last executing test programs:

13.523993742s ago: executing program 4 (id=730):
unshare(0x2c020400)
r0 = socket(0x22, 0x803, 0x0)
bind$xdp(r0, 0x0, 0x0)

13.455883161s ago: executing program 4 (id=732):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_setup(0x800, &(0x7f0000002180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000003200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x10004}])

13.20628152s ago: executing program 4 (id=735):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340), 0x7, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x80}}, 0x0)

13.04995403s ago: executing program 4 (id=739):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c9, &(0x7f0000001ac0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)

12.792222678s ago: executing program 4 (id=743):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000001c00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x101)
ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000440)={0x0, 0xfffffffffffffffc})

12.64978594s ago: executing program 0 (id=747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x34, r1, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0)

12.473639469s ago: executing program 0 (id=761):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000))

12.417543354s ago: executing program 0 (id=752):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, r1})

12.346451573s ago: executing program 0 (id=753):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6c9, &(0x7f0000001ac0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)

12.214331623s ago: executing program 0 (id=756):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10)

12.100324309s ago: executing program 4 (id=758):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x40, 0x4f00, 0x400, 0x6, 0x9, 0x7fff, 0xa1]}}]}]}]}]}]}, 0x38}}, 0x0)

12.013293517s ago: executing program 32 (id=758):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x40, 0x4f00, 0x400, 0x6, 0x9, 0x7fff, 0xa1]}}]}]}]}]}]}, 0x38}}, 0x0)

11.674250435s ago: executing program 0 (id=760):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000006800010000000000000000000a00000000000000060007000300000008000500", @ANYRES32=r1, @ANYBLOB="0800088006"], 0x30}}, 0x0)

11.497456584s ago: executing program 33 (id=760):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000006800010000000000000000000a00000000000000060007000300000008000500", @ANYRES32=r1, @ANYBLOB="0800088006"], 0x30}}, 0x0)

1.881373258s ago: executing program 1 (id=835):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000002140)=@known='system.posix_acl_default\x00', 0x0, 0x0)

1.723441167s ago: executing program 2 (id=837):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000080)={@local, @loopback, 0x0, "3744000000001ac700000000aea380c74c081fdf00", 0x80, 0x0, 0x7, 0xf04}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, 0x0, 0x0)

1.652566551s ago: executing program 2 (id=838):
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0)
r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd})
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0x40ebb9, 0x8, 0x3, 0xd5}, 0x1)

1.574785685s ago: executing program 2 (id=839):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14080, &(0x7f0000007540)=ANY=[@ANYBLOB="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"/702, @ANYRESHEX, @ANYRES32], 0x43, 0x5552, &(0x7f0000000580)="$eJzs3M2LG2UYAPBndrv9ti7iwVsHirALTWi2H+itaosf2FKqHjxpNklD2iSzbNLsuiB48Cge/E9EwZNH/wYPnr2JB8WbUMnMRLtqQdl8tN3fD5Jn3jdvnnnesASemSUBHFqr6W+/JHEmTkTEckScjhgfP0giIpksulqEFyLibEQsPfRIyvk/J45GxMmIODNOXuRMype+OD86d/nnt3799vtjR059+c0Pi9s1sGgvRkRvqzje6RUxaxfxbjlfH3Xy2Ls0KmPxQu9eOc6KuNPazDPs1Cfr6nm82C7WZ1v3B+N4p1tvjGO7cyef3+oXJxyM2pM8+Rvu1rfzcbO1mcfOIMtje6+oa3ev+G7bGwyLPM0y30d5+hgOJ7GYb+22iv1s3ctjoz8s54u8WbO1O46jMk6+extZt5nXsXmAD/ox93anf383HbW2B52sn16u1l6q1q5UattZszVsXarUe80rl9K1dne8rDJs1XtX21nW7raqjay3nq61G41KrZauXWttdur9tFarXqxeqFxeL4/Op6/ffC/tNtO1cXy1078/7HQH6Z1sOy3esZ5uVC++vJ6eq6Xv3LiV3rp9/fqNW+9+cO39m6/cePO1ctE/ykrXNi5sbFRqFyobtfVDtP9Py6KnuH84kGTRBQA8eR7R/4f+H5il2fX/27cjZt//xwz7//J0+v/Hrf897P3/DPYPB/J/+/+PZ1QHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABz9+PKV2/kB6vF+FQ5/0w59Vw5TiJiKSIe/IvlOLov53KZZ+UR61f+VsN3SeQZxuc4Vj5ORsTV8vH7s7P+FAAAAODp9fUnZz8vuvXiaXXRBTFPxUWbpdMfTilfEhErqz9NKdvS+On5KSXL/76PxO6UsuUXsI5PKVlxye3ItLL9J8v7wvGHQlKEpbmWAwAAzMX+TmC+XQgAAADz9NmiC2AxkpjcypzcC87/8/6vG4In9o0AAACAJ1Cy6AIAAACAmcv7f7//BwAAAE+34vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiDnfvJVSKG4wD+m3mv7z38E4lx71XcwSmMR3Dp0nAAL8HK9XgFL8AZMG68gYYxzBQCRlBDB4L5fJKhdBi+tIQFbaEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEP6kprpp/cvP5yas2rbu4ho/2B06JoyvQEAAAB+Z5maaXdn3Ncf5/NP86nnuV5FRH1g8H4TdzuJD9ucdOD6dLPfhs8RXcL6Ne7z8SgiXuXjx7PB3wYAAAD4by1m80lENxjvbsaXbhDn1E/a1E/eFMqrIiKNvxVKq9d5LwqFdZ/v23hXKC3Fdp6rgG7K7bZU2l/pJ+A2s3YPO0XVF/Xx5xfrOwAAcEZ5KT5/3//HUch3P9sHAAC4Hm8v3QAG8vr4w1VsljK3S4H3fZGX90Z7NQAAAOAKVZduAAAAADC4bvy/TM3Hr1Fy/7/+PwVH9//7pSH2/wMAAIDh9Pv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKRlaqaL2Xxyas6qPU2Z3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxkf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB487u//J+YGmeSudfG0vNIsnZqbJ0ae+fG0R/G168BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7od7/8n5gaZ5K508bS8UiydtXYumrsPWgcPRhv/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIude/eNowgDAD67e3vBAYQxyIUpQKKAhjiXkJAOKEAWBX8CkuVcgsmFR+KCRBHIDR24ToNCiRASyHSpaVMnUhrTpXARJCQ6o9mHvSY+cTyye8S/nzQ33672dr7Zi2J/O3sGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAattv7sVZfJkt47Tad/v+tZXY3/lTH93cuLsQW4yTNpP+f5hpbiTz3SUCAADA4ZBUtX1WbW/lm0uxT2eL+j+vj4s1/40n994TDqj7676u/WP76cd7z+4ONluOE096bnU0PP5gOr2HN9Pp9tRfHtErrnxx7yUrPpD0nfVntvPieiZf3rr1Vr8Ij7SRLQAw1s74H8bHym7rRhXUvw/FftBSegAcbr1G4V3X/9lstzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtGF7PTxex0kIYaG3F0d37l9bOai/uXF3oW6nr1/faJ4zniIPIZxbHQ2PtziXaXf5ytULy6PR8FL7wfMhhK5Gf72a/oX3Jjg4hMnO/PtOqYuLKRgfpNWHPS35lMHP//ztO/W/3oeU4RshhFFH/yEBAPDIyqsW6/qtfHMp7kvmQtj5Zn/9/1IjDhPW//feP327OPirdN94sf4ftDfFqbe4dvHjxctXrr6yenH5/PD88MNXTwxeG5w8c+rUmcXiXsmiOyYAAAD8O/2qNev/dO7B9f+jjThMWP9/8vXgs+ZYmfr/QHuLfl1nAgAAcLg9/cJvvyYH7E/6/fDp8trapUH5urt9onztINW/7UjVmvV/Ntd1VgAAAEAbtteTfev/ZxtxmHD9/4lvn/u+ec4shDBTrf8fW/lodLa96Uy1//LLw5+P+Z5813MEAACgWzNVa67/58Xz/+nuIw9pCOHlF8u4+jOAE9X/2dtffNccq/n8/8n2pjiV0vnyehT9fAi9+a4zAgAA4FH2WNVisf9Lvrn0wQ9H3+17/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgbX8EAAD//42hPg0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000005b00)={0x0, 0x6, 0x0, 0x1000})

964.599264ms ago: executing program 1 (id=843):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
syz_emit_ethernet(0x66, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000303a00fe8000000000000000000000000000ffffff"], 0x0)

950.451993ms ago: executing program 2 (id=844):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000080)=0x7, 0x4)

706.773034ms ago: executing program 3 (id=846):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x8)

678.672581ms ago: executing program 1 (id=847):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

634.593744ms ago: executing program 3 (id=848):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

577.004458ms ago: executing program 1 (id=849):
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0)

568.732864ms ago: executing program 2 (id=850):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x800806, &(0x7f00000024c0)={[{@codepage={'codepage', 0x3d, 'cp861'}}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@gid}]}, 0x24, 0x313, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

473.237565ms ago: executing program 1 (id=851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0)

472.093577ms ago: executing program 2 (id=852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20044010)

454.9264ms ago: executing program 3 (id=853):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000029c0), r0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25030000000800010000000077"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)

371.923337ms ago: executing program 3 (id=854):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000001240)=0x6, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000001080))

277.183336ms ago: executing program 1 (id=855):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8108c4, &(0x7f0000000080)={[{@resv_level={'resv_level', 0x3d, 0x400}}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0xe}}, {@coherency_full}, {@err_ro}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@intr}, {@localalloc}]}, 0x1, 0x442f, &(0x7f000000e480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00')

213.105522ms ago: executing program 3 (id=856):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

0s ago: executing program 3 (id=857):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a)

kernel console output (not intermixed with test programs):

 of inode 1920
[   59.368641][  T290] hfsplus: b-tree write err: -5, ino 4
[   59.550593][ T6517] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   59.550734][ T6517] Bluetooth: hci3: Injecting HCI hardware error event
[   59.551743][ T6517] Bluetooth: hci3: hardware error 0x00
[   59.571923][ T7619] loop3: detected capacity change from 0 to 4096
[   59.590954][ T7619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.910483][ T7608] loop4: detected capacity change from 0 to 32768
[   60.000218][ T6514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.918993][ T7635] loop2: detected capacity change from 0 to 262144
[   60.951567][ T7635] F2FS-fs (loop2): invalid crc value
[   60.964768][ T7635] F2FS-fs (loop2): Mismatch valid blocks 4 vs. 9
[   60.968107][ T7635] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[   61.078406][ T7608] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   61.084264][ T7608]   allowing incompatible features above 0.0: (unknown version)
[   61.084306][ T7608]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   61.084376][ T7608] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   61.084480][ T7608] bcachefs (loop4): recovering from clean shutdown, journal seq 7
[   61.084554][ T7608] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   61.084554][ T7608]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   61.218553][ T7608] bcachefs (loop4): accounting_read... done
[   61.256475][ T7608] bcachefs (loop4): alloc_read... done
[   61.258686][ T7608] bcachefs (loop4): snapshots_read... done
[   61.259574][ T7608] bcachefs (loop4): check_allocations...
[   61.260608][ T7608] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   61.260623][ T7608]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[   61.264540][ T7608] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   61.264556][ T7608]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   61.266081][ T7608] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   61.266097][ T7608]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   61.267063][ T7608] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   61.267078][ T7608]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   61.267887][ T7608] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   61.267902][ T7608]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   61.278925][ T7608] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   61.278943][ T7608]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   61.308385][ T7608]  done
[   61.311564][ T7608] bcachefs (loop4): going read-write
[   61.347896][ T7608] bcachefs (loop4): journal_replay...
[   61.349453][ T7685] netlink: 'syz.1.330': attribute type 1 has an invalid length.
[   61.349525][ T7685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.330'.
[   61.349556][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'.
[   61.427179][ T7608]  done
[   61.432754][ T7608] bcachefs (loop4): check_extents_to_backpointers...
[   61.433831][ T7608] bcachefs (loop4): scanning for missing backpointers in 6/128 buckets
[   61.435060][ T7608]  done
[   61.455450][ T7608] bcachefs (loop4): check_inodes... done
[   61.456491][ T7608] bcachefs (loop4): resume_logged_ops... done
[   61.462120][ T7608] bcachefs (loop4): delete_dead_inodes... done
[   61.476462][ T7608] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[   61.476516][ T7608] bcachefs (loop4): check_extents_to_backpointers... done
[   61.480234][ T7608] bcachefs (loop4): check_inodes... done
[   61.482844][ T7608] bcachefs (loop4): resume_logged_ops... done
[   61.483446][ T7608] bcachefs (loop4): delete_dead_inodes... done
[   61.485474][ T7608] bcachefs (loop4): done starting filesystem
[   61.496059][ T7692] loop1: detected capacity change from 0 to 256
[   61.526258][ T7692] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[   61.553576][ T7694] capability: warning: `syz.0.368' uses deprecated v2 capabilities in a way that may be insecure
[   61.680620][ T6513] bcachefs (loop4): shutting down
[   61.680685][ T6513] bcachefs (loop4): going read-only
[   61.680716][ T6513] bcachefs (loop4): finished waiting for writes to stop
[   61.704494][ T6513] bcachefs (loop4): flushing journal and stopping allocators, journal seq 15
[   61.704974][ T6513] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15
[   61.777083][ T6513] bcachefs (loop4): clean shutdown complete, journal seq 16
[   61.778013][ T6513] bcachefs (loop4): marking filesystem clean
[   61.783554][ T6517] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   61.885058][ T6513] bcachefs (loop4): shutdown complete
[   62.038377][ T7678] loop3: detected capacity change from 0 to 32768
[   62.067585][ T7678] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[   62.084603][ T7678] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   62.120030][ T7678] XFS (loop3): Ending clean mount
[   62.127887][ T7678] XFS (loop3): Quotacheck needed: Please wait.
[   62.166682][ T7678] XFS (loop3): Quotacheck: Done.
[   62.167383][ T7727] loop2: detected capacity change from 0 to 16
[   62.176751][ T7727] erofs (device loop2): mounted with root inode @ nid 36.
[   62.209216][ T6514] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   62.212987][ T7727] erofs (device loop2): readahead error at folio 86 @ nid 36
[   62.216817][ T7727] erofs (device loop2): readahead error at folio 84 @ nid 36
[   62.219126][ T7727] erofs (device loop2): readahead error at folio 80 @ nid 36
[   62.221263][ T7727] erofs (device loop2): readahead error at folio 74 @ nid 36
[   62.223568][ T7727] erofs (device loop2): readahead error at folio 72 @ nid 36
[   62.226456][ T7727] erofs (device loop2): readahead error at folio 70 @ nid 36
[   62.228603][ T7727] erofs (device loop2): bogus lookback distance 1388 @ lcn 62 of nid 36
[   62.245300][ T7727] erofs (device loop2): readahead error at folio 63 @ nid 36
[   62.245373][ T7727] erofs (device loop2): bogus lookback distance 1388 @ lcn 62 of nid 36
[   62.245398][ T7727] erofs (device loop2): readahead error at folio 62 @ nid 36
[   62.245512][ T7727] erofs (device loop2): readahead error at folio 58 @ nid 36
[   62.245536][ T7727] erofs (device loop2): readahead error at folio 57 @ nid 36
[   62.245606][ T7727] erofs (device loop2): readahead error at folio 54 @ nid 36
[   62.245630][ T7727] erofs (device loop2): readahead error at folio 53 @ nid 36
[   62.245654][ T7727] erofs (device loop2): readahead error at folio 52 @ nid 36
[   62.245677][ T7727] erofs (device loop2): readahead error at folio 51 @ nid 36
[   62.245700][ T7727] erofs (device loop2): bogus lookback distance 363 @ lcn 50 of nid 36
[   62.245724][ T7727] erofs (device loop2): readahead error at folio 50 @ nid 36
[   62.245779][ T7727] erofs (device loop2): readahead error at folio 47 @ nid 36
[   62.245803][ T7727] erofs (device loop2): readahead error at folio 46 @ nid 36
[   62.245909][ T7727] erofs (device loop2): readahead error at folio 40 @ nid 36
[   62.245935][ T7727] erofs (device loop2): readahead error at folio 39 @ nid 36
[   62.245980][ T7727] erofs (device loop2): readahead error at folio 38 @ nid 36
[   62.246036][ T7727] erofs (device loop2): readahead error at folio 34 @ nid 36
[   62.246096][ T7727] erofs (device loop2): readahead error at folio 32 @ nid 36
[   62.246162][ T7727] erofs (device loop2): readahead error at folio 30 @ nid 36
[   62.246251][ T7727] erofs (device loop2): readahead error at folio 27 @ nid 36
[   62.246276][ T7727] erofs (device loop2): readahead error at folio 26 @ nid 36
[   62.246299][ T7727] erofs (device loop2): readahead error at folio 25 @ nid 36
[   62.246370][ T7727] erofs (device loop2): readahead error at folio 24 @ nid 36
[   62.246395][ T7727] erofs (device loop2): readahead error at folio 23 @ nid 36
[   62.246418][ T7727] erofs (device loop2): readahead error at folio 22 @ nid 36
[   62.246463][ T7727] erofs (device loop2): readahead error at folio 21 @ nid 36
[   62.246487][ T7727] erofs (device loop2): readahead error at folio 20 @ nid 36
[   62.246527][ T7727] erofs (device loop2): readahead error at folio 18 @ nid 36
[   62.246650][ T7727] erofs (device loop2): readahead error at folio 12 @ nid 36
[   62.246691][ T7727] erofs (device loop2): readahead error at folio 10 @ nid 36
[   62.247045][ T7727] erofs (device loop2): readahead error at folio 6 @ nid 36
[   62.247092][ T7727] erofs (device loop2): readahead error at folio 4 @ nid 36
[   62.247175][ T7727] erofs (device loop2): invalid logical cluster 0 at nid 36
[   62.247197][ T7727] erofs (device loop2): readahead error at folio 0 @ nid 36
[   62.247298][ T7727] syz.2.381: attempt to access beyond end of device
[   62.247298][ T7727] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[   62.247392][ T7727] syz.2.381: attempt to access beyond end of device
[   62.247392][ T7727] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16
[   62.247503][ T7727] syz.2.381: attempt to access beyond end of device
[   62.247503][ T7727] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16
[   62.247581][ T7727] syz.2.381: attempt to access beyond end of device
[   62.247581][ T7727] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16
[   62.247692][ T7727] syz.2.381: attempt to access beyond end of device
[   62.247692][ T7727] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16
[   62.247778][ T7727] syz.2.381: attempt to access beyond end of device
[   62.247778][ T7727] loop2: rw=524288, sector=13478624032, nr_sectors = 8 limit=16
[   62.247874][ T7727] syz.2.381: attempt to access beyond end of device
[   62.247874][ T7727] loop2: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[   62.247963][ T7727] syz.2.381: attempt to access beyond end of device
[   62.247963][ T7727] loop2: rw=524288, sector=133693448, nr_sectors = 8 limit=16
[   62.248050][ T7727] syz.2.381: attempt to access beyond end of device
[   62.248050][ T7727] loop2: rw=524288, sector=790384, nr_sectors = 16 limit=16
[   62.248130][ T7727] syz.2.381: attempt to access beyond end of device
[   62.248130][ T7727] loop2: rw=524288, sector=72, nr_sectors = 16 limit=16
[   62.588489][ T7742] loop0: detected capacity change from 0 to 1024
[   62.590430][ T7741] loop3: detected capacity change from 0 to 256
[   62.601370][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'.
[   62.607663][ T7741] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[   62.627191][ T7737] veth3: entered promiscuous mode
[   62.794871][ T2162] hfsplus: b-tree write err: -5, ino 4
[   63.200025][ T7768] dvmrp8: entered allmulticast mode
[   63.264146][ T7767] dvmrp8: left allmulticast mode
[   63.391014][ T7746] loop2: detected capacity change from 0 to 65536
[   63.418097][ T7746] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   63.440021][ T7746] XFS (loop2): Ending clean mount
[   63.441853][ T7746] XFS (loop2): Quotacheck needed: Please wait.
[   63.448447][ T1993] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 
[   63.448581][ T1993] XFS (loop2): Unmount and run xfs_repair
[   63.448603][ T1993] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   63.448626][ T1993] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   63.448647][ T1993] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   63.448669][ T1993] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   63.448690][ T1993] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   63.448710][ T1993] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   63.448731][ T1993] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   63.448752][ T1993] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.448772][ T1993] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.448881][ T1993] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74
[   63.451307][ T7746] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   63.546695][ T7746] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 
[   63.546841][ T7746] XFS (loop2): Unmount and run xfs_repair
[   63.546864][ T7746] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   63.546888][ T7746] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   63.546910][ T7746] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   63.546932][ T7746] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   63.546953][ T7746] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   63.546974][ T7746] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   63.546996][ T7746] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   63.547017][ T7746] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.547038][ T7746] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.547062][ T7746] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74
[   63.577889][ T7746] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c8/0x964 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[   63.577943][ T7746] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   63.637050][ T7793] loop0: detected capacity change from 0 to 16
[   63.640885][ T7793] erofs (device loop0): mounted with root inode @ nid 36.
[   63.645215][ T6519] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   63.658878][ T7793] erofs (device loop0): readahead error at folio 86 @ nid 36
[   63.667697][ T7793] erofs (device loop0): readahead error at folio 84 @ nid 36
[   63.670112][ T7793] erofs (device loop0): readahead error at folio 80 @ nid 36
[   63.672592][ T7793] erofs (device loop0): readahead error at folio 74 @ nid 36
[   63.675532][ T7793] erofs (device loop0): readahead error at folio 72 @ nid 36
[   63.677971][ T7793] erofs (device loop0): readahead error at folio 70 @ nid 36
[   63.680244][ T7793] erofs (device loop0): bogus lookback distance 1388 @ lcn 62 of nid 36
[   63.682717][ T7793] erofs (device loop0): readahead error at folio 63 @ nid 36
[   63.685277][ T7793] erofs (device loop0): bogus lookback distance 1388 @ lcn 62 of nid 36
[   63.689984][ T7793] erofs (device loop0): readahead error at folio 62 @ nid 36
[   63.692352][ T7793] erofs (device loop0): readahead error at folio 58 @ nid 36
[   63.698450][ T7793] erofs (device loop0): readahead error at folio 57 @ nid 36
[   63.700758][ T7793] erofs (device loop0): readahead error at folio 54 @ nid 36
[   63.703029][ T7793] erofs (device loop0): readahead error at folio 53 @ nid 36
[   63.703081][ T7793] erofs (device loop0): readahead error at folio 52 @ nid 36
[   63.703111][ T7793] erofs (device loop0): readahead error at folio 51 @ nid 36
[   63.703141][ T7793] erofs (device loop0): bogus lookback distance 363 @ lcn 50 of nid 36
[   63.703171][ T7793] erofs (device loop0): readahead error at folio 50 @ nid 36
[   63.703241][ T7793] erofs (device loop0): readahead error at folio 47 @ nid 36
[   63.703273][ T7793] erofs (device loop0): readahead error at folio 46 @ nid 36
[   63.721498][ T7793] erofs (device loop0): readahead error at folio 40 @ nid 36
[   63.721560][ T7793] erofs (device loop0): readahead error at folio 39 @ nid 36
[   63.721635][ T7793] erofs (device loop0): readahead error at folio 38 @ nid 36
[   63.721701][ T7793] erofs (device loop0): readahead error at folio 34 @ nid 36
[   63.721773][ T7793] erofs (device loop0): readahead error at folio 32 @ nid 36
[   63.721848][ T7793] erofs (device loop0): readahead error at folio 30 @ nid 36
[   63.721919][ T7793] erofs (device loop0): readahead error at folio 27 @ nid 36
[   63.721950][ T7793] erofs (device loop0): readahead error at folio 26 @ nid 36
[   63.721980][ T7793] erofs (device loop0): readahead error at folio 25 @ nid 36
[   63.722039][ T7793] erofs (device loop0): readahead error at folio 24 @ nid 36
[   63.722071][ T7793] erofs (device loop0): readahead error at folio 23 @ nid 36
[   63.722101][ T7793] erofs (device loop0): readahead error at folio 22 @ nid 36
[   63.722176][ T7793] erofs (device loop0): readahead error at folio 21 @ nid 36
[   63.722207][ T7793] erofs (device loop0): readahead error at folio 20 @ nid 36
[   63.722255][ T7793] erofs (device loop0): readahead error at folio 18 @ nid 36
[   63.722391][ T7793] erofs (device loop0): readahead error at folio 12 @ nid 36
[   63.743619][ T7793] erofs (device loop0): readahead error at folio 10 @ nid 36
[   63.744125][ T7793] erofs (device loop0): readahead error at folio 6 @ nid 36
[   63.744175][ T7793] erofs (device loop0): readahead error at folio 4 @ nid 36
[   63.744275][ T7793] erofs (device loop0): invalid logical cluster 0 at nid 36
[   63.744299][ T7793] erofs (device loop0): readahead error at folio 0 @ nid 36
[   64.505389][ T7802] loop0: detected capacity change from 0 to 32768
[   64.642049][ T7843] loop2: detected capacity change from 0 to 512
[   64.648274][ T7817] loop3: detected capacity change from 0 to 32768
[   64.650557][ T7843] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   64.656455][ T7817] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.418 (7817)
[   64.668370][ T7843] EXT4-fs (loop2): invalid journal inode
[   64.668531][ T7843] EXT4-fs (loop2): can't get journal size
[   64.685968][ T7817] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   64.686068][ T7817] BTRFS info (device loop3): using sha256 (sha256-arm64) checksum algorithm
[   64.686109][ T7817] BTRFS info (device loop3): using free-space-tree
[   64.701483][ T7843] EXT4-fs (loop2): 1 truncate cleaned up
[   64.702498][ T7843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.746076][ T2407] ieee802154 phy0 wpan0: encryption failed: -22
[   64.746237][ T2407] ieee802154 phy1 wpan1: encryption failed: -22
[   64.763941][ T6519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.764222][ T7802] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   64.764256][ T7802]   allowing incompatible features above 0.0: (unknown version)
[   64.764274][ T7802]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   64.764340][ T7802] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   64.764451][ T7802] bcachefs (loop0): recovering from clean shutdown, journal seq 7
[   64.764525][ T7802] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   64.764525][ T7802]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   64.784349][ T7869] loop4: detected capacity change from 0 to 256
[   64.809662][ T7802] bcachefs (loop0): btree node read error at btree alloc level 0/0
[   64.812371][ T7802]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[   64.817158][ T7802]   loop0 node offset 0/32: got wrong btree node: got
[   64.819369][ T7802]   btree=alloc level=0 seq 752770000007f24 1
[   64.821393][ T7802]   min: POS_MIN
[   64.822660][ T7802]   max: SPOS_MAX
[   64.826625][ T7874] loop2: detected capacity change from 0 to 1024
[   64.831196][ T7802]   flagging btree alloc lost data
[   64.832966][ T7802]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[   64.835895][ T7802]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[   64.835934][ T7802]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[   64.835952][ T7802]   ret btree_node_read_validate_error
[   64.836871][ T7802] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[   64.859527][   T13] hfsplus: b-tree write err: -5, ino 4
[   64.875278][ T7802] bcachefs (loop0): check_topology... done
[   64.902528][ T7802] bcachefs (loop0): accounting_read... done
[   64.943771][ T7802] bcachefs (loop0): alloc_read... done
[   64.945585][ T7802] bcachefs (loop0): snapshots_read... done
[   64.952855][ T7802] bcachefs (loop0): check_allocations...
[   64.954144][ T7802] bcachefs (loop0): bucket 0:36 data type user ptr gen 0 missing in alloc btree
[   64.954164][ T7802]   while marking u64s 7 type extent 4098:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum crc32c 0:4925b703  compress lz4 ptr: 0:36:0 gen 0, fixing
[   64.954506][ T7802] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree
[   64.954519][ T7802]   while marking u64s 7 type extent 536870913:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum crc32c 0:cec3872e  compress incompressible ptr: 0:34:0 gen 0, fixing
[   64.954742][ T7802] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree
[   64.954755][ T7802]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b77ad9ee5a61c7f0 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing
[   64.973697][ T7802] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   64.973718][ T7802]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   64.974578][ T7802] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[   64.974593][ T7802]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   64.975007][ T7802] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   64.975020][ T7802]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   64.983468][ T7802] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[   64.983488][ T7802]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   64.983773][ T7802] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree
[   64.983786][ T7802]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1477538288e6fe55 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing
[   64.984055][ T7802] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   64.984067][ T7802]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   64.992518][ T7802] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[   64.992537][ T7802]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   64.992846][ T7802] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   64.992859][ T7802]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   65.002529][ T7802] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree
[   65.002547][ T7802]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   65.002856][ T7802] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree
[   65.002869][ T7802]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d19419031ca39bdb written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing
[   65.003111][ T7802] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   65.003123][ T7802]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   65.007588][ T7802] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[   65.007606][ T7802]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   65.010261][ T7802] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree
[   65.010278][ T7802]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 29c4a2706086d15a written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing
[   65.010292][ T7802]   Ratelimiting new instances of previous error
[   65.025695][ T7802]  done
[   65.026002][ T7802] bcachefs (loop0): going read-write
[   65.048977][ T7802] bcachefs (loop0): journal_replay...
[   65.089930][ T6514] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   65.147947][ T7802]  done
[   65.148863][ T7802] bcachefs (loop0): check_alloc_info...
[   65.149792][ T7802] bcachefs (loop0): hole in alloc btree missing in freespace btree
[   65.149837][ T7802]   device 0 buckets 26-27, fixing
[   65.173148][ T7802]  done
[   65.178862][ T7802] bcachefs (loop0): check_lrus... done
[   65.179068][ T7802] bcachefs (loop0): check_backpointers_to_extents... done
[   65.179557][ T7802] bcachefs (loop0): check_extents_to_backpointers...
[   65.180113][ T7802] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets
[   65.180488][ T7802]  done
[   65.181108][ T7802] bcachefs (loop0): check_inodes... done
[   65.181533][ T7802] bcachefs (loop0): resume_logged_ops... done
[   65.181581][ T7802] bcachefs (loop0): delete_dead_inodes... done
[   65.211228][ T7802] bcachefs (loop0): done starting filesystem
[   65.402063][ T7802] bcachefs (loop0): going read-only
[   65.402135][ T7802] bcachefs (loop0): finished waiting for writes to stop
[   65.443818][ T7802] bcachefs (loop0): flushing journal and stopping allocators, journal seq 17
[   65.462751][ T7802] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17
[   65.466737][ T7802] bcachefs (loop0): clean shutdown complete, journal seq 18
[   65.468168][ T7802] bcachefs (loop0): done going read-only, filesystem not clean
[   65.552753][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'.
[   65.570632][ T6512] bcachefs (loop0): shutting down
[   65.619414][ T6512] bcachefs (loop0): shutdown complete
[   65.664784][ T7897] veth3: entered promiscuous mode
[   65.848809][ T7902] loop2: detected capacity change from 0 to 32768
[   65.923824][ T7902] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   65.950892][ T7902] ocfs2: Unmounting device (7,2) on (node local)
[   66.081827][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.460'.
[   66.248312][ T7909] loop1: detected capacity change from 0 to 32768
[   66.378465][ T7909] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[   66.379409][ T7909] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   66.419252][ T7909] XFS (loop1): Ending clean mount
[   66.425072][ T7909] XFS (loop1): Quotacheck needed: Please wait.
[   66.430973][ T7929] loop4: detected capacity change from 0 to 32768
[   66.463062][ T7909] XFS (loop1): Quotacheck: Done.
[   66.483334][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'.
[   66.524660][ T7940] veth3: entered promiscuous mode
[   66.569003][ T6515] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   66.655484][ T7949] loop2: detected capacity change from 0 to 4096
[   66.713470][ T7954] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   66.785351][ T7956] loop3: detected capacity change from 0 to 16
[   66.814013][ T7956] erofs (device loop3): mounted with root inode @ nid 36.
[   66.831247][ T7951] loop1: detected capacity change from 0 to 32768
[   67.251851][ T7929] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   67.251910][ T7929]   allowing incompatible features above 0.0: (unknown version)
[   67.259314][ T7929]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   67.259413][ T7929] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   67.259506][ T7929] bcachefs (loop4): recovering from clean shutdown, journal seq 7
[   67.259578][ T7929] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   67.259578][ T7929]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   67.285128][ T7929] bcachefs (loop4): btree node read error at btree alloc level 0/0
[   67.287452][ T7929]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[   67.291340][ T7929]   loop4 node offset 0/32: got wrong btree node: got
[   67.293585][ T7929]   btree=alloc level=0 seq 752770000007f24 1
[   67.295921][ T7929]   min: POS_MIN
[   67.296978][ T7929]   max: SPOS_MAX
[   67.298038][ T7929]   flagging btree alloc lost data
[   67.299518][ T7929]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[   67.302028][ T7929]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[   67.305125][ T7929]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[   67.305141][ T7929]   ret btree_node_read_validate_error
[   67.305360][ T7929] bcachefs (loop4): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[   67.310348][ T7929] bcachefs (loop4): check_topology... done
[   67.319782][ T7929] bcachefs (loop4): accounting_read... done
[   67.416292][ T7929] bcachefs (loop4): alloc_read... done
[   67.417550][ T7929] bcachefs (loop4): snapshots_read...
[   67.420284][ T7951] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   67.420448][ T7951]   allowing incompatible features above 0.0: (unknown version)
[   67.420461][ T7951]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   67.420522][ T7951] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   67.420611][ T7951] bcachefs (loop1): recovering from clean shutdown, journal seq 7
[   67.420676][ T7951] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   67.420676][ T7951]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   67.421505][ T7929]  done
[   67.421531][ T7929] bcachefs (loop4): check_allocations...
[   67.422202][ T7929] bcachefs (loop4): bucket 0:36 data type user ptr gen 0 missing in alloc btree
[   67.422217][ T7929]   while marking u64s 7 type extent 4098:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum crc32c 0:4925b703  compress lz4 ptr: 0:36:0 gen 0, fixing
[   67.422505][ T7929] bcachefs (loop4): bucket 0:34 data type user ptr gen 0 missing in alloc btree
[   67.422518][ T7929]   while marking u64s 7 type extent 536870913:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum crc32c 0:cec3872e  compress incompressible ptr: 0:34:0 gen 0, fixing
[   67.422731][ T7929] bcachefs (loop4): bucket 0:27 data type btree ptr gen 0 missing in alloc btree
[   67.422744][ T7929]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b77ad9ee5a61c7f0 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing
[   67.423113][ T7929] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   67.423126][ T7929]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   67.440695][ T7929] bcachefs (loop4): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[   67.440714][ T7929]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   67.441205][ T7929] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   67.441218][ T7929]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   67.446255][ T7929] bcachefs (loop4): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[   67.446272][ T7929]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   67.446533][ T7929] bcachefs (loop4): bucket 0:31 data type btree ptr gen 0 missing in alloc btree
[   67.446546][ T7929]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1477538288e6fe55 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing
[   67.446809][ T7929] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   67.446822][ T7929]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   67.447665][ T7929] bcachefs (loop4): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[   67.447679][ T7929]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   67.448237][ T7929] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   67.448251][ T7929]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   67.449146][ T7929] bcachefs (loop4): bucket 0:32 data type btree ptr gen 0 missing in alloc btree
[   67.449161][ T7929]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   67.449418][ T7929] bcachefs (loop4): bucket 0:28 data type btree ptr gen 0 missing in alloc btree
[   67.449431][ T7929]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d19419031ca39bdb written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing
[   67.449654][ T7929] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[   67.449666][ T7929]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   67.478768][ T7929] bcachefs (loop4): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[   67.478786][ T7929]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   67.479152][ T7929] bcachefs (loop4): bucket 0:37 data type btree ptr gen 0 missing in alloc btree
[   67.479166][ T7929]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 29c4a2706086d15a written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing
[   67.479179][ T7929]   Ratelimiting new instances of previous error
[   67.483071][ T7929]  done
[   67.539988][ T7929] bcachefs (loop4): going read-write
[   67.541891][ T7951] bcachefs (loop1): accounting_read...
[   67.549891][ T7929] bcachefs (loop4): journal_replay...
[   67.583576][ T7988] loop3: detected capacity change from 0 to 32768
[   67.602807][ T7988] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.479 (7988)
[   67.663298][ T7951]  done
[   67.663472][ T7951] bcachefs (loop1): alloc_read... done
[   67.670937][ T7951] bcachefs (loop1): snapshots_read... done
[   67.671761][ T7951] bcachefs (loop1): check_allocations...
[   67.673226][ T7951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   67.673242][ T7951]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[   67.682227][ T7951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   67.682244][ T7951]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   67.683057][ T7951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   67.683072][ T7951]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   67.687203][ T7951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   67.687219][ T7951]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   67.688015][ T7951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   67.688029][ T7951]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   67.688896][ T7951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[   67.688910][ T7951]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   67.692256][ T7951]  done
[   67.697945][ T7951] bcachefs (loop1): going read-write
[   67.701161][ T7951] bcachefs (loop1): journal_replay...
[   67.722962][ T7988] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   67.727803][ T7988] BTRFS info (device loop3): using sha256 (sha256-arm64) checksum algorithm
[   67.739522][ T7951]  done
[   67.740058][ T7951] bcachefs (loop1): check_extents_to_backpointers...
[   67.744030][ T7929]  done
[   67.744642][ T7929] bcachefs (loop4): check_alloc_info...
[   67.745557][ T7929] bcachefs (loop4): hole in alloc btree missing in freespace btree
[   67.745572][ T7929]   device 0 buckets 26-27, fixing
[   67.753008][ T7929]  done
[   67.753999][ T7951] bcachefs (loop1): scanning for missing backpointers in 6/128 buckets
[   67.761729][ T7951]  done
[   67.765794][ T7951] bcachefs (loop1): check_inodes...
[   67.774174][ T7929] bcachefs (loop4): check_lrus... done
[   67.774381][ T7929] bcachefs (loop4): check_backpointers_to_extents... done
[   67.774832][ T7929] bcachefs (loop4): check_extents_to_backpointers...
[   67.775932][ T7929] bcachefs (loop4): scanning for missing backpointers in 5/128 buckets
[   67.776309][ T7929]  done
[   67.778728][ T7951]  done
[   67.778774][ T7951] bcachefs (loop1): resume_logged_ops... done
[   67.786476][ T7951] bcachefs (loop1): delete_dead_inodes... done
[   67.796065][ T7951] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[   67.796119][ T7951] bcachefs (loop1): check_extents_to_backpointers...
[   67.796871][ T7929] bcachefs (loop4): check_inodes... done
[   67.797280][ T7929] bcachefs (loop4): resume_logged_ops... done
[   67.797335][ T7929] bcachefs (loop4): delete_dead_inodes... done
[   67.815464][ T7988] BTRFS info (device loop3): rebuilding free space tree
[   67.827124][ T7951]  done
[   67.833179][ T7929] bcachefs (loop4): done starting filesystem
[   67.837057][ T7951] bcachefs (loop1): check_inodes... done
[   67.857024][ T7951] bcachefs (loop1): resume_logged_ops...
[   67.860598][ T7988] BTRFS info (device loop3): disabling free space tree
[   67.860694][ T7988] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   67.860739][ T7988] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   67.878864][ T7951]  done
[   67.878919][ T7951] bcachefs (loop1): delete_dead_inodes... done
[   67.889503][ T7951] bcachefs (loop1): done starting filesystem
[   67.938521][ T6515] bcachefs (loop1): shutting down
[   67.938580][ T6515] bcachefs (loop1): going read-only
[   67.938611][ T6515] bcachefs (loop1): finished waiting for writes to stop
[   67.999361][ T6515] bcachefs (loop1): flushing journal and stopping allocators, journal seq 15
[   67.999544][ T6515] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 15
[   68.004042][ T6515] bcachefs (loop1): clean shutdown complete, journal seq 16
[   68.004850][ T6515] bcachefs (loop1): marking filesystem clean
[   68.049274][ T8022] loop2: detected capacity change from 0 to 256
[   68.087777][ T6515] bcachefs (loop1): shutdown complete
[   68.094085][ T6514] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   68.135294][ T8022] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d)
[   68.172238][ T6513] bcachefs (loop4): shutting down
[   68.172300][ T6513] bcachefs (loop4): going read-only
[   68.172358][ T6513] bcachefs (loop4): finished waiting for writes to stop
[   68.190633][ T8019] loop0: detected capacity change from 0 to 32768
[   68.242287][ T6513] bcachefs (loop4): flushing journal and stopping allocators, journal seq 18
[   68.268419][ T8024] netlink: 408 bytes leftover after parsing attributes in process `syz.3.485'.
[   68.268505][ T8024] tipc: Started in network mode
[   68.268535][ T8024] tipc: Node identity 00000026000000000000000000000026, cluster identity 4711
[   68.268576][ T8024] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   68.284485][ T6513] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 18
[   68.301774][ T6513] bcachefs (loop4): clean shutdown complete, journal seq 19
[   68.325487][ T6513] bcachefs (loop4): done going read-only, filesystem not clean
[   68.476556][ T6513] bcachefs (loop4): shutdown complete
[   68.685957][ T8030] loop2: detected capacity change from 0 to 32768
[   68.717714][ T8030] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.487 (8030)
[   68.778857][ T8030] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   68.779246][ T8030] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm
[   68.779290][ T8030] BTRFS info (device loop2): using free-space-tree
[   68.780500][ T8045] loop1: detected capacity change from 0 to 256
[   68.781314][ T8045] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   68.816874][ T8045] FAT-fs (loop1): Directory bread(block 64) failed
[   68.816953][ T8045] FAT-fs (loop1): Directory bread(block 65) failed
[   68.817007][ T8045] FAT-fs (loop1): Directory bread(block 66) failed
[   68.817040][ T8045] FAT-fs (loop1): Directory bread(block 67) failed
[   68.817089][ T8045] FAT-fs (loop1): Directory bread(block 68) failed
[   68.817121][ T8045] FAT-fs (loop1): Directory bread(block 69) failed
[   68.817170][ T8045] FAT-fs (loop1): Directory bread(block 70) failed
[   68.817201][ T8045] FAT-fs (loop1): Directory bread(block 71) failed
[   68.817253][ T8045] FAT-fs (loop1): Directory bread(block 72) failed
[   68.817284][ T8045] FAT-fs (loop1): Directory bread(block 73) failed
[   69.023110][ T6519] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   69.076095][ T8041] loop3: detected capacity change from 0 to 32768
[   69.121713][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'.
[   69.130010][ T8041] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   69.190927][ T8041] XFS (loop3): Ending clean mount
[   69.242172][ T6514] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   69.298235][ T8080] netlink: 256 bytes leftover after parsing attributes in process `syz.1.499'.
[   69.301428][ T8080] netlink: 'syz.1.499': attribute type 9 has an invalid length.
[   69.607044][ T8081] loop0: detected capacity change from 0 to 32768
[   69.613457][ T8081] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.498 (8081)
[   69.670304][ T8081] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   69.670423][ T8081] BTRFS info (device loop0): using sha256 (sha256-arm64) checksum algorithm
[   69.670464][ T8081] BTRFS info (device loop0): using free-space-tree
[   69.776765][ T8110] loop1: detected capacity change from 0 to 128
[   69.824845][ T8110] FAT-fs (loop1): Directory bread(block 11554) failed
[   69.824918][ T8110] FAT-fs (loop1): Directory bread(block 11555) failed
[   69.824973][ T8110] FAT-fs (loop1): Directory bread(block 11556) failed
[   69.825015][ T8110] FAT-fs (loop1): Directory bread(block 11557) failed
[   69.825054][ T8110] FAT-fs (loop1): Directory bread(block 11558) failed
[   69.825093][ T8110] FAT-fs (loop1): Directory bread(block 11559) failed
[   69.825132][ T8110] FAT-fs (loop1): Directory bread(block 11560) failed
[   69.825171][ T8110] FAT-fs (loop1): Directory bread(block 11561) failed
[   69.825342][ T8110] FAT-fs (loop1): Directory bread(block 11562) failed
[   69.825385][ T8110] FAT-fs (loop1): Directory bread(block 11563) failed
[   69.861988][ T8085] loop2: detected capacity change from 0 to 32768
[   69.867760][   T24] cfg80211: failed to load regulatory.db
[   70.047243][ T6512] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.096748][ T8112] loop3: detected capacity change from 0 to 32768
[   70.097358][ T8112] XFS: attr2 mount option is deprecated.
[   70.167558][ T8085] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   70.183216][ T8112] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   70.188654][ T8085]   allowing incompatible features above 0.0: (unknown version)
[   70.188706][ T8085]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   70.188786][ T8085] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   70.188896][ T8085] bcachefs (loop2): recovering from clean shutdown, journal seq 7
[   70.188975][ T8085] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   70.188975][ T8085]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   70.214036][ T8085] bcachefs (loop2): btree node read error at btree alloc level 0/0
[   70.214163][ T8085]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[   70.214195][ T8085]   loop2 node offset 0/32: got wrong btree node: got
[   70.214211][ T8085]   btree=alloc level=0 seq 752770000007f24 1
[   70.214227][ T8085]   min: POS_MIN
[   70.214241][ T8085]   max: SPOS_MAX
[   70.214255][ T8085]   flagging btree alloc lost data
[   70.214269][ T8085]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[   70.214286][ T8085]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[   70.214327][ T8085]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[   70.214344][ T8085]   ret btree_node_read_validate_error
[   70.215220][ T8085] bcachefs (loop2): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[   70.239883][ T8085] bcachefs (loop2): check_topology... done
[   70.244084][ T8085] bcachefs (loop2): accounting_read... done
[   70.288725][ T8085] bcachefs (loop2): alloc_read... done
[   70.289457][ T8085] bcachefs (loop2): snapshots_read... done
[   70.290414][ T8085] bcachefs (loop2): check_allocations...
[   70.291038][ T8085] bcachefs (loop2): bucket 0:36 data type user ptr gen 0 missing in alloc btree
[   70.291053][ T8085]   while marking u64s 7 type extent 4098:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum crc32c 0:4925b703  compress lz4 ptr: 0:36:0 gen 0, fixing
[   70.291345][ T8085] bcachefs (loop2): bucket 0:34 data type user ptr gen 0 missing in alloc btree
[   70.291358][ T8085]   while marking u64s 7 type extent 536870913:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum crc32c 0:cec3872e  compress incompressible ptr: 0:34:0 gen 0, fixing
[   70.291565][ T8085] bcachefs (loop2): bucket 0:27 data type btree ptr gen 0 missing in alloc btree
[   70.291578][ T8085]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b77ad9ee5a61c7f0 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing
[   70.291955][ T8085] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   70.291967][ T8085]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   70.307260][ T8085] bcachefs (loop2): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[   70.307278][ T8085]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   70.307705][ T8085] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   70.307719][ T8085]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   70.320285][ T8085] bcachefs (loop2): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[   70.320304][ T8085]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   70.320577][ T8085] bcachefs (loop2): bucket 0:31 data type btree ptr gen 0 missing in alloc btree
[   70.320590][ T8085]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1477538288e6fe55 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing
[   70.320855][ T8085] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   70.320868][ T8085]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   70.340928][ T8085] bcachefs (loop2): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[   70.340952][ T8085]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   70.341217][ T8085] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   70.341230][ T8085]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   70.364352][ T8085] bcachefs (loop2): bucket 0:32 data type btree ptr gen 0 missing in alloc btree
[   70.364371][ T8085]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   70.364662][ T8085] bcachefs (loop2): bucket 0:28 data type btree ptr gen 0 missing in alloc btree
[   70.364675][ T8085]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d19419031ca39bdb written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing
[   70.364898][ T8085] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[   70.364910][ T8085]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   70.365303][ T8112] XFS (loop3): Ending clean mount
[   70.370398][ T8085] bcachefs (loop2): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[   70.370416][ T8085]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   70.370755][ T8085] bcachefs (loop2): bucket 0:37 data type btree ptr gen 0 missing in alloc btree
[   70.370768][ T8085]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 29c4a2706086d15a written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing
[   70.370782][ T8085]   Ratelimiting new instances of previous error
[   70.390622][ T8112] XFS (loop3): Quotacheck needed: Please wait.
[   70.423580][ T8085]  done
[   70.423929][ T8085] bcachefs (loop2): going read-write
[   70.460574][ T8112] XFS (loop3): Quotacheck: Done.
[   70.474490][ T8085] bcachefs (loop2): journal_replay... done
[   70.602556][ T8085] bcachefs (loop2): check_alloc_info...
[   70.608979][ T8085] bcachefs (loop2): hole in alloc btree missing in freespace btree
[   70.609024][ T8085]   device 0 buckets 26-27, fixing
[   70.611118][ T8085]  done
[   70.616327][ T8085] bcachefs (loop2): check_lrus... done
[   70.616718][ T8085] bcachefs (loop2): check_backpointers_to_extents... done
[   70.619747][ T8085] bcachefs (loop2): check_extents_to_backpointers...
[   70.621077][ T8085] bcachefs (loop2): scanning for missing backpointers in 5/128 buckets
[   70.647491][ T8085]  done
[   70.649033][ T6514] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   70.654199][ T8085] bcachefs (loop2): check_inodes... done
[   70.654678][ T8085] bcachefs (loop2): resume_logged_ops... done
[   70.654738][ T8085] bcachefs (loop2): delete_dead_inodes... done
[   70.665068][ T8085] bcachefs (loop2): done starting filesystem
[   70.708944][ T8133] loop4: detected capacity change from 0 to 32768
[   70.731885][ T8133] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[   70.732502][ T8133] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   70.819947][ T8133] XFS (loop4): Ending clean mount
[   70.821903][ T8133] XFS (loop4): Quotacheck needed: Please wait.
[   70.883839][ T8085] bcachefs (loop2): going read-only
[   70.883914][ T8085] bcachefs (loop2): finished waiting for writes to stop
[   70.908413][ T8133] XFS (loop4): Quotacheck: Done.
[   70.944631][ T8085] bcachefs (loop2): flushing journal and stopping allocators, journal seq 17
[   70.960286][ T8085] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 17
[   70.969343][ T8085] bcachefs (loop2): clean shutdown complete, journal seq 18
[   70.982500][ T8085] bcachefs (loop2): done going read-only, filesystem not clean
[   71.085823][ T8122] loop1: detected capacity change from 0 to 32768
[   71.101286][ T8122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.511 (8122)
[   71.123001][ T8122] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.123103][ T8122] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm
[   71.123144][ T8122] BTRFS info (device loop1): using free-space-tree
[   71.146359][ T6519] bcachefs (loop2): shutting down
[   71.172017][ T6513] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.210918][ T6519] bcachefs (loop2): shutdown complete
[   71.251144][ T7372] udevd[7372]: incorrect bcachefs checksum on /dev/loop2
[   71.533717][ T6515] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.586892][ T8182] loop3: detected capacity change from 0 to 256
[   71.621786][ T8182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[   71.621874][ T8182] FAT-fs (loop3): Filesystem has been set read-only
[   71.893942][ T8195] veth1_macvtap: left promiscuous mode
[   71.894018][ T8195] macsec0: entered promiscuous mode
[   71.894062][ T8195] macsec0: entered allmulticast mode
[   71.919550][ T8195] veth1_macvtap: entered promiscuous mode
[   71.919619][ T8195] veth1_macvtap: entered allmulticast mode
[   71.920590][ T8195] macsec0: left promiscuous mode
[   71.920689][ T8195] macsec0: left allmulticast mode
[   71.920711][ T8195] veth1_macvtap: left allmulticast mode
[   72.332259][ T8208] loop4: detected capacity change from 0 to 512
[   72.332946][ T8208] EXT4-fs: Ignoring removed oldalloc option
[   72.345702][ T8199] loop3: detected capacity change from 0 to 32768
[   72.367302][ T8159] loop0: detected capacity change from 0 to 65536
[   72.391116][ T8208] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.534: Parent and EA inode have the same ino 15
[   72.397562][ T8208] EXT4-fs (loop4): Remounting filesystem read-only
[   72.397643][ T8208] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   72.397689][ T8208] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   72.397821][ T8208] EXT4-fs (loop4): 1 orphan inode deleted
[   72.398719][ T8208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.453256][ T8159] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   72.488900][ T6513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.517058][ T8159] XFS (loop0): Ending clean mount
[   72.562848][ T8159] XFS (loop0): EXPERIMENTAL online shrink feature enabled.  Use at your own risk!
[   72.569864][ T8225] loop4: detected capacity change from 0 to 512
[   72.571000][ T8225] EXT4-fs: Ignoring removed mblk_io_submit option
[   72.601156][ T8225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.632483][ T6512] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   72.739817][ T6513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.825271][ T8238] netlink: 'syz.1.542': attribute type 2 has an invalid length.
[   72.850767][ T8244] loop4: detected capacity change from 0 to 16
[   72.880993][ T8244] erofs (device loop4): mounted with root inode @ nid 36.
[   72.904394][ T8199] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   72.907734][ T8199]   allowing incompatible features above 0.0: (unknown version)
[   72.909900][ T8199]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   72.923625][ T8199] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   72.923740][ T8199] bcachefs (loop3): recovering from clean shutdown, journal seq 7
[   72.923829][ T8199] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   72.923829][ T8199]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   73.006501][ T8199] bcachefs (loop3): btree node read error at btree alloc level 0/0
[   73.006546][ T8199]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[   73.006578][ T8199]   loop3 node offset 0/32: got wrong btree node: got
[   73.006589][ T8199]   btree=alloc level=0 seq 752770000007f24 1
[   73.006599][ T8199]   min: POS_MIN
[   73.006608][ T8199]   max: SPOS_MAX
[   73.006617][ T8199]   flagging btree alloc lost data
[   73.006627][ T8199]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[   73.006638][ T8199]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[   73.006649][ T8199]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[   73.006660][ T8199]   ret btree_node_read_validate_error
[   73.006855][ T8199] bcachefs (loop3): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[   73.021715][ T8199] bcachefs (loop3): check_topology... done
[   73.032793][ T8199] bcachefs (loop3): accounting_read... done
[   73.056797][ T8199] bcachefs (loop3): alloc_read... done
[   73.057433][ T8199] bcachefs (loop3): snapshots_read... done
[   73.058022][ T8199] bcachefs (loop3): check_allocations...
[   73.058658][ T8199] bcachefs (loop3): bucket 0:36 data type user ptr gen 0 missing in alloc btree
[   73.058672][ T8199]   while marking u64s 7 type extent 4098:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum crc32c 0:4925b703  compress lz4 ptr: 0:36:0 gen 0, fixing
[   73.058951][ T8199] bcachefs (loop3): bucket 0:34 data type user ptr gen 0 missing in alloc btree
[   73.058963][ T8199]   while marking u64s 7 type extent 536870913:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum crc32c 0:cec3872e  compress incompressible ptr: 0:34:0 gen 0, fixing
[   73.059169][ T8199] bcachefs (loop3): bucket 0:27 data type btree ptr gen 0 missing in alloc btree
[   73.059181][ T8199]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b77ad9ee5a61c7f0 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing
[   73.059562][ T8199] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap
[   73.059575][ T8199]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   73.063882][ T8199] bcachefs (loop3): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[   73.063899][ T8199]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   73.064285][ T8199] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap
[   73.064297][ T8199]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   73.066098][ T8199] bcachefs (loop3): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[   73.066113][ T8199]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   73.066369][ T8199] bcachefs (loop3): bucket 0:31 data type btree ptr gen 0 missing in alloc btree
[   73.066382][ T8199]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1477538288e6fe55 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing
[   73.066646][ T8199] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap
[   73.066658][ T8199]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   73.076442][ T8199] bcachefs (loop3): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[   73.076458][ T8199]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   73.076706][ T8199] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap
[   73.076719][ T8199]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   73.085341][ T8199] bcachefs (loop3): bucket 0:32 data type btree ptr gen 0 missing in alloc btree
[   73.085363][ T8199]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   73.085623][ T8199] bcachefs (loop3): bucket 0:28 data type btree ptr gen 0 missing in alloc btree
[   73.085636][ T8199]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d19419031ca39bdb written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing
[   73.085866][ T8199] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap
[   73.085879][ T8199]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   73.098267][ T8199] bcachefs (loop3): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[   73.098285][ T8199]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   73.098645][ T8199] bcachefs (loop3): bucket 0:37 data type btree ptr gen 0 missing in alloc btree
[   73.098658][ T8199]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 29c4a2706086d15a written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing
[   73.098671][ T8199]   Ratelimiting new instances of previous error
[   73.102607][ T8199]  done
[   73.102891][ T8199] bcachefs (loop3): going read-write
[   73.191570][ T8199] bcachefs (loop3): journal_replay... done
[   73.274880][ T8199] bcachefs (loop3): check_alloc_info...
[   73.276126][ T8199] bcachefs (loop3): hole in alloc btree missing in freespace btree
[   73.276189][ T8199]   device 0 buckets 26-27, fixing
[   73.278626][ T8199]  done
[   73.289861][ T8199] bcachefs (loop3): check_lrus... done
[   73.290045][ T8199] bcachefs (loop3): check_backpointers_to_extents... done
[   73.290512][ T8199] bcachefs (loop3): check_extents_to_backpointers...
[   73.291056][ T8199] bcachefs (loop3): scanning for missing backpointers in 5/128 buckets
[   73.291427][ T8199]  done
[   73.312293][ T8199] bcachefs (loop3): check_inodes... done
[   73.312772][ T8199] bcachefs (loop3): resume_logged_ops... done
[   73.312820][ T8199] bcachefs (loop3): delete_dead_inodes... done
[   73.335427][ T8199] bcachefs (loop3): done starting filesystem
[   73.343229][ T8234] loop0: detected capacity change from 0 to 32768
[   73.378384][ T8234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.541 (8234)
[   73.420140][ T8199] bcachefs (loop3): going read-only
[   73.420236][ T8199] bcachefs (loop3): finished waiting for writes to stop
[   73.441197][ T8234] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   73.441303][ T8234] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm
[   73.441358][ T8234] BTRFS info (device loop0): using free-space-tree
[   73.492349][ T8199] bcachefs (loop3): flushing journal and stopping allocators, journal seq 17
[   73.502854][ T8199] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 17
[   73.511423][ T8199] bcachefs (loop3): clean shutdown complete, journal seq 18
[   73.514220][ T8199] bcachefs (loop3): done going read-only, filesystem not clean
[   73.583590][ T6514] bcachefs (loop3): shutting down
[   73.625194][ T8285] loop1: detected capacity change from 0 to 256
[   73.641413][ T6514] bcachefs (loop3): shutdown complete
[   73.741447][ T6512] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   73.948016][ T8299] loop4: detected capacity change from 0 to 8
[   73.966232][ T8299] SQUASHFS error: zlib decompression failed, data probably corrupt
[   73.969358][ T8299] SQUASHFS error: Failed to read block 0x9b: -5
[   73.971317][ T8299] SQUASHFS error: Unable to read metadata cache entry [99]
[   73.978439][ T8299] SQUASHFS error: Unable to read inode 0x127
[   74.003645][ T8299] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[   74.009240][ T8299] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   74.179581][ T8308] use of bytesused == 0 is deprecated and will be removed in the future,
[   74.179735][ T8308] use the actual size instead.
[   74.256583][ T8302] loop1: detected capacity change from 0 to 32768
[   74.263318][ T8302] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.561 (8302)
[   74.274541][ T8302] BTRFS info (device loop1 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   74.274632][ T8302] BTRFS info (device loop1 state S): using blake2b (blake2b-256-generic) checksum algorithm
[   74.274689][ T8302] BTRFS info (device loop1 state S): using free-space-tree
[   74.331985][ T8321] atomic_op 00000000a8541d3e conn xmit_atomic 0000000000000000
[   74.533865][ T8330] loop4: detected capacity change from 0 to 2048
[   74.545811][ T8330] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.545897][ T8330] EXT4-fs: Ignoring removed nobh option
[   74.592603][ T8330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.677366][ T6515] BTRFS info (device loop1 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   74.704424][ T6513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.878785][ T8340] loop2: detected capacity change from 0 to 32768
[   74.886975][ T8340] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.571 (8340)
[   74.892146][ T8340] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   74.892253][ T8340] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   74.892298][ T8340] BTRFS info (device loop2): using free-space-tree
[   75.322926][ T6519] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   75.623298][ T8361] loop4: detected capacity change from 0 to 40427
[   75.830408][ T8377] loop0: detected capacity change from 0 to 2048
[   75.836890][ T8377] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   75.954180][ T8378] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.978991][ T8377] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[   75.988527][ T8377] Remounting filesystem read-only
[   76.131711][ T8361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   76.320351][ T8364] loop1: detected capacity change from 0 to 262144
[   76.322403][ T8364] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.576 (8364)
[   76.347347][ T8364] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   76.347442][ T8364] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   76.347478][ T8364] BTRFS info (device loop1): using free-space-tree
[   76.482778][  T290] BTRFS error (device loop1): bad fsid on logical 22036480 mirror 1
[   76.489041][  T290] BTRFS warning (device loop1): checksum verify failed on logical 30687232 mirror 1 wanted 0x14486ff4055368ab found 0xb960a274717491ff level 0
[   76.497413][  T290] BTRFS warning (device loop1): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0x15ff353075289877 level 0
[   76.497705][  T290] BTRFS warning (device loop1): checksum verify failed on logical 30457856 mirror 2 wanted 0x09000000de9ccfe6 found 0xe46215cd95ccc2f3 level 0
[   76.497792][ T8364] BTRFS warning (device loop1): failed to read fs tree: -5
[   76.549646][ T8364] BTRFS error (device loop1): open_ctree failed: -5
[   76.623006][ T8386] loop0: detected capacity change from 0 to 32768
[   76.623734][ T8386] btrfs: Deprecated parameter 'usebackuproot'
[   76.623767][ T8386] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   76.624446][ T8386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.584 (8386)
[   76.629923][ T8386] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   76.629990][ T8386] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm
[   76.630025][ T8386] BTRFS info (device loop0): disk space caching is enabled
[   76.630049][ T8386] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   77.127235][ T8417] loop1: detected capacity change from 0 to 32768
[   77.130009][ T8417] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.588 (8417)
[   77.147436][ T8417] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   77.147527][ T8417] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   77.147573][ T8417] BTRFS info (device loop1): using free-space-tree
[   77.248399][ T8462] loop2: detected capacity change from 0 to 2048
[   77.249984][ T8462] EXT4-fs: Ignoring removed mblk_io_submit option
[   77.253485][ T8462] EXT4-fs: Ignoring removed nobh option
[   77.360163][ T8462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.369954][ T8467] loop3: detected capacity change from 0 to 64
[   77.476308][ T6515] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   77.501925][ T6519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.633667][ T8386] BTRFS info (device loop0 state M): resize thread pool 4 -> 3
[   77.633776][ T8386] BTRFS info (device loop0 state M): rebuilding free space tree
[   77.635625][ T8386] BTRFS error (device loop0 state M): trying to do action 2 to bytenr 5341184 num_bytes 4096 but there is no existing entry!
[   77.635754][ T8386] BTRFS error (device loop0 state M):   Ref action 2, root 10, ref_root 10, parent 0, owner 0, offset 0, num_refs 18446744073709551615
[   77.635785][ T8386]    btrfs_force_cow_block+0xbf0/0x1bb8
[   77.635818][ T8386]    btrfs_cow_block+0x3f8/0x838
[   77.635844][ T8386]    btrfs_search_slot+0x9c0/0x221c
[   77.635870][ T8386]    clear_free_space_tree+0xc0/0x228
[   77.635896][ T8386]    btrfs_rebuild_free_space_tree+0x10c/0x54c
[   77.635922][ T8386]    btrfs_start_pre_rw_mount+0xa78/0xe10
[   77.635948][ T8386]    btrfs_reconfigure+0x82c/0x2420
[   77.635974][ T8386]    reconfigure_super+0x1d4/0x6f0
[   77.635997][ T8386]    path_mount+0xb34/0xde0
[   77.636019][ T8386]    __arm64_sys_mount+0x3e8/0x468
[   77.636042][ T8386]    invoke_syscall+0x98/0x2b8
[   77.636069][ T8386]    el0_svc_common+0x130/0x23c
[   77.636094][ T8386]    do_el0_svc+0x48/0x58
[   77.636119][ T8386]    el0_svc+0x58/0x17c
[   77.636144][ T8386]    el0t_64_sync_handler+0x78/0x108
[   77.636168][ T8386]    el0t_64_sync+0x198/0x19c
[   77.669002][ T8476] sp0: Synchronizing with TNC
[   77.740092][ T8386] BTRFS info (device loop0 state M): disabling free space tree
[   77.740240][ T8386] BTRFS info (device loop0 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   77.740373][ T8386] BTRFS info (device loop0 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   77.768986][ T8386] BTRFS info (device loop0 state M): enabling ssd optimizations
[   77.769059][ T8386] BTRFS info (device loop0 state M): using spread ssd allocation scheme
[   77.769084][ T8386] BTRFS info (device loop0 state M): turning off barriers
[   77.769108][ T8386] BTRFS info (device loop0 state M): force clearing of disk cache
[   77.769133][ T8386] BTRFS info (device loop0 state M): setting datacow
[   77.986623][ T6512] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   78.426670][ T8509] can0: slcan on ttyprintk.
[   78.553556][ T8508] can0 (unregistered): slcan off ttyprintk.
[   78.651958][ T8488] loop1: detected capacity change from 0 to 32768
[   78.702813][ T8484] loop4: detected capacity change from 0 to 40427
[   78.704169][ T8484] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   78.704202][ T8484] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   78.705896][ T8484] F2FS-fs (loop4): invalid crc value
[   78.782689][ T8484] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   78.791910][ T8484] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   78.867882][ T8488] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[   78.903622][ T8488]   allowing incompatible features above 0.0: (unknown version)
[   78.903687][ T8488]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   78.903726][ T8488] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   78.903832][ T8488] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   78.903971][ T8488] bcachefs (loop1): Version upgrade required:
[   78.903971][ T8488] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   78.903971][ T8488] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   78.903971][ T8488]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   78.904165][ T8488] bcachefs (loop1): dropping and reconstructing all alloc info
[   78.934106][ T8488] bcachefs (loop1): accounting_read...
[   78.940122][ T8528] loop2: detected capacity change from 0 to 1024
[   78.940783][ T8528] EXT4-fs: Ignoring removed orlov option
[   78.977141][ T8505] loop0: detected capacity change from 0 to 32768
[   78.980745][ T8528] EXT4-fs (loop2): Test dummy encryption mode enabled
[   78.983984][ T8528] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[   78.989850][ T8505] XFS: noikeep mount option is deprecated.
[   79.005319][ T8488]  done
[   79.005389][ T8488] bcachefs (loop1): alloc_read... done
[   79.005572][ T8488] bcachefs (loop1): snapshots_read... done
[   79.006014][ T8488] bcachefs (loop1): done starting filesystem
[   79.048600][ T8528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.057759][ T8505] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.125984][ T8507] loop3: detected capacity change from 0 to 65536
[   79.170372][ T8507] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   79.186023][ T6515] bcachefs (loop1): shutting down
[   79.213606][ T6519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.242740][ T8505] XFS (loop0): Ending clean mount
[   79.245213][ T8505] XFS (loop0): Quotacheck needed: Please wait.
[   79.249585][ T6515] bcachefs (loop1): shutdown complete
[   79.286818][ T8507] XFS (loop3): Ending clean mount
[   79.309198][ T8507] XFS (loop3): Quotacheck needed: Please wait.
[   79.320242][ T8505] XFS (loop0): Quotacheck: Done.
[   79.381381][ T8507] XFS (loop3): Quotacheck: Done.
[   79.397768][ T6512] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.534416][ T6514] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   79.599078][ T8559] sp0: Synchronizing with TNC
[   79.817024][ T6517] Bluetooth: Fragment is too long (len 14, expected 2)
[   79.953564][ T8576] loop0: detected capacity change from 0 to 1024
[   80.081723][ T8568] loop3: detected capacity change from 0 to 32768
[   80.106799][ T8568] (syz.3.631,8568,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   80.107108][ T8568] (syz.3.631,8568,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   80.119290][ T8568] JBD2: Ignoring recovery information on journal
[   80.199511][ T8568] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   80.363054][ T8570] loop4: detected capacity change from 0 to 40427
[   80.375078][ T8570] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   80.375146][ T8570] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   80.404247][ T8570] F2FS-fs (loop4): invalid crc value
[   80.472715][ T8578] loop2: detected capacity change from 0 to 32768
[   80.475635][ T8578] XFS: noikeep mount option is deprecated.
[   80.481314][ T6514] ocfs2: Unmounting device (7,3) on (node local)
[   80.491950][ T8570] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   80.494360][ T8570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   80.545856][ T8578] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.701909][ T8578] XFS (loop2): Ending clean mount
[   80.714714][ T8578] XFS (loop2): Quotacheck needed: Please wait.
[   80.779113][ T8578] XFS (loop2): Quotacheck: Done.
[   80.855759][ T6519] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   81.312729][ T8641] loop4: detected capacity change from 0 to 8
[   81.353687][ T8641] SQUASHFS error: zstd decompression error: 10
[   81.353901][ T8641] SQUASHFS error: zstd decompression failed, data probably corrupt
[   81.353955][ T8641] SQUASHFS error: Failed to read block 0x4ec: -5
[   81.353983][ T8641] SQUASHFS error: Unable to read metadata cache entry [4ea]
[   81.354009][ T8641] SQUASHFS error: Unable to read inode 0x2011f
[   81.582130][   T11] IPVS: starting estimator thread 0...
[   81.632166][ T8657] loop1: detected capacity change from 0 to 4096
[   81.683563][ T8662] IPVS: using max 32 ests per chain, 76800 per kthread
[   81.714565][ T8657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.892184][ T6515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.168925][ T8666] loop3: detected capacity change from 0 to 40427
[   82.190605][ T8666] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[   82.190689][ T8666] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   82.316906][ T8666] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   82.316990][ T8666] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   82.355264][ T8634] loop0: detected capacity change from 0 to 65536
[   82.380666][ T8634] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   82.438784][ T6514] bio_check_eod: 34 callbacks suppressed
[   82.438859][ T6514] syz-executor: attempt to access beyond end of device
[   82.438859][ T6514] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   82.438921][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT 
[   82.438938][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   82.438945][ T6514] Call trace:
[   82.438949][ T6514]  show_stack+0x2c/0x3c (C)
[   82.438969][ T6514]  __dump_stack+0x30/0x40
[   82.438983][ T6514]  dump_stack_lvl+0xd8/0x12c
[   82.438996][ T6514]  dump_stack+0x1c/0x28
[   82.439009][ T6514]  f2fs_handle_critical_error+0x34c/0x4b8
[   82.439022][ T6514]  f2fs_stop_checkpoint+0x5c/0x70
[   82.439035][ T6514]  f2fs_write_end_io+0x58c/0x818
[   82.439047][ T6514]  bio_endio+0x804/0x840
[   82.439058][ T6514]  submit_bio_noacct+0x158/0x176c
[   82.439072][ T6514]  submit_bio+0x354/0x4d4
[   82.439084][ T6514]  f2fs_submit_write_bio+0x13c/0x324
[   82.439095][ T6514]  __submit_merged_bio+0x254/0x704
[   82.439106][ T6514]  __submit_merged_write_cond+0x23c/0x4ac
[   82.439117][ T6514]  f2fs_write_data_pages+0x1d28/0x2634
[   82.439129][ T6514]  do_writepages+0x270/0x468
[   82.439144][ T6514]  filemap_fdatawrite+0x144/0x1e8
[   82.439158][ T6514]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   82.439172][ T6514]  f2fs_write_checkpoint+0x684/0x1694
[   82.439185][ T6514]  kill_f2fs_super+0x21c/0x584
[   82.439197][ T6514]  deactivate_locked_super+0xc4/0x12c
[   82.439209][ T6514]  deactivate_super+0xe0/0x100
[   82.439219][ T6514]  cleanup_mnt+0x31c/0x3ac
[   82.439230][ T6514]  __cleanup_mnt+0x20/0x30
[   82.439241][ T6514]  task_work_run+0x1dc/0x260
[   82.439252][ T6514]  do_notify_resume+0x16c/0x1ec
[   82.439264][ T6514]  el0_svc+0xb4/0x17c
[   82.439278][ T6514]  el0t_64_sync_handler+0x78/0x108
[   82.439290][ T6514]  el0t_64_sync+0x198/0x19c
[   82.439670][ T8634] XFS (loop0): Ending clean mount
[   82.445045][ T8634] XFS (loop0): Quotacheck needed: Please wait.
[   82.458741][ T6514] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   82.519088][ T8634] XFS (loop0): Quotacheck: Done.
[   82.624948][ T8691] loop4: detected capacity change from 0 to 32768
[   82.638356][ T8672] loop2: detected capacity change from 0 to 40427
[   82.642638][ T8691] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   82.705701][ T6512] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   82.712714][ T8691] XFS (loop4): Ending clean mount
[   82.716772][ T8691] XFS (loop4): Quotacheck needed: Please wait.
[   82.754372][ T8672] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   82.806023][ T8691] XFS (loop4): Quotacheck: Done.
[   82.895771][ T6513] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.276148][ T8699] loop1: detected capacity change from 0 to 32768
[   83.284194][ T8699] btrfs: Deprecated parameter 'usebackuproot'
[   83.284267][ T8699] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   83.284705][ T8699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.678 (8699)
[   83.328396][ T8699] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.328499][ T8699] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[   83.328538][ T8699] BTRFS info (device loop1): disk space caching is enabled
[   83.328563][ T8699] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   83.413995][ T8733] sp0: Synchronizing with TNC
[   83.556731][ T8717] loop3: detected capacity change from 0 to 40427
[   83.559639][ T8717] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   83.559711][ T8717] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   83.561099][ T8717] F2FS-fs (loop3): invalid crc value
[   83.637191][ T8753] loop4: detected capacity change from 0 to 512
[   83.661580][ T8753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   83.684509][ T8753] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.692: invalid indirect mapped block 4294967295 (level 0)
[   83.687061][ T8753] EXT4-fs (loop4): Remounting filesystem read-only
[   83.687461][ T8753] EXT4-fs (loop4): 1 orphan inode deleted
[   83.687490][ T8753] EXT4-fs (loop4): 1 truncate cleaned up
[   83.688339][ T8753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.703950][ T8717] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   83.704019][ T8717] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   83.847443][ T6513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.907966][ T8729] loop2: detected capacity change from 0 to 32768
[   83.912935][ T8729] (syz.2.683,8729,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   83.920741][ T8729] (syz.2.683,8729,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   83.926530][ T8726] loop0: detected capacity change from 0 to 32768
[   83.945219][ T8699] BTRFS info (device loop1 state M): resize thread pool 4 -> 3
[   83.947525][ T8699] BTRFS info (device loop1 state M): rebuilding free space tree
[   83.947926][ T8729] JBD2: Ignoring recovery information on journal
[   83.951817][ T8699] BTRFS error (device loop1 state M): trying to do action 2 to bytenr 5341184 num_bytes 4096 but there is no existing entry!
[   83.951881][ T8699] BTRFS error (device loop1 state M):   Ref action 2, root 10, ref_root 10, parent 0, owner 0, offset 0, num_refs 18446744073709551615
[   83.951919][ T8699]    btrfs_force_cow_block+0xbf0/0x1bb8
[   83.951958][ T8699]    btrfs_cow_block+0x3f8/0x838
[   83.951990][ T8699]    btrfs_search_slot+0x9c0/0x221c
[   83.952022][ T8699]    clear_free_space_tree+0xc0/0x228
[   83.952053][ T8699]    btrfs_rebuild_free_space_tree+0x10c/0x54c
[   83.952084][ T8699]    btrfs_start_pre_rw_mount+0xa78/0xe10
[   83.952116][ T8699]    btrfs_reconfigure+0x82c/0x2420
[   83.952147][ T8699]    reconfigure_super+0x1d4/0x6f0
[   83.952176][ T8699]    path_mount+0xb34/0xde0
[   83.952204][ T8699]    __arm64_sys_mount+0x3e8/0x468
[   83.952233][ T8699]    invoke_syscall+0x98/0x2b8
[   83.952266][ T8699]    el0_svc_common+0x130/0x23c
[   83.952297][ T8699]    do_el0_svc+0x48/0x58
[   83.952336][ T8699]    el0_svc+0x58/0x17c
[   83.952376][ T8699]    el0t_64_sync_handler+0x78/0x108
[   83.952406][ T8699]    el0t_64_sync+0x198/0x19c
[   83.967714][ T8699] BTRFS info (device loop1 state M): disabling free space tree
[   83.967782][ T8699] BTRFS info (device loop1 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   83.967812][ T8699] BTRFS info (device loop1 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   83.980423][ T8699] BTRFS info (device loop1 state M): enabling ssd optimizations
[   83.980461][ T8699] BTRFS info (device loop1 state M): using spread ssd allocation scheme
[   83.980486][ T8699] BTRFS info (device loop1 state M): turning off barriers
[   83.980510][ T8699] BTRFS info (device loop1 state M): force clearing of disk cache
[   83.980534][ T8699] BTRFS info (device loop1 state M): setting datacow
[   84.016440][ T8729] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   84.105669][ T6515] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.208311][ T8772] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.257422][ T8726] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   84.257465][ T8726]   allowing incompatible features above 0.0: (unknown version)
[   84.257862][ T8726]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   84.257935][ T8726] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   84.258036][ T8726] bcachefs (loop0): recovering from clean shutdown, journal seq 7
[   84.258110][ T8726] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   84.258110][ T8726]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   84.304722][ T6519] ocfs2: Unmounting device (7,2) on (node local)
[   84.311083][ T8726] bcachefs (loop0): accounting_read... done
[   84.386202][ T8726] bcachefs (loop0): alloc_read... done
[   84.386844][ T8726] bcachefs (loop0): snapshots_read... done
[   84.401722][ T8726] bcachefs (loop0): check_allocations...
[   84.402854][ T8726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   84.402873][ T8726]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[   84.436173][ T8726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   84.436224][ T8726]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   84.450768][ T8726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   84.450821][ T8726]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   84.452124][ T8726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   84.452140][ T8726]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   84.473936][ T8726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   84.473985][ T8726]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   84.486459][ T8726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   84.486504][ T8726]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   84.495158][ T8726]  done
[   84.507971][ T8726] bcachefs (loop0): going read-write
[   84.547259][ T8726] bcachefs (loop0): journal_replay... done
[   84.651269][ T8726] bcachefs (loop0): check_extents_to_backpointers...
[   84.652076][ T8726] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets
[   84.657121][ T8726]  done
[   84.660027][ T8726] bcachefs (loop0): check_inodes... done
[   84.661414][ T8726] bcachefs (loop0): resume_logged_ops... done
[   84.662219][ T8726] bcachefs (loop0): delete_dead_inodes... done
[   84.677747][ T8726] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[   84.677801][ T8726] bcachefs (loop0): check_extents_to_backpointers... done
[   84.679551][ T8726] bcachefs (loop0): check_inodes... done
[   84.680585][ T8726] bcachefs (loop0): resume_logged_ops... done
[   84.681146][ T8726] bcachefs (loop0): delete_dead_inodes... done
[   84.693166][ T8726] bcachefs (loop0): done starting filesystem
[   84.767401][ T8789] loop2: detected capacity change from 0 to 40427
[   84.791096][ T8789] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   84.791167][ T8789] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   84.791693][ T8789] F2FS-fs (loop2): build fault injection rate: 17008
[   84.791725][ T8789] F2FS-fs (loop2): build fault injection type: 0x6
[   84.791751][ T8789] F2FS-fs (loop2): build fault injection type: 0x5
[   84.793009][ T8789] F2FS-fs (loop2): invalid crc value
[   84.848971][ T7373] udevd[7373]: incorrect bcachefs checksum on /dev/loop0
[   84.857857][ T6512] bcachefs (loop0): shutting down
[   84.857908][ T6512] bcachefs (loop0): going read-only
[   84.857953][ T6512] bcachefs (loop0): finished waiting for writes to stop
[   84.882999][ T8789] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   84.883061][ T8789] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   84.902011][ T8800] loop4: detected capacity change from 0 to 4096
[   84.975648][ T6512] bcachefs (loop0): flushing journal and stopping allocators, journal seq 16
[   84.982734][ T6512] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17
[   84.995897][ T6512] bcachefs (loop0): clean shutdown complete, journal seq 18
[   84.996701][ T6512] bcachefs (loop0): marking filesystem clean
[   85.011612][ T8789] syz.2.702: attempt to access beyond end of device
[   85.011612][ T8789] loop2: rw=34817, sector=53248, nr_sectors = 512 limit=40427
[   85.042788][ T7372] udevd[7372]: incorrect bcachefs checksum on /dev/loop0
[   85.071886][ T8810] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.075499][ T6519] syz-executor: attempt to access beyond end of device
[   85.075499][ T6519] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   85.075587][ T6519] CPU: 0 UID: 0 PID: 6519 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT 
[   85.075604][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   85.075612][ T6519] Call trace:
[   85.075617][ T6519]  show_stack+0x2c/0x3c (C)
[   85.075637][ T6519]  __dump_stack+0x30/0x40
[   85.075652][ T6519]  dump_stack_lvl+0xd8/0x12c
[   85.075665][ T6519]  dump_stack+0x1c/0x28
[   85.075678][ T6519]  f2fs_handle_critical_error+0x34c/0x4b8
[   85.075691][ T6519]  f2fs_stop_checkpoint+0x5c/0x70
[   85.075703][ T6519]  f2fs_write_end_io+0x58c/0x818
[   85.075716][ T6519]  bio_endio+0x804/0x840
[   85.075727][ T6519]  submit_bio_noacct+0x158/0x176c
[   85.075741][ T6519]  submit_bio+0x354/0x4d4
[   85.075753][ T6519]  f2fs_submit_write_bio+0x13c/0x324
[   85.075764][ T6519]  __submit_merged_bio+0x254/0x704
[   85.075775][ T6519]  __submit_merged_write_cond+0x23c/0x4ac
[   85.075787][ T6519]  f2fs_write_data_pages+0x1d28/0x2634
[   85.075798][ T6519]  do_writepages+0x270/0x468
[   85.075813][ T6519]  filemap_fdatawrite+0x144/0x1e8
[   85.075827][ T6519]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   85.075841][ T6519]  f2fs_write_checkpoint+0x684/0x1694
[   85.075855][ T6519]  kill_f2fs_super+0x21c/0x584
[   85.075866][ T6519]  deactivate_locked_super+0xc4/0x12c
[   85.075878][ T6519]  deactivate_super+0xe0/0x100
[   85.075888][ T6519]  cleanup_mnt+0x31c/0x3ac
[   85.075899][ T6519]  __cleanup_mnt+0x20/0x30
[   85.075910][ T6519]  task_work_run+0x1dc/0x260
[   85.075922][ T6519]  do_notify_resume+0x16c/0x1ec
[   85.075934][ T6519]  el0_svc+0xb4/0x17c
[   85.075947][ T6519]  el0t_64_sync_handler+0x78/0x108
[   85.075960][ T6519]  el0t_64_sync+0x198/0x19c
[   85.076151][ T6519] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   85.132455][ T8800] nilfs2: Unexpected value for 'norecovery'
[   85.212082][ T7372] udevd[7372]: incorrect bcachefs checksum on /dev/loop0
[   85.235507][ T6512] bcachefs (loop0): shutdown complete
[   85.542644][ T6662] udevd[6662]: incorrect bcachefs checksum on /dev/loop0
[   85.719271][ T8822] loop4: detected capacity change from 0 to 32768
[   85.731919][ T8822] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.717 (8822)
[   85.753082][ T8822] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.753188][ T8822] BTRFS info (device loop4): using sha256 (sha256-arm64) checksum algorithm
[   85.753249][ T8822] BTRFS info (device loop4): using free-space-tree
[   85.766259][ T6662] udevd[6662]: incorrect bcachefs checksum on /dev/loop0
[   85.925032][ T6662] udevd[6662]: incorrect bcachefs checksum on /dev/loop0
[   86.016875][ T8830] loop1: detected capacity change from 0 to 40427
[   86.024042][ T8830] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   86.024103][ T8830] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   86.128676][ T6662] udevd[6662]: incorrect bcachefs checksum on /dev/loop0
[   86.134621][ T6513] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   86.139130][ T8830] F2FS-fs (loop1): invalid crc value
[   86.148650][ T8832] loop2: detected capacity change from 0 to 32768
[   86.149892][ T8832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.713 (8832)
[   86.174954][ T8832] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.175058][ T8832] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm
[   86.175095][ T8832] BTRFS info (device loop2): using free-space-tree
[   86.195651][ T8830] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   86.195737][ T8830] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   86.425481][ T6519] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.542535][ T8855] loop3: detected capacity change from 0 to 40427
[   86.551676][ T8855] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   86.551742][ T8855] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   86.551972][ T8855] F2FS-fs (loop3): build fault injection rate: 17008
[   86.552002][ T8855] F2FS-fs (loop3): build fault injection type: 0x6
[   86.552027][ T8855] F2FS-fs (loop3): build fault injection type: 0x5
[   86.562072][ T8855] F2FS-fs (loop3): invalid crc value
[   86.693528][ T8855] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   86.693601][ T8855] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   86.770157][ T8855] syz.3.724: attempt to access beyond end of device
[   86.770157][ T8855] loop3: rw=34817, sector=53248, nr_sectors = 512 limit=40427
[   86.928840][ T6514] syz-executor: attempt to access beyond end of device
[   86.928840][ T6514] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   86.938351][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT 
[   86.938376][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   86.938384][ T6514] Call trace:
[   86.938388][ T6514]  show_stack+0x2c/0x3c (C)
[   86.938409][ T6514]  __dump_stack+0x30/0x40
[   86.938423][ T6514]  dump_stack_lvl+0xd8/0x12c
[   86.938436][ T6514]  dump_stack+0x1c/0x28
[   86.938449][ T6514]  f2fs_handle_critical_error+0x34c/0x4b8
[   86.938462][ T6514]  f2fs_stop_checkpoint+0x5c/0x70
[   86.938475][ T6514]  f2fs_write_end_io+0x58c/0x818
[   86.938487][ T6514]  bio_endio+0x804/0x840
[   86.938498][ T6514]  submit_bio_noacct+0x158/0x176c
[   86.938511][ T6514]  submit_bio+0x354/0x4d4
[   86.938524][ T6514]  f2fs_submit_write_bio+0x13c/0x324
[   86.938535][ T6514]  __submit_merged_bio+0x254/0x704
[   86.938546][ T6514]  __submit_merged_write_cond+0x23c/0x4ac
[   86.938557][ T6514]  f2fs_write_data_pages+0x1d28/0x2634
[   86.938569][ T6514]  do_writepages+0x270/0x468
[   86.938584][ T6514]  filemap_fdatawrite+0x144/0x1e8
[   86.938598][ T6514]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   86.938612][ T6514]  f2fs_write_checkpoint+0x684/0x1694
[   86.938626][ T6514]  kill_f2fs_super+0x21c/0x584
[   86.938638][ T6514]  deactivate_locked_super+0xc4/0x12c
[   86.938649][ T6514]  deactivate_super+0xe0/0x100
[   86.938659][ T6514]  cleanup_mnt+0x31c/0x3ac
[   86.938671][ T6514]  __cleanup_mnt+0x20/0x30
[   86.938682][ T6514]  task_work_run+0x1dc/0x260
[   86.938693][ T6514]  do_notify_resume+0x16c/0x1ec
[   86.938704][ T6514]  el0_svc+0xb4/0x17c
[   86.938718][ T6514]  el0t_64_sync_handler+0x78/0x108
[   86.938730][ T6514]  el0t_64_sync+0x198/0x19c
[   86.953499][ T6514] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   87.148626][ T8878] loop2: detected capacity change from 0 to 32768
[   87.301633][ T8882] loop1: detected capacity change from 0 to 32768
[   87.310263][ T8882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.727 (8882)
[   87.312331][ T8882] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.312408][ T8882] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[   87.312447][ T8882] BTRFS info (device loop1): using free-space-tree
[   87.391617][ T8878] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[   87.391674][ T8878]   allowing incompatible features above 0.0: (unknown version)
[   87.392211][ T8878]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   87.392268][ T8878] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   87.392308][ T8878] bcachefs (loop2): initializing new filesystem
[   87.396788][ T8878] bcachefs (loop2): going read-write
[   87.445510][ T8878] bcachefs (loop2): marking superblocks
[   87.467004][ T8878] bcachefs (loop2): initializing freespace
[   87.470563][ T8878] bcachefs (loop2): done initializing freespace
[   87.475782][ T8878] bcachefs (loop2): reading snapshots table
[   87.475864][ T8878] bcachefs (loop2): reading snapshots done
[   87.497173][ T8878] bcachefs (loop2): done starting filesystem
[   87.535031][ T6515] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.696393][ T6519] bcachefs (loop2): shutting down
[   87.696465][ T6519] bcachefs (loop2): going read-only
[   87.696496][ T6519] bcachefs (loop2): finished waiting for writes to stop
[   87.742106][ T8932] loop4: detected capacity change from 0 to 1024
[   87.769149][ T6519] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[   87.908724][ T6513] hfsplus: bad catalog entry type
[   87.968866][ T8943] loop0: detected capacity change from 0 to 64
[   87.995514][ T2162] hfsplus: b-tree write err: -5, ino 4
[   88.045679][ T6519] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   88.046490][ T6519] bcachefs (loop2): clean shutdown complete, journal seq 4
[   88.047252][ T6519] bcachefs (loop2): marking filesystem clean
[   88.072167][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'.
[   88.156881][ T6519] bcachefs (loop2): shutdown complete
[   88.402416][ T8961] loop0: detected capacity change from 0 to 1024
[   88.486399][ T6512] hfsplus: bad catalog entry type
[   88.839053][ T6517] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.842250][ T6517] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.846112][ T6517] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.847681][ T6517] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.848363][ T6517] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.976291][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.998826][  T792] hfsplus: b-tree write err: -5, ino 4
[   89.204587][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.335925][ T6524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.338160][ T6524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.340196][ T6524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.342932][ T6524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.347879][ T6524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.367089][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.464975][ T8977] loop1: detected capacity change from 0 to 32768
[   89.482024][ T8977] 
[   89.482024][ T8977]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   89.482024][ T8977] 
[   89.514972][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.540353][ T6515] 
[   89.540353][ T6515]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   89.540353][ T6515] 
[   89.541407][ T6515] 
[   89.541407][ T6515]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   89.541407][ T6515] 
[   89.709974][ T8970] chnl_net:caif_netlink_parms(): no params data found
[   89.846903][ T8986] loop3: detected capacity change from 0 to 40427
[   89.872782][ T8986] F2FS-fs (loop3): invalid crc value
[   89.943781][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.943875][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.944042][ T8970] bridge_slave_0: entered allmulticast mode
[   89.944939][ T8970] bridge_slave_0: entered promiscuous mode
[   89.981178][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.981261][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.981394][ T8970] bridge_slave_1: entered allmulticast mode
[   89.982274][ T8970] bridge_slave_1: entered promiscuous mode
[   89.983114][ T8986] F2FS-fs (loop3): Start checkpoint disabled!
[   90.006145][ T8986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   90.076112][   T13] bridge_slave_1: left allmulticast mode
[   90.078006][   T13] bridge_slave_1: left promiscuous mode
[   90.082096][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.099091][   T13] bridge_slave_0: left allmulticast mode
[   90.100872][   T13] bridge_slave_0: left promiscuous mode
[   90.102676][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.497540][ T8998] loop1: detected capacity change from 0 to 65536
[   90.508911][ T8998] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   90.541219][ T8998] XFS (loop1): Ending clean mount
[   90.554420][ T9004] loop2: detected capacity change from 0 to 40427
[   90.557229][ T9004] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   90.559398][ T9004] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   90.583949][ T9004] F2FS-fs (loop2): invalid crc value
[   90.607533][ T6515] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   90.635635][ T9004] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   90.638051][ T9004] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   90.907979][ T6524] Bluetooth: hci0: command tx timeout
[   91.108475][ T9020] loop1: detected capacity change from 0 to 32768
[   91.220433][ T9020] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[   91.231938][ T9020]   allowing incompatible features above 0.0: (unknown version)
[   91.238988][ T9020]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   91.243495][ T9020] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   91.245928][ T9020] bcachefs (loop1): initializing new filesystem
[   91.251730][ T9020] bcachefs (loop1): going read-write
[   91.293574][ T9020] bcachefs (loop1): marking superblocks
[   91.298616][ T9020] bcachefs (loop1): initializing freespace
[   91.311555][ T9020] bcachefs (loop1): done initializing freespace
[   91.315019][ T9020] bcachefs (loop1): reading snapshots table
[   91.315110][ T9020] bcachefs (loop1): reading snapshots done
[   91.328007][ T9020] bcachefs (loop1):  loop1: Superblock write was silently dropped! (seq 0 expected 42)
[   91.328535][ T9020] bcachefs (loop1): done starting filesystem
[   91.383592][ T6524] Bluetooth: hci1: command tx timeout
[   91.400226][ T6515] bcachefs (loop1): shutting down
[   91.402051][ T6515] bcachefs (loop1): going read-only
[   91.402117][ T6515] bcachefs (loop1): finished waiting for writes to stop
[   91.434529][ T6515] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[   91.492130][ T6515] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   91.493761][ T6515] bcachefs (loop1): clean shutdown complete, journal seq 4
[   91.494640][ T6515] bcachefs (loop1): marking filesystem clean
[   91.520979][ T6515] bcachefs (loop1): shutdown complete
[   91.879087][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.926059][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.976369][   T13] bond0 (unregistering): Released all slaves
[   91.998790][ T8970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.031936][ T8970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.179764][ T8970] team0: Port device team_slave_0 added
[   92.181339][ T8970] team0: Port device team_slave_1 added
[   92.500702][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.500769][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.502805][ T8970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.504137][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.504165][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.504208][ T8970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.665218][ T8970] hsr_slave_0: entered promiscuous mode
[   92.665839][ T8970] hsr_slave_1: entered promiscuous mode
[   92.666398][ T8970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.666438][ T8970] Cannot create hsr debugfs directory
[   92.714717][ T9073] loop2: detected capacity change from 0 to 1024
[   92.823911][ T9054] loop3: detected capacity change from 0 to 32768
[   92.983517][ T6524] Bluetooth: hci0: command tx timeout
[   93.091035][ T9054] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc
[   93.104603][ T9054]   allowing incompatible features above 0.0: (unknown version)
[   93.104656][ T9054]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   93.104729][ T9054] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   93.107716][ T9054] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad nr_required in entry journal: 4/1 [0], fixing
[   93.107816][ T9054] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[   93.107950][ T9054] bcachefs (loop3): Version upgrade required:
[   93.107950][ T9054] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   93.107950][ T9054] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   93.107950][ T9054]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   93.108139][ T9054] bcachefs (loop3): dropping and reconstructing all alloc info
[   93.123919][   T13] hsr_slave_0: left promiscuous mode
[   93.148467][   T13] hsr_slave_1: left promiscuous mode
[   93.149087][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.149160][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.157481][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.157558][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.164905][ T9054] bcachefs (loop3): accounting_read... done
[   93.188296][ T9054] bcachefs (loop3): alloc_read... done
[   93.188486][ T9054] bcachefs (loop3): snapshots_read... done
[   93.188696][ T9054] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[   93.188979][ T9054] bcachefs (loop3): done starting filesystem
[   93.287081][   T13] veth1_macvtap: left promiscuous mode
[   93.287353][   T13] veth0_macvtap: left promiscuous mode
[   93.287499][   T13] veth1_vlan: left promiscuous mode
[   93.288705][   T13] veth0_vlan: left promiscuous mode
[   93.382009][ T6514] bcachefs (loop3): shutting down
[   93.445678][ T6514] bcachefs (loop3): shutdown complete
[   93.463590][ T6524] Bluetooth: hci1: command tx timeout
[   93.725801][ T9092] loop2: detected capacity change from 0 to 32768
[   94.030256][ T9110] loop2: detected capacity change from 0 to 1024
[   94.420404][ T9116] loop2: detected capacity change from 0 to 40427
[   94.427677][ T9116] F2FS-fs (loop2): build fault injection rate: 771
[   94.431120][ T9116] F2FS-fs (loop2): invalid crc value
[   94.463741][ T9116] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   94.483225][ T6519] syz-executor: attempt to access beyond end of device
[   94.483225][ T6519] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   94.483321][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT 
[   94.483347][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   94.483355][ T6519] Call trace:
[   94.483360][ T6519]  show_stack+0x2c/0x3c (C)
[   94.483380][ T6519]  __dump_stack+0x30/0x40
[   94.483395][ T6519]  dump_stack_lvl+0xd8/0x12c
[   94.483408][ T6519]  dump_stack+0x1c/0x28
[   94.483427][ T6519]  f2fs_handle_critical_error+0x34c/0x4b8
[   94.483440][ T6519]  f2fs_stop_checkpoint+0x5c/0x70
[   94.483453][ T6519]  f2fs_write_end_io+0x58c/0x818
[   94.483465][ T6519]  bio_endio+0x804/0x840
[   94.483477][ T6519]  submit_bio_noacct+0x158/0x176c
[   94.483491][ T6519]  submit_bio+0x354/0x4d4
[   94.483503][ T6519]  f2fs_submit_write_bio+0x13c/0x324
[   94.483515][ T6519]  __submit_merged_bio+0x254/0x704
[   94.483526][ T6519]  __submit_merged_write_cond+0x23c/0x4ac
[   94.483537][ T6519]  f2fs_write_data_pages+0x1d28/0x2634
[   94.483549][ T6519]  do_writepages+0x270/0x468
[   94.483564][ T6519]  filemap_fdatawrite+0x144/0x1e8
[   94.483579][ T6519]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   94.483593][ T6519]  f2fs_write_checkpoint+0x684/0x1694
[   94.483607][ T6519]  kill_f2fs_super+0x21c/0x584
[   94.483619][ T6519]  deactivate_locked_super+0xc4/0x12c
[   94.483631][ T6519]  deactivate_super+0xe0/0x100
[   94.483641][ T6519]  cleanup_mnt+0x31c/0x3ac
[   94.483658][ T6519]  __cleanup_mnt+0x20/0x30
[   94.483669][ T6519]  task_work_run+0x1dc/0x260
[   94.483681][ T6519]  do_notify_resume+0x16c/0x1ec
[   94.483693][ T6519]  el0_svc+0xb4/0x17c
[   94.483706][ T6519]  el0t_64_sync_handler+0x78/0x108
[   94.483719][ T6519]  el0t_64_sync+0x198/0x19c
[   94.495527][ T6519] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   94.910304][ T9124] loop3: detected capacity change from 0 to 2048
[   94.921474][ T9124] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   94.921535][ T9124] UDF-fs: Scanning with blocksize 512 failed
[   94.931013][ T9124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.058717][   T13] team0 (unregistering): Port device team_slave_1 removed
[   95.065440][ T6524] Bluetooth: hci0: command tx timeout
[   95.240330][ T9128] loop3: detected capacity change from 0 to 32768
[   95.256526][   T13] team0 (unregistering): Port device team_slave_0 removed
[   95.553614][ T6524] Bluetooth: hci1: command tx timeout
[   95.727993][ T9134] loop3: detected capacity change from 0 to 40427
[   95.732704][ T9134] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   95.735195][ T9134] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   95.741580][ T9134] F2FS-fs (loop3): invalid crc value
[   95.791448][ T9134] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   95.791511][ T9134] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   96.126964][ T9144] loop3: detected capacity change from 0 to 4096
[   96.129942][ T9144] EXT4-fs: inline encryption not supported
[   96.132046][ T9144] EXT4-fs (loop3): Test dummy encryption mode enabled
[   96.144456][ T9144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.196492][ T9144] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   96.214178][ T6514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.153515][ T6524] Bluetooth: hci0: command tx timeout
[   97.366713][ T8983] chnl_net:caif_netlink_parms(): no params data found
[   97.633539][ T6524] Bluetooth: hci1: command tx timeout
[   97.813569][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.813652][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.813851][ T8983] bridge_slave_0: entered allmulticast mode
[   97.814775][ T8983] bridge_slave_0: entered promiscuous mode
[   97.831913][ T8970] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   97.839065][ T9156] loop1: detected capacity change from 0 to 40427
[   97.859712][ T9156] F2FS-fs (loop1): Invalid segment count (1)
[   97.859777][ T9156] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   97.866489][ T9156] F2FS-fs (loop1): heap/no_heap options were deprecated
[   97.868014][ T8970] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   97.885475][ T9156] F2FS-fs (loop1): invalid crc value
[   97.920497][ T9177] loop2: detected capacity change from 0 to 4096
[   97.921076][ T9177] EXT4-fs: inline encryption not supported
[   97.923564][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.923616][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.923770][ T8983] bridge_slave_1: entered allmulticast mode
[   97.924703][ T8983] bridge_slave_1: entered promiscuous mode
[   97.932014][ T8970] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   97.956225][ T8970] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   97.967609][ T9177] EXT4-fs (loop2): Test dummy encryption mode enabled
[   97.985297][ T9177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.997111][ T9156] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[   97.997173][ T9156] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   98.054007][ T9177] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   98.118981][ T6519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.173173][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.206260][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.249033][ T9198] loop1: detected capacity change from 0 to 2048
[   98.284867][ T9198] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   98.284935][ T9198] UDF-fs: Scanning with blocksize 512 failed
[   98.288897][ T9198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.428626][ T9197] loop3: detected capacity change from 0 to 32768
[   98.528428][ T9210] loop2: detected capacity change from 0 to 128
[   98.532246][ T9210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   98.537066][ T9210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.552856][ T9210] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[   98.553072][ T9210] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null.
[   98.711488][ T8983] team0: Port device team_slave_0 added
[   98.720211][ T8983] team0: Port device team_slave_1 added
[   98.859843][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.900873][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.900934][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.901004][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.904397][ T9218] loop2: detected capacity change from 0 to 2048
[   98.908759][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.908790][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.908842][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.913157][ T9218] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   98.913190][ T9218] UDF-fs: Scanning with blocksize 512 failed
[   98.948249][ T9218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.985114][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.181035][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.271472][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.290772][ T8983] hsr_slave_0: entered promiscuous mode
[   99.291353][ T8983] hsr_slave_1: entered promiscuous mode
[   99.291690][ T8983] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.291720][ T8983] Cannot create hsr debugfs directory
[   99.402107][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.541806][ T8970] 8021q: adding VLAN 0 to HW filter on device team0
[   99.577638][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.577721][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.587975][ T9229] loop2: detected capacity change from 0 to 40427
[   99.593601][ T9229] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[   99.593656][ T9229] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   99.600048][ T9229] F2FS-fs (loop2): invalid crc value
[   99.646603][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.646702][ T1639] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.651992][ T9229] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   99.652057][ T9229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   99.699121][ T9229] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   99.778548][ T9253] loop3: detected capacity change from 0 to 2048
[   99.814947][ T9253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.036941][   T13] bridge_slave_1: left allmulticast mode
[  100.037013][   T13] bridge_slave_1: left promiscuous mode
[  100.037750][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.141297][   T13] bridge_slave_0: left allmulticast mode
[  100.141368][   T13] bridge_slave_0: left promiscuous mode
[  100.141505][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.179839][ T9272] loop2: detected capacity change from 0 to 64
[  100.293470][ T9277] nbd: couldn't find a device at index 1996488704
[  100.978359][ T9282] loop1: detected capacity change from 0 to 32768
[  101.028645][ T9282] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  101.170723][ T9282] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  101.227267][ T9282] 
[  101.228035][ T9282] ======================================================
[  101.230028][ T9282] WARNING: possible circular locking dependency detected
[  101.232043][ T9282] 6.16.0-rc4-syzkaller-g6625c855789e #0 Not tainted
[  101.233955][ T9282] ------------------------------------------------------
[  101.235920][ T9282] syz.1.855/9282 is trying to acquire lock:
[  101.237517][ T9282] ffff0000dea7a378 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_get+0xe8/0x220
[  101.240134][ T9282] 
[  101.240134][ T9282] but task is already holding lock:
[  101.242283][ T9282] ffff000103938950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc
[  101.244823][ T9282] 
[  101.244823][ T9282] which lock already depends on the new lock.
[  101.244823][ T9282] 
[  101.247754][ T9282] 
[  101.247754][ T9282] the existing dependency chain (in reverse order) is:
[  101.250250][ T9282] 
[  101.250250][ T9282] -> #4 (jbd2_handle){++++}-{0:0}:
[  101.252382][ T9282]        start_this_handle+0xe74/0x10dc
[  101.253974][ T9282]        jbd2__journal_start+0x288/0x51c
[  101.255591][ T9282]        jbd2_journal_start+0x3c/0x4c
[  101.257121][ T9282]        ocfs2_start_trans+0x368/0x6b0
[  101.258724][ T9282]        ocfs2_fileattr_set+0x270/0x658
[  101.260313][ T9282]        vfs_fileattr_set+0x674/0x8fc
[  101.261823][ T9282]        do_vfs_ioctl+0x147c/0x1cd8
[  101.263237][ T9282]        __arm64_sys_ioctl+0xe4/0x1c4
[  101.264754][ T9282]        invoke_syscall+0x98/0x2b8
[  101.266196][ T9282]        el0_svc_common+0x130/0x23c
[  101.267681][ T9282]        do_el0_svc+0x48/0x58
[  101.269004][ T9282]        el0_svc+0x58/0x17c
[  101.270303][ T9282]        el0t_64_sync_handler+0x78/0x108
[  101.271827][ T9282]        el0t_64_sync+0x198/0x19c
[  101.273290][ T9282] 
[  101.273290][ T9282] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  101.275697][ T9282]        down_read+0x58/0x2f8
[  101.277037][ T9282]        ocfs2_start_trans+0x35c/0x6b0
[  101.278643][ T9282]        ocfs2_fileattr_set+0x270/0x658
[  101.280187][ T9282]        vfs_fileattr_set+0x674/0x8fc
[  101.281691][ T9282]        do_vfs_ioctl+0x147c/0x1cd8
[  101.283164][ T9282]        __arm64_sys_ioctl+0xe4/0x1c4
[  101.284701][ T9282]        invoke_syscall+0x98/0x2b8
[  101.286133][ T9282]        el0_svc_common+0x130/0x23c
[  101.287580][ T9282]        do_el0_svc+0x48/0x58
[  101.288951][ T9282]        el0_svc+0x58/0x17c
[  101.290215][ T9282]        el0t_64_sync_handler+0x78/0x108
[  101.291813][ T9282]        el0t_64_sync+0x198/0x19c
[  101.293212][ T9282] 
[  101.293212][ T9282] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  101.295311][ T9282]        ocfs2_start_trans+0x1f4/0x6b0
[  101.296835][ T9282]        ocfs2_xattr_set+0xac4/0xe9c
[  101.298332][ T9282]        ocfs2_xattr_trusted_set+0x4c/0x64
[  101.300011][ T9282]        __vfs_setxattr+0x3d8/0x400
[  101.301572][ T9282]        __vfs_setxattr_noperm+0x120/0x5c4
[  101.303234][ T9282]        __vfs_setxattr_locked+0x1ec/0x218
[  101.304908][ T9282]        vfs_setxattr+0x158/0x2ac
[  101.306298][ T9282]        filename_setxattr+0x20c/0x4f8
[  101.307981][ T9282]        path_setxattrat+0x2e8/0x320
[  101.309658][ T9282]        __arm64_sys_setxattr+0xc0/0xdc
[  101.311241][ T9282]        invoke_syscall+0x98/0x2b8
[  101.312722][ T9282]        el0_svc_common+0x130/0x23c
[  101.314193][ T9282]        do_el0_svc+0x48/0x58
[  101.315476][ T9282]        el0_svc+0x58/0x17c
[  101.316717][ T9282]        el0t_64_sync_handler+0x78/0x108
[  101.318263][ T9282]        el0t_64_sync+0x198/0x19c
[  101.319710][ T9282] 
[  101.319710][ T9282] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}:
[  101.322782][ T9282]        down_write+0x50/0xc0
[  101.324088][ T9282]        ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[  101.325926][ T9282]        ocfs2_reserve_new_metadata_blocks+0x368/0x810
[  101.328012][ T9282]        ocfs2_init_xattr_set_ctxt+0x318/0x774
[  101.330006][ T9282]        ocfs2_xattr_set+0x920/0xe9c
[  101.332024][ T9282]        ocfs2_xattr_trusted_set+0x4c/0x64
[  101.334087][ T9282]        __vfs_setxattr+0x3d8/0x400
[  101.335576][ T9282]        __vfs_setxattr_noperm+0x120/0x5c4
[  101.337187][ T9282]        __vfs_setxattr_locked+0x1ec/0x218
[  101.338806][ T9282]        vfs_setxattr+0x158/0x2ac
[  101.340277][ T9282]        filename_setxattr+0x20c/0x4f8
[  101.341834][ T9282]        path_setxattrat+0x2e8/0x320
[  101.343337][ T9282]        __arm64_sys_setxattr+0xc0/0xdc
[  101.344934][ T9282]        invoke_syscall+0x98/0x2b8
[  101.346358][ T9282]        el0_svc_common+0x130/0x23c
[  101.347763][ T9282]        do_el0_svc+0x48/0x58
[  101.349107][ T9282]        el0_svc+0x58/0x17c
[  101.350396][ T9282]        el0t_64_sync_handler+0x78/0x108
[  101.351956][ T9282]        el0t_64_sync+0x198/0x19c
[  101.353354][ T9282] 
[  101.353354][ T9282] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  101.355575][ T9282]        __lock_acquire+0x1774/0x30a4
[  101.357056][ T9282]        lock_acquire+0x14c/0x2e0
[  101.358467][ T9282]        down_read+0x58/0x2f8
[  101.359767][ T9282]        ocfs2_xattr_get+0xe8/0x220
[  101.361297][ T9282]        ocfs2_xattr_security_get+0x40/0x54
[  101.363029][ T9282]        __vfs_getxattr+0x394/0x3c0
[  101.364468][ T9282]        smk_fetch+0xc4/0x150
[  101.365744][ T9282]        smack_d_instantiate+0x53c/0x7a4
[  101.367377][ T9282]        security_d_instantiate+0x100/0x204
[  101.369089][ T9282]        d_instantiate+0x5c/0x9c
[  101.370537][ T9282]        ocfs2_mknod+0x151c/0x1cf0
[  101.372054][ T9282]        ocfs2_create+0x190/0x474
[  101.373518][ T9282]        path_openat+0x12d8/0x2c40
[  101.374995][ T9282]        do_filp_open+0x18c/0x36c
[  101.376447][ T9282]        do_sys_openat2+0x11c/0x1b4
[  101.377942][ T9282]        __arm64_sys_openat+0x120/0x158
[  101.379593][ T9282]        invoke_syscall+0x98/0x2b8
[  101.381099][ T9282]        el0_svc_common+0x130/0x23c
[  101.382589][ T9282]        do_el0_svc+0x48/0x58
[  101.383900][ T9282]        el0_svc+0x58/0x17c
[  101.385114][ T9282]        el0t_64_sync_handler+0x78/0x108
[  101.386717][ T9282]        el0t_64_sync+0x198/0x19c
[  101.388138][ T9282] 
[  101.388138][ T9282] other info that might help us debug this:
[  101.388138][ T9282] 
[  101.390985][ T9282] Chain exists of:
[  101.390985][ T9282]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  101.390985][ T9282] 
[  101.394878][ T9282]  Possible unsafe locking scenario:
[  101.394878][ T9282] 
[  101.397067][ T9282]        CPU0                    CPU1
[  101.398575][ T9282]        ----                    ----
[  101.400063][ T9282]   rlock(jbd2_handle);
[  101.401278][ T9282]                                lock(&journal->j_trans_barrier);
[  101.403486][ T9282]                                lock(jbd2_handle);
[  101.405350][ T9282]   rlock(&oi->ip_xattr_sem);
[  101.406661][ T9282] 
[  101.406661][ T9282]  *** DEADLOCK ***
[  101.406661][ T9282] 
[  101.408963][ T9282] 8 locks held by syz.1.855/9282:
[  101.410385][ T9282]  #0: ffff0000cd646428 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[  101.412999][ T9282]  #1: ffff0000f5c742c0 (&type->i_mutex_dir_key#16){+.+.}-{4:4}, at: path_openat+0x638/0x2c40
[  101.415990][ T9282]  #2: ffff0000dea7df40 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[  101.419951][ T9282]  #3: ffff0000f5c709c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[  101.423886][ T9282]  #4: ffff0000f5c73480 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c
[  101.427736][ T9282]  #5: ffff0000cd646618 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0xc50/0x1cf0
[  101.430376][ T9282]  #6: ffff0000c84e80e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0
[  101.433349][ T9282]  #7: ffff000103938950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc
[  101.436121][ T9282] 
[  101.436121][ T9282] stack backtrace:
[  101.437808][ T9282] CPU: 0 UID: 0 PID: 9282 Comm: syz.1.855 Not tainted 6.16.0-rc4-syzkaller-g6625c855789e #0 PREEMPT 
[  101.440821][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  101.443551][ T9282] Call trace:
[  101.444446][ T9282]  show_stack+0x2c/0x3c (C)
[  101.445717][ T9282]  __dump_stack+0x30/0x40
[  101.446955][ T9282]  dump_stack_lvl+0xd8/0x12c
[  101.448254][ T9282]  dump_stack+0x1c/0x28
[  101.449446][ T9282]  print_circular_bug+0x324/0x32c
[  101.450847][ T9282]  check_noncircular+0x154/0x174
[  101.452216][ T9282]  __lock_acquire+0x1774/0x30a4
[  101.453548][ T9282]  lock_acquire+0x14c/0x2e0
[  101.454830][ T9282]  down_read+0x58/0x2f8
[  101.455951][ T9282]  ocfs2_xattr_get+0xe8/0x220
[  101.457279][ T9282]  ocfs2_xattr_security_get+0x40/0x54
[  101.458856][ T9282]  __vfs_getxattr+0x394/0x3c0
[  101.460185][ T9282]  smk_fetch+0xc4/0x150
[  101.461295][ T9282]  smack_d_instantiate+0x53c/0x7a4
[  101.462746][ T9282]  security_d_instantiate+0x100/0x204
[  101.464301][ T9282]  d_instantiate+0x5c/0x9c
[  101.465540][ T9282]  ocfs2_mknod+0x151c/0x1cf0
[  101.466804][ T9282]  ocfs2_create+0x190/0x474
[  101.468063][ T9282]  path_openat+0x12d8/0x2c40
[  101.469371][ T9282]  do_filp_open+0x18c/0x36c
[  101.470591][ T9282]  do_sys_openat2+0x11c/0x1b4
[  101.471917][ T9282]  __arm64_sys_openat+0x120/0x158
[  101.473304][ T9282]  invoke_syscall+0x98/0x2b8
[  101.474624][ T9282]  el0_svc_common+0x130/0x23c
[  101.475934][ T9282]  do_el0_svc+0x48/0x58
[  101.477120][ T9282]  el0_svc+0x58/0x17c
[  101.478223][ T9282]  el0t_64_sync_handler+0x78/0x108
[  101.479714][ T9282]  el0t_64_sync+0x198/0x19c
[  101.543632][ T6515] ocfs2: Unmounting device (7,1) on (node local)
[  101.600726][ T9286] loop3: detected capacity change from 0 to 32768
[  101.808886][ T9286] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  101.872867][ T6514] ocfs2: Unmounting device (7,3) on (node local)
[  102.875128][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.916480][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.968490][   T13] bond0 (unregistering): Released all slaves
[  102.996721][ T8983] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  103.008258][ T8983] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  103.015877][ T8983] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  103.027281][ T8983] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  103.308058][ T8970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.238056][ T8983] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.282558][ T8983] 8021q: adding VLAN 0 to HW filter on device team0
[  104.299919][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.299988][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.308961][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.309043][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.920819][ T8970] veth0_vlan: entered promiscuous mode
[  104.930991][ T8970] veth1_vlan: entered promiscuous mode
[  104.963975][ T8970] veth0_macvtap: entered promiscuous mode
[  105.068681][ T8970] veth1_macvtap: entered promiscuous mode
[  105.187848][   T13] hsr_slave_0: left promiscuous mode
[  105.201340][   T13] hsr_slave_1: left promiscuous mode
[  105.209430][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.211730][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.217978][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.218041][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.240694][   T13] veth1_macvtap: left promiscuous mode
[  105.242336][   T13] veth0_macvtap: left promiscuous mode
[  105.245469][   T13] veth1_vlan: left promiscuous mode
[  105.247080][   T13] veth0_vlan: left promiscuous mode
[  107.339840][   T13] team0 (unregistering): Port device team_slave_1 removed
[  107.516534][   T13] team0 (unregistering): Port device team_slave_0 removed
[  110.168505][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.194729][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.216439][ T8983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.235489][ T8970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.238076][ T8970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.240755][ T8970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.247290][ T8970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.326919][ T8970] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  110.362873][ T1993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.362923][ T1993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.373243][ T8970] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
[  110.403050][ T1993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.403102][ T1993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.557997][ T8983] veth0_vlan: entered promiscuous mode
[  110.561102][ T8983] veth1_vlan: entered promiscuous mode
[  110.606258][ T8983] veth0_macvtap: entered promiscuous mode
[  110.609926][ T8983] veth1_macvtap: entered promiscuous mode
[  110.634475][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.638557][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.649430][ T8983] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.653552][ T8983] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.656260][ T8983] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.659004][ T8983] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.760977][ T8983] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht'
[  110.811463][ T8983] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht'
[  110.816359][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.818638][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.871910][ T1639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.871964][ T1639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50