: ended with status: 0
[   64.100079][T11904] loop0: detected capacity change from 0 to 164
[   64.110783][T11867] loop3: detected capacity change from 0 to 32768
[   64.117149][ T6555] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   64.128570][T11857] BTRFS info (device loop2): rebuilding free space tree
[   64.150034][T11857] BTRFS info (device loop2): disabling free space tree
[   64.150077][T11857] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   64.150093][T11857] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   64.163810][T11914] netlink: 'syz.1.2218': attribute type 1 has an invalid length.
[   64.177509][T11916] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[   64.208139][T11857] BTRFS info (device loop2): balance: start -d -m -s
[   64.208650][T11857] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[   64.232919][T11857] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[   64.250901][T11857] BTRFS info (device loop2): found 9 extents, stage: move data extents
[   64.259684][T11929] netlink: 'syz.0.2222': attribute type 3 has an invalid length.
[   64.263096][T11857] BTRFS info (device loop2): found 1 extents, stage: update data pointers
[   64.275155][T11857] BTRFS info (device loop2): relocating block group 1048576 flags system
[   64.286679][T11857] BTRFS info (device loop2): found 1 extents, stage: move data extents
[   64.297430][T11857] BTRFS info (device loop2): balance: ended with status: 0
[   64.308832][T11931] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   64.314146][T11931] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   64.325722][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   64.346183][T11867] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[   64.346214][T11867]   allowing incompatible features above 0.0: (unknown version)
[   64.349768][T11867]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   64.349799][T11867] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   64.349868][T11867] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[   64.349920][T11867] bcachefs (loop3): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete
[   64.349920][T11867] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive
[   64.349920][T11867]   running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents
[   64.370800][T11867] bcachefs (loop3): accounting_read...
[   64.373568][ T6558] BTRFS info (device loop2): last unmount of filesystem 0b6c5414-253d-4bfb-a62c-3077f1028cab
[   64.387557][T11867]  done
[   64.387582][T11867] bcachefs (loop3): alloc_read... done
[   64.388171][T11867] bcachefs (loop3): snapshots_read... done
[   64.388740][T11867] bcachefs (loop3): check_allocations...
[   64.390167][T11867] bcachefs (loop3): bucket 0:26 data type btree ptr gen 0 missing in alloc btree
[   64.390192][T11867]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[   64.391600][T11867] bcachefs (loop3): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[   64.391606][T11867]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   64.391964][T11867] bcachefs (loop3): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[   64.391969][T11867]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   64.393564][T11867] bcachefs (loop3): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[   64.393571][T11867]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   64.400570][T11867] bcachefs (loop3): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[   64.400578][T11867]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   64.400859][T11867] bcachefs (loop3): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[   64.400884][T11867] bcachefs (loop3): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401026][T11867] bcachefs (loop3): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[   64.401049][T11867] bcachefs (loop3): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401135][T11867] bcachefs (loop3): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[   64.401156][T11867] bcachefs (loop3): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401201][T11867] bcachefs (loop3): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[   64.401224][T11867] bcachefs (loop3): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401266][T11867] bcachefs (loop3): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[   64.401287][T11867] bcachefs (loop3): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401337][T11867] bcachefs (loop3): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[   64.401361][T11867] bcachefs (loop3): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401405][T11867] bcachefs (loop3): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[   64.401427][T11867] bcachefs (loop3): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401470][T11867] bcachefs (loop3): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[   64.401491][T11867] bcachefs (loop3): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[   64.401540][T11867] bcachefs (loop3): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing
[   64.401561][T11867] bcachefs (loop3): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401604][T11867] bcachefs (loop3): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing
[   64.401626][T11867] bcachefs (loop3): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401671][T11867] bcachefs (loop3): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing
[   64.401675][T11867]   Ratelimiting new instances of previous error
[   64.401702][T11867] bcachefs (loop3): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[   64.401706][T11867]   Ratelimiting new instances of previous error
[   64.404155][T11867]  done
[   64.405538][T11867] bcachefs (loop3): going read-write
[   64.421166][T11867] bcachefs (loop3): journal_replay... done
[   64.483708][T11867] bcachefs (loop3): check_extents_to_backpointers...
[   64.484162][T11867] bcachefs (loop3): scanning for missing backpointers in 4/128 buckets
[   64.487211][ T2413] ieee802154 phy0 wpan0: encryption failed: -22
[   64.487234][ T2413] ieee802154 phy1 wpan1: encryption failed: -22
[   64.488671][T11867]  done
[   64.491278][T11867] bcachefs (loop3): check_subvols... done
[   64.491699][T11867] bcachefs (loop3): check_inodes... done
[   64.492394][T11867] bcachefs (loop3): check_dirents...
[   64.492673][T11867] bcachefs (loop3): dirent points to missing inode:
[   64.492679][T11867]   u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing
[   64.492851][T11867] bcachefs (loop3): dirent points to missing inode:
[   64.492856][T11867]   u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing
[   64.492953][T11867] bcachefs (loop3): hash table key at wrong offset: should be at 5178636093158006573
[   64.492958][T11867]   u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+foun -> 4097 type dir, fixing
[   64.493245][T11867] bcachefs (loop3): dirent points to missing inode:
[   64.493249][T11867]   u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 172335562754 type reg, fixing
[   64.493340][T11867] bcachefs (loop3): fsck counted subdirectories wrong for inum 4096:4294967295: got 1 should be 2
[   64.493388][T11867] bcachefs (loop3): check_dirents requires second pass
[   64.508370][T11867]  done
[   64.510035][T11867] bcachefs (loop3): resume_logged_ops... done
[   64.510461][T11867] bcachefs (loop3): delete_dead_inodes... done
[   64.513297][T11867] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[   64.513318][T11867] bcachefs (loop3): check_extents_to_backpointers... done
[   64.514436][T11867] bcachefs (loop3): check_subvols... done
[   64.515662][T11867] bcachefs (loop3): check_inodes... done
[   64.516043][T11867] bcachefs (loop3): check_dirents... done
[   64.516372][T11867] bcachefs (loop3): resume_logged_ops... done
[   64.516610][T11867] bcachefs (loop3): delete_dead_inodes... done
[   64.519660][T11867] bcachefs (loop3): done starting filesystem
[   64.583991][   T11] cfg80211: failed to load regulatory.db
[   64.668259][ T6549] bcachefs (loop3): shutting down
[   64.668287][ T6549] bcachefs (loop3): going read-only
[   64.668313][ T6549] bcachefs (loop3): finished waiting for writes to stop
[   64.697289][ T6549] bcachefs (loop3): flushing journal and stopping allocators, journal seq 19
[   64.697445][ T6549] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 19
[   64.699429][ T6549] bcachefs (loop3): clean shutdown complete, journal seq 20
[   64.699824][ T6549] bcachefs (loop3): marking filesystem clean
[   64.767501][ T6549] bcachefs (loop3): shutdown complete
[   64.805469][T11987] __nla_validate_parse: 13 callbacks suppressed
[   64.805515][T11987] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2250'.
[   64.824664][T11989] netlink: 'syz.2.2249': attribute type 1 has an invalid length.
[   64.824714][T11989] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2249'.
[   65.067028][T12025] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2269'.
[   65.152878][T11999] loop0: detected capacity change from 0 to 32768
[   65.170162][T11999] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2255 (11999)
[   65.177755][T11999] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   65.177805][T11999] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   65.177822][T11999] BTRFS info (device loop0): disk space caching is enabled
[   65.177830][T11999] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   65.205235][T12033] loop2: detected capacity change from 0 to 32768
[   65.211418][T12033] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 85d1220f should be 29d2fb78
[   65.222345][T11999] BTRFS info (device loop0): rebuilding free space tree
[   65.222978][T12057] loop1: detected capacity change from 0 to 16
[   65.227751][T11999] BTRFS info (device loop0): disabling free space tree
[   65.227794][T11999] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   65.227807][T11999] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   65.228799][T12057] erofs (device loop1): mounted with root inode @ nid 36.
[   65.264554][T11999] BTRFS info (device loop0): balance: start -sconvert=raid0,devid=0,limit=65537,limit=65537..0,stripes=4294967292..32763
[   65.264654][T11999] BTRFS info (device loop0): balance: ended with status: 0
[   65.318391][ T6556] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   65.322580][T12068] openvswitch: netlink: ct_state flags 00005008 unsupported
[   65.322625][ T6689] udevd[6689]: incorrect bcachefs checksum on /dev/loop2
[   65.343002][ T6689] udevd[6689]: incorrect bcachefs checksum on /dev/loop2
[   65.363654][ T6689] udevd[6689]: incorrect bcachefs checksum on /dev/loop2
[   65.532196][T12033] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   65.532230][T12033]   allowing incompatible features above 0.0: (unknown version)
[   65.532506][T12033]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   65.532541][T12033] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   65.532613][T12033] bcachefs (loop2): recovering from clean shutdown, journal seq 7
[   65.532644][T12033] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   65.532644][T12033]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   65.543972][T12033] bcachefs (loop2): btree node read error at btree alloc level 0/0
[   65.543982][T12033]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[   65.543987][T12033]   loop2 node offset 8/32 bset u64s 375: checksum error, type crc32c_nonzero: got 207a2968 should be 1bdb8771
[   65.543991][T12033]   loop2 btree validate error
[   65.543995][T12033]   flagging btree alloc lost data
[   65.543998][T12033]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[   65.544001][T12033]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[   65.544005][T12033]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[   65.544009][T12033]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[   65.544012][T12033]   ret fsck_errors_not_fixed
[   65.544065][T12033] bcachefs (loop2): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[   65.551127][T12033] bcachefs (loop2): check_topology... done
[   65.555935][T12033] bcachefs (loop2): accounting_read... done
[   65.588250][T12033] bcachefs (loop2): alloc_read... done
[   65.588603][T12033] bcachefs (loop2): snapshots_read... done
[   65.588861][T12033] bcachefs (loop2): check_allocations...
[   65.589196][T12033] bcachefs (loop2): bucket 0:36 data type user ptr gen 0 missing in alloc btree
[   65.589202][T12033]   while marking u64s 7 type extent 4098:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum crc32c 0:4925b703  compress lz4 ptr: 0:36:0 gen 0, fixing
[   65.589327][T12033] bcachefs (loop2): bucket 0:34 data type user ptr gen 0 missing in alloc btree
[   65.589331][T12033]   while marking u64s 7 type extent 536870913:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum crc32c 0:cec3872e  compress incompressible ptr: 0:34:0 gen 0, fixing
[   65.589417][T12033] bcachefs (loop2): bucket 0:27 data type btree ptr gen 0 missing in alloc btree
[   65.589422][T12033]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b77ad9ee5a61c7f0 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing
[   65.589588][T12033] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   65.589592][T12033]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   65.591829][T12033] bcachefs (loop2): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[   65.591835][T12033]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   65.592013][T12033] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   65.592018][T12033]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   65.592347][T12033] bcachefs (loop2): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[   65.592352][T12033]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   65.592445][T12033] bcachefs (loop2): bucket 0:31 data type btree ptr gen 0 missing in alloc btree
[   65.592449][T12033]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1477538288e6fe55 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing
[   65.592569][T12033] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   65.592573][T12033]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   65.592865][T12033] bcachefs (loop2): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[   65.592870][T12033]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   65.592958][T12033] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   65.592962][T12033]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   65.593235][T12033] bcachefs (loop2): bucket 0:32 data type btree ptr gen 0 missing in alloc btree
[   65.593239][T12033]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   65.593337][T12033] bcachefs (loop2): bucket 0:28 data type btree ptr gen 0 missing in alloc btree
[   65.593342][T12033]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d19419031ca39bdb written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing
[   65.593430][T12033] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   65.593434][T12033]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   65.620793][T12033] bcachefs (loop2): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[   65.620804][T12033]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   65.620984][T12033] bcachefs (loop2): bucket 0:37 data type btree ptr gen 0 missing in alloc btree
[   65.620989][T12033]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 29c4a2706086d15a written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing
[   65.620994][T12033]   Ratelimiting new instances of previous error
[   65.650499][T12033]  done
[   65.651217][T12033] bcachefs (loop2): going read-write
[   65.661176][T12108] tmpfs: Bad value for 'mpol'
[   65.661435][T12033] bcachefs (loop2): journal_replay... done
[   65.745661][T12033] bcachefs (loop2): check_alloc_info...
[   65.746124][T12033] bcachefs (loop2): hole in alloc btree missing in freespace btree
[   65.746147][T12033]   device 0 buckets 26-27, fixing
[   65.748056][T12033]  done
[   65.758129][T12033] bcachefs (loop2): check_lrus... done
[   65.763728][T12033] bcachefs (loop2): check_backpointers_to_extents... done
[   65.764372][T12033] bcachefs (loop2): check_extents_to_backpointers...
[   65.764612][T12033] bcachefs (loop2): scanning for missing backpointers in 5/128 buckets
[   65.765321][T12033]  done
[   65.781589][T12033] bcachefs (loop2): check_inodes... done
[   65.782857][T12033] bcachefs (loop2): resume_logged_ops... done
[   65.785327][T12033] bcachefs (loop2): delete_dead_inodes... done
[   65.790831][T12033] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[   65.790861][T12033] bcachefs (loop2): check_extents_to_backpointers... done
[   65.791690][T12033] bcachefs (loop2): check_inodes... done
[   65.797331][T12033] bcachefs (loop2): resume_logged_ops... done
[   65.797640][T12033] bcachefs (loop2): delete_dead_inodes... done
[   65.798680][T12033] bcachefs (loop2): done starting filesystem
[   65.811309][T12128] netlink: 432 bytes leftover after parsing attributes in process `syz.0.2305'.
[   65.826786][ T6689] udevd[6689]: incorrect bcachefs checksum on /dev/loop2
[   65.907461][ T6558] bcachefs (loop2): shutting down
[   65.907489][ T6558] bcachefs (loop2): going read-only
[   65.907504][ T6558] bcachefs (loop2): finished waiting for writes to stop
[   65.931712][ T6558] bcachefs (loop2): flushing journal and stopping allocators, journal seq 17
[   65.943181][ T6558] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 18
[   65.947082][ T6558] bcachefs (loop2): clean shutdown complete, journal seq 19
[   65.947505][ T6558] bcachefs (loop2): marking filesystem clean
[   65.988649][ T6558] bcachefs (loop2): shutdown complete
[   66.017884][T12166] loop4: detected capacity change from 0 to 256
[   66.059833][T12171] binder: BC_ACQUIRE_RESULT not supported
[   66.059863][T12171] binder: 12170:12171 ioctl c0306201 200001c0 returned -22
[   66.128990][T12180] netlink: 'syz.4.2330': attribute type 3 has an invalid length.
[   66.130393][T12180] netlink: 'syz.4.2330': attribute type 1 has an invalid length.
[   66.160977][T12189] tmpfs: Bad value for 'mpol'
[   66.228312][T12202] netlink: 'syz.3.2340': attribute type 3 has an invalid length.
[   66.255342][T12206] loop1: detected capacity change from 0 to 16
[   66.257834][T12206] erofs (device loop1): mounted with root inode @ nid 36.
[   66.393090][T12235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.428612][T12241] kAFS: unparsable volume name
[   66.496562][T12251] usb usb1: check_ctrlrecip: process 12251 (syz.3.2365) requesting ep 01 but needs 81
[   66.496599][T12251] usb usb1: usbfs: process 12251 (syz.3.2365) did not claim interface 0 before use
[   66.543230][T12256] gre1: entered allmulticast mode
[   66.563437][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2368'.
[   66.579593][T12243] loop1: detected capacity change from 0 to 32768
[   66.582253][T12243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2361 (12243)
[   66.589648][T12243] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   66.589708][T12243] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   66.589733][T12243] BTRFS info (device loop1): using free-space-tree
[   66.642933][T12278] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2371'.
[   66.665364][ T6550] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   67.133906][T12337] openvswitch: netlink: IPv4 tunnel dst address is zero
[   67.208294][T12332] loop1: detected capacity change from 0 to 32768
[   67.260936][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'.
[   67.400374][T12352] loop0: detected capacity change from 0 to 64
[   67.476996][T12296] loop4: detected capacity change from 0 to 131072
[   67.486263][T12296] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0)
[   67.486301][T12296] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   67.489240][T12296] F2FS-fs (loop4): invalid crc value
[   67.513199][T12296] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   67.513863][T12296] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   67.513873][T12296] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   67.737459][T12364] loop0: detected capacity change from 0 to 32768
[   67.740442][T12364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2412 (12364)
[   67.759062][T12364] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   67.759141][T12364] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   67.759171][T12364] BTRFS info (device loop0): using free-space-tree
[   67.770947][T12368] loop3: detected capacity change from 0 to 1024
[   67.856815][ T6556] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   67.925404][T12394] loop3: detected capacity change from 0 to 128
[   67.934236][T12332] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=wide_macs,nojournal_transaction_names,no_data_io
[   67.934266][T12332]   allowing incompatible features above 0.0: (unknown version)
[   67.941415][T12332]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   67.941454][T12332] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   67.941532][T12332] bcachefs (loop1): recovering from clean shutdown, journal seq 14
[   67.941577][T12332] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   67.941577][T12332]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   67.957013][T12394] FAT-fs (loop3): Directory bread(block 32) failed
[   67.957051][T12394] FAT-fs (loop3): Directory bread(block 33) failed
[   67.957088][T12394] FAT-fs (loop3): Directory bread(block 34) failed
[   67.957099][T12394] FAT-fs (loop3): Directory bread(block 35) failed
[   67.957120][T12394] FAT-fs (loop3): Directory bread(block 36) failed
[   67.957131][T12394] FAT-fs (loop3): Directory bread(block 37) failed
[   67.957151][T12394] FAT-fs (loop3): Directory bread(block 38) failed
[   67.957161][T12394] FAT-fs (loop3): Directory bread(block 39) failed
[   67.957180][T12394] FAT-fs (loop3): Directory bread(block 40) failed
[   67.957190][T12394] FAT-fs (loop3): Directory bread(block 41) failed
[   67.980000][T12332] bcachefs (loop1): accounting_read...
[   67.991917][T12400] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   67.995118][T12400] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   68.009033][T12332]  done
[   68.009067][T12332] bcachefs (loop1): alloc_read... done
[   68.009408][T12332] bcachefs (loop1): snapshots_read... done
[   68.010265][T12332] bcachefs (loop1): check_allocations...
[   68.010850][T12332] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   68.010856][T12332]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[   68.021012][T12394] syz.3.2416: attempt to access beyond end of device
[   68.021012][T12394] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128
[   68.021123][T12394] FAT-fs (loop3): Filesystem has been set read-only
[   68.021188][T12394] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[   68.022288][T12332] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   68.022295][T12332]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   68.026657][T12332] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   68.026664][T12332]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   68.027111][T12332] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   68.027116][T12332]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   68.027447][T12332] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   68.027452][T12332]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   68.027828][T12332] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   68.027832][T12332]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   68.041075][T12332]  done
[   68.060804][T12332] bcachefs (loop1): going read-write
[   68.062059][T12332] bcachefs (loop1): journal_replay...
[   68.090961][T12412] ieee802154 phy0 wpan0: encryption failed: -22
[   68.114039][T12332]  done
[   68.114354][T12332] bcachefs (loop1): check_extents_to_backpointers...
[   68.114701][T12332] bcachefs (loop1): scanning for missing backpointers in 6/128 buckets
[   68.117249][T12332]  done
[   68.118313][T12332] bcachefs (loop1): check_inodes... done
[   68.118776][T12332] bcachefs (loop1): resume_logged_ops... done
[   68.119500][T12332] bcachefs (loop1): delete_dead_inodes... done
[   68.122105][T12332] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[   68.122128][T12332] bcachefs (loop1): check_extents_to_backpointers... done
[   68.123617][T12332] bcachefs (loop1): check_inodes... done
[   68.128114][T12332] bcachefs (loop1): resume_logged_ops... done
[   68.128390][T12332] bcachefs (loop1): delete_dead_inodes... done
[   68.139413][T12332] bcachefs (loop1): done starting filesystem
[   68.209546][T12422] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   68.216407][T12425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2428'.
[   68.216448][T12425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2428'.
[   68.216463][T12425] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2428'.
[   68.256232][T12428] netlink: zone id is out of range
[   68.256289][T12428] netlink: get zone limit has 8 unknown bytes
[   68.273594][ T6550] bcachefs (loop1): shutting down
[   68.273624][ T6550] bcachefs (loop1): going read-only
[   68.273648][ T6550] bcachefs (loop1): finished waiting for writes to stop
[   68.277562][T12433] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   68.285809][T12435] loop2: detected capacity change from 0 to 2048
[   68.291660][ T6550] bcachefs (loop1): flushing journal and stopping allocators, journal seq 24
[   68.293197][ T6550] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 24
[   68.293923][ T6550] bcachefs (loop1): clean shutdown complete, journal seq 25
[   68.294260][ T6550] bcachefs (loop1): marking filesystem clean
[   68.310861][T12435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.312752][ T6550] bcachefs (loop1): shutdown complete
[   68.313099][T12440] binder: 12439:12440 ioctl c00c620f 0 returned -14
[   68.520084][T12448] loop0: detected capacity change from 0 to 32768
[   68.522551][T12448] (syz.0.2440,12448,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   68.523094][T12448] (syz.0.2440,12448,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   68.524489][T12448] (syz.0.2440,12448,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[   68.526686][T12448] JBD2: Ignoring recovery information on journal
[   68.532236][T12464] loop4: detected capacity change from 0 to 256
[   68.542672][T12448] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   68.566753][T12464] FAT-fs (loop4): Directory bread(block 64) failed
[   68.568074][T12464] FAT-fs (loop4): Directory bread(block 65) failed
[   68.568141][T12464] FAT-fs (loop4): Directory bread(block 66) failed
[   68.568158][T12464] FAT-fs (loop4): Directory bread(block 67) failed
[   68.568185][T12464] FAT-fs (loop4): Directory bread(block 68) failed
[   68.568199][T12464] FAT-fs (loop4): Directory bread(block 69) failed
[   68.568223][T12464] FAT-fs (loop4): Directory bread(block 70) failed
[   68.568236][T12464] FAT-fs (loop4): Directory bread(block 71) failed
[   68.568261][T12464] FAT-fs (loop4): Directory bread(block 72) failed
[   68.568274][T12464] FAT-fs (loop4): Directory bread(block 73) failed
[   68.610748][ T6556] ocfs2: Unmounting device (7,0) on (node local)
[   68.671741][T12462] loop3: detected capacity change from 0 to 32768
[   68.673438][T12462] XFS: noikeep mount option is deprecated.
[   68.691727][T12462] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   68.710591][T12462] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   68.719620][T12462] XFS (loop3): Starting recovery (logdev: internal)
[   68.738231][T12462] XFS (loop3): Ending recovery (logdev: internal)
[   68.818897][ T6549] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   68.849536][T12493] loop4: detected capacity change from 0 to 256
[   69.003375][T12510] loop4: detected capacity change from 0 to 256
[   69.093448][T12496] loop3: detected capacity change from 0 to 32768
[   69.097592][T12496] XFS: ikeep mount option is deprecated.
[   69.099826][T12496] XFS: ikeep mount option is deprecated.
[   69.139808][T12496] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.173841][T12496] XFS (loop3): Ending clean mount
[   69.222538][ T6549] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.346003][T12541] loop0: detected capacity change from 0 to 32768
[   69.350972][T12554] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[   69.356851][T12541] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.419820][T12541] XFS (loop0): Ending clean mount
[   69.449763][T12541] XFS (loop0): Quotacheck needed: Please wait.
[   69.463707][T12541] XFS (loop0): Quotacheck: Done.
[   69.491415][T12574] validate_nla: 1 callbacks suppressed
[   69.491455][T12574] netlink: 'syz.2.2488': attribute type 2 has an invalid length.
[   69.537099][ T6556] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.629250][T12582] loop2: detected capacity change from 0 to 512
[   69.629617][T12582] EXT4-fs: Ignoring removed oldalloc option
[   69.636321][T12582] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   69.637329][T12582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e028, mo2=0002]
[   69.637363][T12582] System zones: 1-12
[   69.637450][T12582] EXT4-fs (loop2): orphan cleanup on readonly fs
[   69.646119][T12582] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2493: bg 0: block 297: padding at end of block bitmap is not set
[   69.657860][T12582] EXT4-fs (loop2): Remounting filesystem read-only
[   69.658057][T12582] EXT4-fs (loop2): 1 truncate cleaned up
[   69.658503][T12582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   69.740914][ T6558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   69.839524][T12598] loop2: detected capacity change from 0 to 1024
[   70.079208][T12630] loop4: detected capacity change from 0 to 764
[   70.093499][T12630] Symlink component flag not implemented
[   70.094529][T12630] Symlink component flag not implemented
[   70.095706][T12630] Symlink component flag not implemented (129)
[   70.096735][T12630] Symlink component flag not implemented (6)
[   70.152306][T12639] netlink: 'syz.0.2519': attribute type 1 has an invalid length.
[   70.153730][T12639] __nla_validate_parse: 2 callbacks suppressed
[   70.156844][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'.
[   70.336437][T12671] futex_wake_op: syz.1.2534 tries to shift op by -1; fix this program
[   70.493877][T12647] loop4: detected capacity change from 0 to 32768
[   70.506764][T12647] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2524 (12647)
[   70.517235][T12691] loop0: detected capacity change from 0 to 2048
[   70.524923][T12647] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   70.525004][T12647] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   70.525027][T12647] BTRFS info (device loop4): disk space caching is enabled
[   70.525035][T12647] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   70.569951][T12691] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.581307][T12691] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   70.613490][T12647] BTRFS info (device loop4): rebuilding free space tree
[   70.620855][T12647] BTRFS info (device loop4): disabling free space tree
[   70.620888][T12647] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   70.620911][T12647] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   70.652540][T12647] BTRFS error (device loop4): balance: invalid convert system profile raid0
[   70.661918][ T6556] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[   70.689717][ T6555] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   70.884729][T12757] netlink: 'syz.3.2567': attribute type 2 has an invalid length.
[   70.886509][T12757] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2567'.
[   70.919919][T12732] loop0: detected capacity change from 0 to 32768
[   70.965332][T12732] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   71.006038][T12732] XFS (loop0): Ending clean mount
[   71.051787][T12788] loop2: detected capacity change from 0 to 1024
[   71.076453][ T6556] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   71.092333][T12788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.128417][T12788] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2579: bg 0: block 480: padding at end of block bitmap is not set
[   71.135069][T12801] loop4: detected capacity change from 0 to 64
[   71.141904][T12788] EXT4-fs (loop2): Remounting filesystem read-only
[   71.142283][T12788] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.2.2579: cleanup dec ref error -28
[   71.179504][ T6558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.425047][T12845] CIFS: iocharset name too long
[   71.464851][ T6560] Bluetooth: hci0: unexpected event for opcode 0x204e
[   71.601915][T12875] loop1: detected capacity change from 0 to 1764
[   71.616844][T12847] loop0: detected capacity change from 0 to 32768
[   71.644095][T12847] JBD2: Ignoring recovery information on journal
[   71.647619][T12875] iso9660: Corrupted directory entry in block 2 of inode 1920
[   71.680293][T12847] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   71.705446][T12889] smb3: Unexpected value for 'rdma'
[   71.716218][T12847] (syz.0.2607,12847,0):ocfs2_mknod:505 ERROR: status = -31
[   71.716257][T12847] (syz.0.2607,12847,0):ocfs2_mkdir:661 ERROR: status = -31
[   71.754063][ T6556] ocfs2: Unmounting device (7,0) on (node local)
[   71.810313][T12901] loop1: detected capacity change from 0 to 64
[   71.849794][T12901] Trying to free block not in datazone
[   71.849957][T12901] Trying to free block not in datazone
[   71.849964][T12901] Trying to free block not in datazone
[   71.849968][T12901] Trying to free block not in datazone
[   71.849972][T12901] Trying to free block not in datazone
[   71.849975][T12901] minix_free_block (loop1:6): bit already cleared
[   71.849986][T12901] Trying to free block not in datazone
[   71.849994][T12901] Trying to free block not in datazone
[   71.949423][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'.
[   71.954524][T12915] deleting an unspecified loop device is not supported.
[   71.974662][T12919] loop2: detected capacity change from 0 to 512
[   71.988999][T12919] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[   71.989127][T12919] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   72.031587][ T1997] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[   72.077328][T12931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.164625][T12922] loop1: detected capacity change from 0 to 32768
[   72.174835][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   72.237752][T12922] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only
[   72.237810][T12922]   allowing incompatible features above 0.0: (unknown version)
[   72.237817][T12922]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   72.237826][T12922] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   72.237872][T12922] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   72.237923][T12922] bcachefs (loop1): Version upgrade required:
[   72.237923][T12922] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   72.237923][T12922] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   72.237923][T12922]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   72.254239][T12922] bcachefs (loop1): accounting_read...
[   72.266523][T12942] loop0: detected capacity change from 0 to 32768
[   72.277548][T12942] (syz.0.2655,12942,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   72.277828][T12942] (syz.0.2655,12942,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   72.287700][T12922]  done
[   72.287726][T12922] bcachefs (loop1): alloc_read... done
[   72.288408][T12922] bcachefs (loop1): done starting filesystem
[   72.301345][T12942] JBD2: Ignoring recovery information on journal
[   72.331599][ T6550] bcachefs (loop1): shutting down
[   72.344700][T12942] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   72.355956][ T6550] bcachefs (loop1): shutdown complete
[   72.359353][T12938] loop4: detected capacity change from 0 to 32768
[   72.415846][ T6556] ocfs2: Unmounting device (7,0) on (node local)
[   72.532344][T12971] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.533857][T12971] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   72.622888][T12985] loop0: detected capacity change from 0 to 2048
[   72.666607][T12985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.671869][T12993] netlink: 'syz.2.2676': attribute type 5 has an invalid length.
[   72.688099][ T6556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.700931][T12993] ip6erspan0: entered promiscuous mode
[   72.837562][T13019] loop3: detected capacity change from 0 to 256
[   72.850469][T13019] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[   72.861287][T13024] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003
[   72.882843][T12938] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[   72.890093][T12938]   allowing incompatible features above 0.0: (unknown version)
[   72.890228][T12938]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   72.890269][T12938] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   72.890344][T12938] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[   72.890387][T12938] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   72.890387][T12938]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   72.890481][T12938] bcachefs (loop4): dropping and reconstructing all alloc info
[   72.915706][T12938] bcachefs (loop4): accounting_read... done
[   72.931119][T12938] bcachefs (loop4): alloc_read... done
[   72.931203][T12938] bcachefs (loop4): snapshots_read... done
[   72.931358][T12938] bcachefs (loop4): done starting filesystem
[   72.980655][T13039] loop0: detected capacity change from 0 to 512
[   72.981151][T13039] EXT4-fs: Ignoring removed i_version option
[   72.981162][T13039] EXT4-fs: Ignoring removed mblk_io_submit option
[   72.984312][ T6555] bcachefs (loop4): shutting down
[   73.004336][T13039] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.2696: inode #13: comm syz.0.2696: iget: illegal inode #
[   73.004512][T13039] EXT4-fs (loop0): Remounting filesystem read-only
[   73.005148][T13039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.028143][ T6555] bcachefs (loop4): shutdown complete
[   73.047393][ T6556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.118411][T13056] loop3: detected capacity change from 0 to 1024
[   73.146203][T13056] hfsplus: invalid catalog btree flag
[   73.146420][T13056] hfsplus: failed to load catalog file
[   73.166543][T13056] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   73.166576][T13056] overlayfs: missing 'lowerdir'
[   73.174577][T13047] loop2: detected capacity change from 0 to 32768
[   73.175265][T13047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2700 (13047)
[   73.179121][T13047] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.179171][T13047] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   73.179205][T13047] BTRFS info (device loop2): using free-space-tree
[   73.313051][ T6558] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.538884][T13124] loop0: detected capacity change from 0 to 1024
[   73.547176][T13124] EXT4-fs: inline encryption not supported
[   73.547200][T13124] EXT4-fs: Ignoring removed i_version option
[   73.550876][T13124] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   73.552717][T13128] loop3: detected capacity change from 0 to 4096
[   73.553618][T13119] loop1: detected capacity change from 0 to 1764
[   73.557325][T13128] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   73.560500][T13119] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   73.572298][T13124] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2731: lblock 2 mapped to illegal pblock 2 (length 1)
[   73.576442][T13119] iso9660: Corrupted directory entry in block 2 of inode 1920
[   73.582961][T13124] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   73.584623][T13124] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2731: lblock 0 mapped to illegal pblock 48 (length 1)
[   73.589782][T13124] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   73.589811][T13124] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2731: Failed to acquire dquot type 0
[   73.593865][T13124] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   73.599438][T13124] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2731: mark_inode_dirty error
[   73.607109][T13124] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   73.607180][T13124] EXT4-fs (loop0): 1 orphan inode deleted
[   73.607644][T13124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.617343][T13128] ntfs3(loop3): ino=19, mi_enum_attr
[   73.617372][T13128] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   73.627712][ T1997] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[   73.635231][ T1997] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   73.635276][ T1997] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0
[   73.646968][ T1997] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm kworker/u8:5: lblock 2 mapped to illegal pblock 2 (length 1)
[   73.648149][ T1997] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   73.648195][ T1997] EXT4-fs error (device loop0): ext4_write_dquot:6913: comm kworker/u8:5: Failed to commit dquot type 0
[   73.659055][ T1997] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[   73.663379][ T6556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.664047][T13128] ntfs3(loop3): failed to convert "c46c" to koi8-ru
[   73.664238][T13128] ntfs3(loop3): ino=20, mi_enum_attr
[   73.667151][ T6556] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[   73.668455][ T6556] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   73.668728][ T6556] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[   73.733564][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'.
[   73.733606][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'.
[   73.733634][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'.
[   73.758640][T13146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2740'.
[   73.965625][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2758'.
[   74.087541][T13204] netlink: 'syz.2.2769': attribute type 9 has an invalid length.
[   74.087576][T13204] netlink: 'syz.2.2769': attribute type 1 has an invalid length.
[   74.227777][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'.
[   74.252966][T13209] loop2: detected capacity change from 0 to 32768
[   74.262433][T13209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2773 (13209)
[   74.271407][T13209] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   74.274441][T13209] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   74.274498][T13209] BTRFS info (device loop2): using free-space-tree
[   74.424467][T13237] loop0: detected capacity change from 0 to 32768
[   74.467251][T13237] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=4,compression=lz4,degraded=no,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io
[   74.467282][T13237]   allowing incompatible features above 0.0: (unknown version)
[   74.467318][T13237]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   74.467332][T13237] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   74.467382][T13237] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   74.467435][T13237] bcachefs (loop0): Version upgrade required:
[   74.467435][T13237] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   74.467435][T13237] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   74.467435][T13237]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   74.467530][T13237] bcachefs (loop0): dropping and reconstructing all alloc info
[   74.498783][T13237] bcachefs (loop0): accounting_read...
[   74.504611][T13261] syz.3.2787 (13261): drop_caches: 0
[   74.507982][T13263] loop4: detected capacity change from 0 to 2048
[   74.510706][T13263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.515608][ T6558] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   74.527872][T13237]  done
[   74.527900][T13237] bcachefs (loop0): alloc_read... done
[   74.527987][T13237] bcachefs (loop0): snapshots_read... done
[   74.528142][T13237] bcachefs (loop0): done starting filesystem
[   74.641738][T13275] netlink: 'syz.3.2792': attribute type 1 has an invalid length.
[   74.654607][ T6556] bcachefs (loop0): shutting down
[   74.682573][ T6556] bcachefs (loop0): shutdown complete
[   74.710942][T13284] loop3: detected capacity change from 0 to 8
[   74.743952][T13286] loop2: detected capacity change from 0 to 8
[   74.764106][T13286] SQUASHFS error: Failed to read block 0x6de: -5
[   74.764141][T13286] SQUASHFS error: Unable to read metadata cache entry [6dc]
[   74.764180][T13286] SQUASHFS error: Failed to read block 0x63a: -5
[   74.764192][T13286] SQUASHFS error: Unable to read metadata cache entry [638]
[   74.764205][T13286] SQUASHFS error: Unable to read directory block [26067d:ffff]
[   74.764599][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2801'.
[   74.866023][T13302] netlink: 'syz.3.2807': attribute type 11 has an invalid length.
[   74.926713][T13311] loop1: detected capacity change from 0 to 8
[   74.944352][T13313] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   75.019753][T13320] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   75.220156][T13348] loop1: detected capacity change from 0 to 1024
[   75.258597][ T1997] hfsplus: b-tree write err: -5, ino 4
[   75.281894][T13354] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   75.366411][T13366] netlink: 'syz.2.2839': attribute type 21 has an invalid length.
[   75.367964][T13366] __nla_validate_parse: 3 callbacks suppressed
[   75.369008][T13366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2839'.
[   75.510781][T13390] loop2: detected capacity change from 0 to 1024
[   75.511448][T13390] EXT4-fs: Ignoring removed bh option
[   75.511795][T13390] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   75.511806][T13390] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[   75.511845][T13390] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   75.531989][T13394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2852'.
[   75.532020][T13394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2852'.
[   75.538104][T13390] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6
[   75.581017][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'.
[   75.644924][T13410] loop2: detected capacity change from 0 to 512
[   75.659574][T13410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.697926][ T6558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.730606][T13422] loop3: detected capacity change from 0 to 512
[   75.736405][T13422] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[   75.736448][T13422] UDF-fs: Scanning with blocksize 512 failed
[   75.737407][T13422] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[   75.737417][T13422] UDF-fs: Scanning with blocksize 1024 failed
[   75.740972][T13422] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[   75.740990][T13422] UDF-fs: Scanning with blocksize 2048 failed
[   75.743266][T13422] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   75.744253][T13422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.772517][T13426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2867'.
[   75.772551][T13426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2867'.
[   75.840422][T13435] loop3: detected capacity change from 0 to 128
[   75.840798][T13435] ext4: Unknown parameter 'fsname'
[   75.849912][T13435] Option '�}.�{�
T�pD�GD' to dns_resolver key: bad/missing value
[   75.882033][T13440] loop3: detected capacity change from 0 to 1024
[   75.924254][   T42] hfsplus: b-tree write err: -5, ino 4
[   76.041801][T13462] loop3: detected capacity change from 0 to 4096
[   76.051161][T13462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.099943][T13473] loop2: detected capacity change from 0 to 128
[   76.106301][T13473] FAT-fs (loop2): Directory bread(block 162) failed
[   76.106330][T13473] FAT-fs (loop2): Directory bread(block 163) failed
[   76.106350][T13473] FAT-fs (loop2): Directory bread(block 164) failed
[   76.106366][T13473] FAT-fs (loop2): Directory bread(block 165) failed
[   76.106380][T13473] FAT-fs (loop2): Directory bread(block 166) failed
[   76.106393][T13473] FAT-fs (loop2): Directory bread(block 167) failed
[   76.106406][T13473] FAT-fs (loop2): Directory bread(block 168) failed
[   76.106419][T13473] FAT-fs (loop2): Directory bread(block 169) failed
[   76.117571][T13473] FAT-fs (loop2): Directory bread(block 162) failed
[   76.117605][T13473] FAT-fs (loop2): Directory bread(block 163) failed
[   76.117784][T13473] syz.2.2889: attempt to access beyond end of device
[   76.117784][T13473] loop2: rw=3, sector=226, nr_sectors = 6 limit=128
[   76.117815][T13473] syz.2.2889: attempt to access beyond end of device
[   76.117815][T13473] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128
[   76.124878][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.234692][T13480] loop0: detected capacity change from 0 to 32768
[   76.263056][T13480] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.321514][T13480] XFS (loop0): Ending clean mount
[   76.322774][T13486] loop1: detected capacity change from 0 to 32768
[   76.324146][T13486] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2895 (13486)
[   76.329747][T13486] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   76.330043][T13486] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   76.330073][T13486] BTRFS info (device loop1): using free-space-tree
[   76.388071][ T6556] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.391357][ T6550] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   76.539360][T13545] netlink: 'syz.3.2913': attribute type 13 has an invalid length.
[   76.569876][T13549] sctp: [Deprecated]: syz.2.2914 (pid 13549) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.569876][T13549] Use struct sctp_sack_info instead
[   76.742095][T13570] mmap: syz.0.2925 (13570) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   76.770311][T13557] loop2: detected capacity change from 0 to 32768
[   76.782608][T13557] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   76.789046][T13557] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   76.818235][T13557] (syz.2.2918,13557,1):ocfs2_read_blocks:239 ERROR: status = -12
[   76.818278][T13557] (syz.2.2918,13557,1):ocfs2_xattr_block_find:2831 ERROR: status = -12
[   76.835742][T13558] loop1: detected capacity change from 0 to 32768
[   76.839327][T13558] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2919 (13558)
[   76.846649][T13558] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   76.846729][T13558] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   76.846782][T13558] BTRFS info (device loop1): using free-space-tree
[   76.858204][ T6558] ocfs2: Unmounting device (7,2) on (node local)
[   76.920778][T13565] loop3: detected capacity change from 0 to 32768
[   76.952971][T13565] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page
[   76.952971][T13565] 
[   76.964638][T13565] ERROR: (device loop3): remounting filesystem as read-only
[   76.964700][T13565] ialloc: diAlloc returned -5!
[   77.005532][ T6550] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   77.061317][T13610] loop0: detected capacity change from 0 to 1764
[   77.173587][T13624] geneve2: entered promiscuous mode
[   77.173624][T13624] geneve2: entered allmulticast mode
[   77.340929][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'.
[   77.476450][T13661] cifs: Unknown parameter 'h}#��
[   77.476450][T13661] �[���b����IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[   77.476450][T13661] S�Ș�ȞZ�6��'
[   77.573289][T13672] loop2: detected capacity change from 0 to 256
[   77.575865][T13670] loop1: detected capacity change from 0 to 128
[   77.576789][T13672] exfat: Deprecated parameter 'namecase'
[   77.578275][T13670] EXT4-fs: Ignoring removed nomblk_io_submit option
[   77.581683][T13670] EXT4-fs: Ignoring removed mblk_io_submit option
[   77.588754][T13670] EXT4-fs (loop1): Test dummy encryption mode enabled
[   77.592873][T13676] netlink: 'syz.0.2967': attribute type 21 has an invalid length.
[   77.594164][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'.
[   77.596824][T13670] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.599790][T13672] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   77.651269][ T6550] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.753116][T13688] bond0: Error: Cannot enslave bond to itself.
[   77.831131][T13680] loop2: detected capacity change from 0 to 40427
[   77.834074][T13680] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   77.838481][T13680] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   77.843176][T13680] F2FS-fs (loop2): invalid crc value
[   77.871001][T13680] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   77.882357][T13680] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   77.883526][T13680] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   78.030761][T13717] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.030964][T13717] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[   78.031896][T13717] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[   78.118026][T13659] loop3: detected capacity change from 0 to 131072
[   78.126782][T13659] F2FS-fs (loop3): invalid crc value
[   78.207321][T13659] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   78.213467][T13659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   78.259378][T13746] loop4: detected capacity change from 0 to 2048
[   78.278083][T13746] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[   78.292804][T13749] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.305369][T13722] loop1: detected capacity change from 0 to 32768
[   78.306119][T13722] XFS: noikeep mount option is deprecated.
[   78.318205][T13746] process 'syz.4.2994' launched './file2' with NULL argv: empty string added
[   78.337226][T13746] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   78.346413][T13746] Remounting filesystem read-only
[   78.347514][T13746] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   78.349445][T13746] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   78.351187][T13746] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   78.353226][T13746] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   78.360072][T13746] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   78.361740][T13746] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   78.363442][T13746] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   78.429042][T13739] loop0: detected capacity change from 0 to 32768
[   78.471407][T13722] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.471968][T13739] overlayfs: conflicting options: userxattr,metacopy=on
[   78.509664][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3001'.
[   78.509916][T13722] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   78.513333][T13722] XFS (loop1): Starting recovery (logdev: internal)
[   78.552112][T13722] XFS (loop1): Ending recovery (logdev: internal)
[   78.553646][T13722] XFS (loop1): AG 0: Corrupt finobt pointer at level 1 index 0.
[   78.553719][T13722] XFS (loop1): Failed to initialize disk quotas, err -117.
[   78.584306][T13788] netlink: 'syz.0.3003': attribute type 10 has an invalid length.
[   78.599726][T13788] team0: Device veth1_macvtap failed to register rx_handler
[   78.607575][T13722] XFS (loop1): AG 0: Corrupt finobt pointer at level 1 index 0.
[   78.661305][T13802] loop4: detected capacity change from 0 to 64
[   78.667942][T13798] loop2: detected capacity change from 0 to 4096
[   78.700547][ T6550] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.700821][ T6550] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[   78.732966][T13812] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.804503][T13798] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   78.818341][T13798] Remounting filesystem read-only
[   78.887211][T13835] loop3: detected capacity change from 0 to 512
[   78.911838][T13843] xfrm1: entered allmulticast mode
[   78.927949][T13835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.084311][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.175701][T13889] random: crng reseeded on system resumption
[   79.228720][T13894] loop2: detected capacity change from 0 to 64
[   79.238242][T13895] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3047'.
[   79.322581][T13879] loop3: detected capacity change from 0 to 32768
[   79.322922][T13879] btrfs: Deprecated parameter 'usebackuproot'
[   79.322934][T13879] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   79.346747][T13879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3032 (13879)
[   79.360876][T13911] dummy0: entered promiscuous mode
[   79.368509][T13879] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   79.368570][T13879] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   79.373972][T13914] random: crng reseeded on system resumption
[   79.452859][T13938] netlink: 'syz.1.3062': attribute type 5 has an invalid length.
[   79.462538][T13879] BTRFS info (device loop3): rebuilding free space tree
[   79.480673][T13879] BTRFS info (device loop3): disabling free space tree
[   79.480720][T13879] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   79.480743][T13879] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   79.563097][T13942] loop2: detected capacity change from 0 to 32768
[   79.563527][T13942] XFS: attr2 mount option is deprecated.
[   79.576921][T13942] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   79.602476][T13942] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 
[   79.617401][T13942] XFS (loop2): Unmount and run xfs_repair
[   79.618429][T13942] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   79.618466][T13942] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 20 00  XAGF.......... .
[   79.618483][T13942] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01  ................
[   79.618493][T13942] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06  ................
[   79.618502][T13942] 00000030: 00 00 00 06 00 00 13 e3 00 00 13 e0 00 00 00 00  ................
[   79.618514][T13942] 00000040: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[   79.618525][T13942] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01  ................
[   79.618535][T13942] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.618545][T13942] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   79.618656][T13942] XFS (loop2): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74
[   79.618724][T13942] XFS (loop2): Error -117 reserving per-AG metadata reserve pool.
[   79.618860][T13942] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x204/0x248 (fs/xfs/xfs_fsops.c:566).  Shutting down filesystem.
[   79.618880][T13942] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   79.618895][T13942] XFS (loop2): Ending clean mount
[   79.619018][T13942] XFS (loop2): Failed to initialize disk quotas, err -5.
[   79.619069][T13942] XFS (loop2): Error -5 reserving per-AG metadata reserve pool.
[   79.642329][T13969] loop0: detected capacity change from 0 to 128
[   79.654950][ T6549] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   79.706806][T13969] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[   79.721522][T13981] syz.1.3077 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   79.811476][ T6556] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.902830][T14004] loop1: detected capacity change from 0 to 8
[   79.916274][T14005] netlink: 'syz.0.3088': attribute type 6 has an invalid length.
[   79.924526][T14004] SQUASHFS error: lzo decompression failed, data probably corrupt
[   79.928329][T14004] SQUASHFS error: Failed to read block 0x1c0: -5
[   79.928359][T14004] SQUASHFS error: Unable to read metadata cache entry [1be]
[   79.928389][T14004] SQUASHFS error: Unable to read metadata cache entry [1be]
[   79.928411][T14004] SQUASHFS error: Unable to read metadata cache entry [1be]
[   79.990159][T14012] binder: BC_ATTEMPT_ACQUIRE not supported
[   79.990192][T14012] binder: 14011:14012 ioctl c0306201 20000100 returned -22
[   80.058882][T14016] [U] ^@
[   80.087695][T14024] loop1: detected capacity change from 0 to 1024
[   80.120226][T14033] netlink: 'syz.0.3103': attribute type 21 has an invalid length.
[   80.121624][T14033] netlink: 'syz.0.3103': attribute type 5 has an invalid length.
[   80.189859][ T1997] hfsplus: b-tree write err: -5, ino 4
[   80.300039][T14061] netlink: zone id is out of range
[   80.322874][T14052] loop1: detected capacity change from 0 to 4096
[   80.346548][T14065] bridge5: entered promiscuous mode
[   80.516860][T14090] __nla_validate_parse: 3 callbacks suppressed
[   80.516902][T14090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3132'.
[   80.551912][T14046] loop3: detected capacity change from 0 to 32768
[   80.570700][T14102] netlink: 'syz.1.3136': attribute type 1 has an invalid length.
[   80.572222][T14102] netlink: 'syz.1.3136': attribute type 1 has an invalid length.
[   80.577024][T14046] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.662392][T14046] XFS (loop3): Ending clean mount
[   80.680494][T14046] XFS (loop3): Quotacheck needed: Please wait.
[   80.708114][T14046] XFS (loop3): Quotacheck: Done.
[   80.732370][T14126] loop1: detected capacity change from 0 to 512
[   80.782214][ T6549] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.790302][T14126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   80.811536][T14126] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[   80.811618][T14126] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   80.811664][T14126] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3145: Failed to acquire dquot type 0
[   80.855634][ T6550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   80.952006][T14115] loop2: detected capacity change from 0 to 32768
[   80.961958][T14152] loop1: detected capacity change from 0 to 1024
[   80.994266][T14159] loop4: detected capacity change from 0 to 256
[   80.995947][T14156] netlink: 'syz.0.3159': attribute type 1 has an invalid length.
[   81.012893][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.014477][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019014][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019050][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019078][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019093][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019152][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019162][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019180][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019190][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019207][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019217][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019234][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019243][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019276][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019284][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019297][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019304][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019317][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019324][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019336][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019342][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019363][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019370][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019382][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019389][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019401][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019408][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019420][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.019426][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.063281][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.063322][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.063378][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.063396][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.063424][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.063439][T14152] hfsplus: request for non-existent node 16777216 in B*Tree
[   81.067996][T14159] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[   81.098473][T14115] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   81.116921][T14115]   allowing incompatible features above 0.0: (unknown version)
[   81.116972][T14115]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   81.117004][T14115] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   81.117078][T14115] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[   81.117154][T14115] bcachefs (loop2): Version upgrade required:
[   81.117154][T14115] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   81.117154][T14115] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   81.117154][T14115]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   81.140012][T14115] bcachefs (loop2): dropping and reconstructing all alloc info
[   81.145693][T14115] bcachefs (loop2): accounting_read... done
[   81.166275][T14115] bcachefs (loop2): alloc_read... done
[   81.174157][T14115] bcachefs (loop2): snapshots_read... done
[   81.174475][T14115] bcachefs (loop2): check_allocations... done
[   81.222617][T14115] bcachefs (loop2): going read-write
[   81.232408][T14115] bcachefs (loop2): done starting filesystem
[   81.300632][T14205] loop4: detected capacity change from 0 to 1024
[   81.360753][T14205] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   81.360785][T14205] hfsplus: xattr searching failed
[   81.360839][T14205] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   81.360850][T14205] hfsplus: xattr searching failed
[   81.360878][T14205] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   81.360888][T14205] hfsplus: xattr searching failed
[   81.360922][T14205] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   81.360931][T14205] hfsplus: xattr searching failed
[   81.360983][T14205] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   81.364669][T14216] loop3: detected capacity change from 0 to 512
[   81.371514][ T6558] bcachefs (loop2): shutting down
[   81.371544][ T6558] bcachefs (loop2): going read-only
[   81.371569][ T6558] bcachefs (loop2): finished waiting for writes to stop
[   81.378410][T14216] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   81.379207][T14216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e11c, mo2=0002]
[   81.379238][T14216] System zones: 1-12
[   81.379321][T14216] EXT4-fs (loop3): orphan cleanup on readonly fs
[   81.379469][T14216] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3184: invalid indirect mapped block 12 (level 1)
[   81.382506][ T6558] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11
[   81.386529][T14216] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3184: invalid indirect mapped block 2 (level 2)
[   81.391936][T14216] EXT4-fs (loop3): 1 truncate cleaned up
[   81.392403][T14216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   81.433018][ T6558] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11
[   81.434422][ T6558] bcachefs (loop2): unclean shutdown complete, journal seq 12
[   81.437536][ T6558] bcachefs (loop2): done going read-only, filesystem not clean
[   81.440972][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   81.481360][ T6558] bcachefs (loop2): shutdown complete
[   81.501667][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3192'.
[   81.511492][T14231] loop1: detected capacity change from 0 to 256
[   81.536451][T14234] netlink: 'syz.4.3193': attribute type 9 has an invalid length.
[   81.622827][T14241] loop1: detected capacity change from 0 to 4096
[   81.626391][T14241] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   81.642257][T14245] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[   81.649189][T14241] ntfs3(loop1): ino=1a, mi_enum_attr
[   81.649223][T14241] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   81.689003][T14241] ntfs3(loop1): ino=1e, "file1" ntfs3_write_inode failed, -22.
[   81.726907][T14247] loop3: detected capacity change from 0 to 32768
[   81.868791][T14262] loop1: detected capacity change from 0 to 64
[   81.876459][T14262] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[   82.039371][T14270] loop1: detected capacity change from 0 to 256
[   82.204122][T14274] loop0: detected capacity change from 0 to 256
[   82.225807][T14274] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xb81e6d3a, utbl_chksum : 0xe619d30d)
[   82.251223][T14274] exFAT-fs (loop0): valid_size(150994954) is greater than size(0)
[   82.449163][T14288] loop0: detected capacity change from 0 to 256
[   82.587641][T14290] loop1: detected capacity change from 0 to 32768
[   82.637288][T14290] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   82.650378][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'.
[   82.665889][T14290] 
[   82.666319][T14290] ======================================================
[   82.667434][T14290] WARNING: possible circular locking dependency detected
[   82.668535][T14290] 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 Not tainted
[   82.669657][T14290] ------------------------------------------------------
[   82.670806][T14290] syz.1.3221/14290 is trying to acquire lock:
[   82.671745][T14290] ffff0000f69a6ab8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set_handle+0x2a8/0x5e4
[   82.673446][T14290] 
[   82.673446][T14290] but task is already holding lock:
[   82.674633][T14290] ffff0000d7148950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc
[   82.676125][T14290] 
[   82.676125][T14290] which lock already depends on the new lock.
[   82.676125][T14290] 
[   82.677897][T14290] 
[   82.677897][T14290] the existing dependency chain (in reverse order) is:
[   82.679330][T14290] 
[   82.679330][T14290] -> #6 (jbd2_handle){++++}-{0:0}:
[   82.680455][T14290]        start_this_handle+0xe74/0x10dc
[   82.681323][T14290]        jbd2__journal_start+0x288/0x51c
[   82.682177][T14290]        jbd2_journal_start+0x3c/0x4c
[   82.682950][T14290]        ocfs2_start_trans+0x368/0x6b0
[   82.683775][T14290]        ocfs2_modify_bh+0xe4/0x43c
[   82.684593][T14290]        ocfs2_local_read_info+0x104c/0x1364
[   82.685517][T14290]        dquot_load_quota_sb+0x6bc/0xa90
[   82.686427][T14290]        dquot_load_quota_inode+0x274/0x4e4
[   82.687286][T14290]        ocfs2_enable_quotas+0x17c/0x3b4
[   82.688184][T14290]        ocfs2_fill_super+0x4004/0x532c
** replaying previous printk message **
[   82.688842][T14300] netlink: 'syz.4.3225': attribute type 4 has an invalid length.
[   82.690576][T14300] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3225'.
[   82.690570][T14290]        get_tree_bdev_flags+0x360/0x414
[   82.692703][T14290]        get_tree_bdev+0x2c/0x3c
[   82.693416][T14290]        ocfs2_get_tree+0x28/0x38
[   82.694133][T14290]        vfs_get_tree+0x90/0x28c
[   82.694813][T14290]        do_new_mount+0x278/0x7f4
[   82.695529][T14290]        path_mount+0x5b4/0xde0
[   82.696199][T14290]        __arm64_sys_mount+0x3e8/0x468
[   82.696937][T14290]        invoke_syscall+0x98/0x2b8
[   82.697716][T14290]        el0_svc_common+0x130/0x23c
[   82.698532][T14290]        do_el0_svc+0x48/0x58
[   82.699260][T14290]        el0_svc+0x58/0x180
[   82.699955][T14290]        el0t_64_sync_handler+0x84/0x12c
[   82.700842][T14290]        el0t_64_sync+0x198/0x19c
[   82.701671][T14290] 
[   82.701671][T14290] -> #5 (&journal->j_trans_barrier){.+.+}-{4:4}:
[   82.703021][T14290]        down_read+0x58/0x2f8
[   82.703722][T14290]        ocfs2_start_trans+0x35c/0x6b0
[   82.704552][T14290]        ocfs2_modify_bh+0xe4/0x43c
[   82.705334][T14290]        ocfs2_local_read_info+0x104c/0x1364
[   82.706286][T14290]        dquot_load_quota_sb+0x6bc/0xa90
[   82.707139][T14290]        dquot_load_quota_inode+0x274/0x4e4
[   82.708165][T14290]        ocfs2_enable_quotas+0x17c/0x3b4
[   82.709092][T14290]        ocfs2_fill_super+0x4004/0x532c
[   82.710013][T14290]        get_tree_bdev_flags+0x360/0x414
[   82.710860][T14290]        get_tree_bdev+0x2c/0x3c
[   82.711533][T14290]        ocfs2_get_tree+0x28/0x38
[   82.712279][T14290]        vfs_get_tree+0x90/0x28c
[   82.712973][T14290]        do_new_mount+0x278/0x7f4
[   82.713692][T14290]        path_mount+0x5b4/0xde0
[   82.714405][T14290]        __arm64_sys_mount+0x3e8/0x468
[   82.715188][T14290]        invoke_syscall+0x98/0x2b8
[   82.715867][T14290]        el0_svc_common+0x130/0x23c
[   82.716559][T14290]        do_el0_svc+0x48/0x58
[   82.717181][T14290]        el0_svc+0x58/0x180
[   82.717839][T14290]        el0t_64_sync_handler+0x84/0x12c
[   82.718651][T14290]        el0t_64_sync+0x198/0x19c
[   82.719383][T14290] 
[   82.719383][T14290] -> #4 (sb_internal#2){.+.+}-{0:0}:
[   82.720543][T14290]        ocfs2_start_trans+0x1f4/0x6b0
[   82.721278][T14290]        ocfs2_mknod+0xc50/0x1cf0
[   82.721999][T14290]        ocfs2_create+0x190/0x474
[   82.722739][T14290]        path_openat+0x12d8/0x2c40
[   82.723512][T14290]        do_filp_open+0x18c/0x36c
[   82.724186][T14290]        do_sys_openat2+0x11c/0x1b4
[   82.724898][T14290]        __arm64_sys_openat+0x120/0x158
[   82.725729][T14290]        invoke_syscall+0x98/0x2b8
[   82.726505][T14290]        el0_svc_common+0x130/0x23c
[   82.727298][T14290]        do_el0_svc+0x48/0x58
[   82.727989][T14290]        el0_svc+0x58/0x180
[   82.728676][T14290]        el0t_64_sync_handler+0x84/0x12c
[   82.729547][T14290]        el0t_64_sync+0x198/0x19c
[   82.730334][T14290] 
[   82.730334][T14290] -> #3 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[   82.731920][T14290]        down_write+0x50/0xc0
[   82.732616][T14290]        ocfs2_reserve_local_alloc_bits+0x104/0x26a0
[   82.733542][T14290]        ocfs2_reserve_clusters_with_limit+0x198/0x9e0
[   82.734535][T14290]        ocfs2_reserve_clusters+0x3c/0x50
[   82.735338][T14290]        ocfs2_mknod+0xc00/0x1cf0
[   82.736068][T14290]        ocfs2_create+0x190/0x474
[   82.736766][T14290]        path_openat+0x12d8/0x2c40
[   82.737467][T14290]        do_filp_open+0x18c/0x36c
[   82.738277][T14290]        do_sys_openat2+0x11c/0x1b4
[   82.739027][T14290]        __arm64_sys_openat+0x120/0x158
[   82.739920][T14290]        invoke_syscall+0x98/0x2b8
[   82.740685][T14290]        el0_svc_common+0x130/0x23c
[   82.741472][T14290]        do_el0_svc+0x48/0x58
[   82.742204][T14290]        el0_svc+0x58/0x180
[   82.742918][T14290]        el0t_64_sync_handler+0x84/0x12c
[   82.743880][T14290]        el0t_64_sync+0x198/0x19c
[   82.744715][T14290] 
[   82.744715][T14290] -> #2 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[   82.746508][T14290]        down_write+0x50/0xc0
[   82.747321][T14290]        ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[   82.748302][T14290]        ocfs2_reserve_new_metadata_blocks+0x368/0x810
[   82.749393][T14290]        ocfs2_extend_dir+0x970/0x3964
[   82.750224][T14290]        ocfs2_prepare_dir_for_insert+0x281c/0x4664
[   82.751228][T14290]        ocfs2_mknod+0x6ec/0x1cf0
[   82.752047][T14290]        ocfs2_mkdir+0x190/0x474
[   82.752804][T14290]        vfs_mkdir+0x284/0x424
[   82.753516][T14290]        do_mkdirat+0x1f8/0x4c8
[   82.754303][T14290]        __arm64_sys_mkdirat+0x8c/0xa4
[   82.755201][T14290]        invoke_syscall+0x98/0x2b8
[   82.755986][T14290]        el0_svc_common+0x130/0x23c
[   82.756829][T14290]        do_el0_svc+0x48/0x58
[   82.757606][T14290]        el0_svc+0x58/0x180
[   82.758272][T14290]        el0t_64_sync_handler+0x84/0x12c
[   82.759141][T14290]        el0t_64_sync+0x198/0x19c
[   82.759872][T14290] 
[   82.759872][T14290] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[   82.761136][T14290]        down_write+0x50/0xc0
[   82.761804][T14290]        ocfs2_try_remove_refcount_tree+0xb4/0x2d8
[   82.762814][T14290]        ocfs2_xattr_set+0x460/0xe9c
[   82.763617][T14290]        ocfs2_set_acl+0x574/0x628
[   82.764343][T14290]        ocfs2_iop_set_acl+0x190/0x25c
[   82.765124][T14290]        vfs_set_acl+0x70c/0x974
[   82.765839][T14290]        do_set_acl+0xc8/0x1a8
[   82.766510][T14290]        filename_setxattr+0x268/0x4f8
[   82.767352][T14290]        path_setxattrat+0x2e8/0x320
[   82.768166][T14290]        __arm64_sys_setxattr+0xc0/0xdc
[   82.769018][T14290]        invoke_syscall+0x98/0x2b8
[   82.769826][T14290]        el0_svc_common+0x130/0x23c
[   82.770617][T14290]        do_el0_svc+0x48/0x58
[   82.771304][T14290]        el0_svc+0x58/0x180
[   82.772003][T14290]        el0t_64_sync_handler+0x84/0x12c
[   82.772813][T14290]        el0t_64_sync+0x198/0x19c
[   82.773527][T14290] 
[   82.773527][T14290] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[   82.774663][T14290]        __lock_acquire+0x1774/0x30a4
[   82.775459][T14290]        lock_acquire+0x14c/0x2e0
[   82.776226][T14290]        down_write+0x50/0xc0
[   82.776851][T14290]        ocfs2_xattr_set_handle+0x2a8/0x5e4
[   82.777680][T14290]        ocfs2_init_security_set+0xb4/0xd8
[   82.778524][T14290]        ocfs2_mknod+0x106c/0x1cf0
[   82.779399][T14290]        ocfs2_mkdir+0x190/0x474
[   82.780164][T14290]        vfs_mkdir+0x284/0x424
[   82.780908][T14290]        do_mkdirat+0x1f8/0x4c8
[   82.781626][T14290]        __arm64_sys_mkdirat+0x8c/0xa4
[   82.782538][T14290]        invoke_syscall+0x98/0x2b8
[   82.783349][T14290]        el0_svc_common+0x130/0x23c
[   82.784167][T14290]        do_el0_svc+0x48/0x58
[   82.784915][T14290]        el0_svc+0x58/0x180
[   82.785650][T14290]        el0t_64_sync_handler+0x84/0x12c
[   82.786467][T14290]        el0t_64_sync+0x198/0x19c
[   82.787243][T14290] 
[   82.787243][T14290] other info that might help us debug this:
[   82.787243][T14290] 
[   82.788739][T14290] Chain exists of:
[   82.788739][T14290]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[   82.788739][T14290] 
[   82.790757][T14290]  Possible unsafe locking scenario:
[   82.790757][T14290] 
[   82.791938][T14290]        CPU0                    CPU1
[   82.792735][T14290]        ----                    ----
[   82.793521][T14290]   rlock(jbd2_handle);
[   82.794121][T14290]                                lock(&journal->j_trans_barrier);
[   82.795219][T14290]                                lock(jbd2_handle);
[   82.796224][T14290]   lock(&oi->ip_xattr_sem);
[   82.796916][T14290] 
[   82.796916][T14290]  *** DEADLOCK ***
[   82.796916][T14290] 
[   82.798019][T14290] 8 locks held by syz.1.3221/14290:
[   82.798733][T14290]  #0: ffff0000d1346428 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[   82.800060][T14290]  #1: ffff0000f6a72640 (&type->i_mutex_dir_key#10/1){+.+.}-{4:4}, at: filename_create+0x1ac/0x32c
[   82.801591][T14290]  #2: ffff0000f69a1800 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[   82.803576][T14290]  #3: ffff0000f6a76d80 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[   82.805523][T14290]  #4: ffff0000f69a5f40 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x104/0x26a0
[   82.807770][T14290]  #5: ffff0000d1346618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xc50/0x1cf0
[   82.809164][T14290]  #6: ffff0000f73b44e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0
[   82.810779][T14290]  #7: ffff0000d7148950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc
[   82.812221][T14290] 
[   82.812221][T14290] stack backtrace:
[   82.813035][T14290] CPU: 1 UID: 0 PID: 14290 Comm: syz.1.3221 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
[   82.814582][T14290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025
[   82.815958][T14290] Call trace:
[   82.816454][T14290]  show_stack+0x2c/0x3c (C)
[   82.817084][T14290]  __dump_stack+0x30/0x40
[   82.817720][T14290]  dump_stack_lvl+0xd8/0x12c
[   82.818366][T14290]  dump_stack+0x1c/0x28
[   82.819014][T14290]  print_circular_bug+0x324/0x32c
[   82.819706][T14290]  check_noncircular+0x154/0x174
[   82.820399][T14290]  __lock_acquire+0x1774/0x30a4
[   82.821063][T14290]  lock_acquire+0x14c/0x2e0
[   82.821731][T14290]  down_write+0x50/0xc0
[   82.822342][T14290]  ocfs2_xattr_set_handle+0x2a8/0x5e4
[   82.823115][T14290]  ocfs2_init_security_set+0xb4/0xd8
[   82.823939][T14290]  ocfs2_mknod+0x106c/0x1cf0
[   82.824726][T14290]  ocfs2_mkdir+0x190/0x474
[   82.825421][T14290]  vfs_mkdir+0x284/0x424
[   82.826065][T14290]  do_mkdirat+0x1f8/0x4c8
[   82.826761][T14290]  __arm64_sys_mkdirat+0x8c/0xa4
[   82.827477][T14290]  invoke_syscall+0x98/0x2b8
[   82.828195][T14290]  el0_svc_common+0x130/0x23c
[   82.828996][T14290]  do_el0_svc+0x48/0x58
[   82.829635][T14290]  el0_svc+0x58/0x180
[   82.830242][T14290]  el0t_64_sync_handler+0x84/0x12c
[   82.831031][T14290]  el0t_64_sync+0x198/0x19c
[   82.831776][    C1] vkms_vblank_simulate: vblank timer overrun
[   82.849937][ T6550] ocfs2: Unmounting device (7,1) on (node local)
[   82.911629][T14247] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[   82.913336][T14247]   allowing incompatible features above 0.0: (unknown version)
[   82.913352][T14247]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   82.913374][T14247] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   82.913423][T14247] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[   82.913479][T14247] bcachefs (loop3): Version upgrade required:
[   82.913479][T14247] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   82.913479][T14247] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   82.913479][T14247]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   82.913575][T14247] bcachefs (loop3): dropping and reconstructing all alloc info
[   82.917262][T14247] bcachefs (loop3): accounting_read... done
[   82.946422][T14247] bcachefs (loop3): alloc_read... done
[   82.946493][T14247] bcachefs (loop3): snapshots_read... done
[   82.946699][T14247] bcachefs (loop3): done starting filesystem
[   82.980585][ T6549] bcachefs (loop3): shutting down
[   82.985819][ T6549] bcachefs (loop3): shutdown complete
[   87.524823][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!