program: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000001f40), 0x1ff, 0x400100) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000001f80)={0x6, 0x4, [0x3]}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0) (async) r3 = socket(0x200000100000011, 0x803, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="4dcdc7d9b743c011cfeab68cc805000000bfe539", 0x14, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) sendmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="6aa957045d2f1c72977b5d440d1d1965eb1c6b7a60eef58ab0d5f1c0c5defad12a9ae79b199fbe677e7008d26094b1bd02608f348abdb966cdc9ace5158c2d01f7faf2e45818e7141d172aacdbaa5097c279162d40afc5175deaefa65d90237c1d6b9f7862e294c3836d5a117a08136e4148c3bfe8a1c0f1c98012a09ced14fe1e5912b354beb84980568a5e0a90c4e98824844fac1bbf0c908ecbc1962544d7df38950eba5ed736b9100cc380892bd34e705514be715e3e799db86627ae33df8068", 0xc2}], 0x1}}, {{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @empty}, 0x0, 0x2, 0x1, 0x4}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="e7dc798f73a887caef0f67efabdfd3797535f18dc898b9c202", 0x19}], 0x1}}, {{&(0x7f0000000380)=@isdn={0x22, 0xd, 0x5, 0x81, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000400)="8afad7bb70eae13ebcd81c14a9c4ed43b3e8d9adfa0c335eb9602e2d130c9192b21de5928e66b062ef546673b722392aaefd37a2a3152939897fce65594247ebdd402a14f033c0813c534770274dce0216ad3c165e1282848796f63ad89c296770b3e1e1608941ed0a3d06fe56e46b5db9f1231d3ec1c9bf29ec0018", 0x7c}, {&(0x7f0000000480)="9a243829348c33280a4e0ab8eaf3782188b605bab514acde7a6ee283006e2b517d0a8306fdf6d96522caee1f23bf055da31e82f87c4a1b936d050750b64e1065dfcb02c05def7dd6f35733756f055a1b23642614cf3f5b28c06c75b31a822f0f19e55d9986f11eb59b9e8384a01342744a3a976bda57", 0x76}, {&(0x7f0000000500)="e097691a90dc0007eaeaebe0279f62637820a184ac98c7ad6188a03152e5cba04313a70a1ef159bdc1f47bf437ec709e3852bb35ebe52b54fd5b75eaf0be8222fa6ab2ab80d43c9e15cb68b102920bb3ea5f718e2b373c19157727c62e8ff12700ad5c19d0bbff8b04763c71a01bcce8525142dc4f65c92b5f6aa6c6397871550a2168b2da0034031f3207515ded87e01d13dca776072ef3b78fd8a1976fc7eb8dbb", 0xa2}, {&(0x7f00000005c0)="fc8b8fc9ffc87a9db56ccf43eef4249c5b3f4f9b6396ba51b592aea221797d2e4fca472c4206472966daa0fd93d3124d73553cbf0497cf184d540cad674038ef8f86ee71d47b288eb1ba67390a2e1a413163ef994ef4c5728ed60f004976c8b78b3ca764", 0x64}, {&(0x7f0000000640)="6cd9c03ea4af6182a09733bfdc370c8c3db2df530a032df039e4b6c889bf45023d437a86b92aef219a9199e188b103e2e3e2cc4318ae87acc3b47de417ffa670c19980fc4670971179e361971a2296db9996d752af349952a643b3c613", 0x5d}, {&(0x7f00000006c0)="b10fceae001cc206ddbefeb374de24377dd4798648807f55e8e1f87b4845fd342ce9db60aa71951fd4132ae30056d4ab668627115feb7935e9bdf30b33e2a4c8d457f0043fd42c8b1732fea23d0615268d1f3af4663a28cdc0c6c3b0027d45f74393a29ceca820d06299ad833850604409f325048dfdac4a1dc30e7975e83824024157a317655133b011173cf42c8a8fd46c2c2849bd0a9c", 0x98}, {&(0x7f0000000780)="6e72a04ceb9ed7b1a1fe1f6d36ce152f5b295c46e2780046c546f466af920677fec19c95fb0914a536877f73334a54081aef9d8f855d6504e6fc6c447250aaab7f3f2238f501987e6ac69d4f9aef38feb87b82dafe03c33b6094af8a28ee7aea4c820503be7bfcf94f7251b945ea6ef1154fb31f857d7caf11c1a827e0f7367cc0a7f0d25b24ed73b2d804b66a3b1335f5d7bd2feef3ae0bd6cb5c1c16f411b240ae6908d63d713a1170d07aa56d26", 0xaf}, {&(0x7f0000000840)="5ba9d258c57ff1b19cedfc4717bd03197977b64259078c46a916783289f1221aa8437e6fb5e9adbe545bfad0979dccb540a1be3291d3431769a522514bb6c6094e8ad093c92de55f7c2fb52f3ca1e13bbda62745413c70173de1a7f785e24ad2095b9ea0318654c2779d9b86985c5b9e2fa46f4853a144591906b323e7433602596bad", 0x83}, {&(0x7f0000000900)="529dc7b863c2d04379ef6ac61d3617cc3ef12b8786a4b49945cd33e7aa84d8a8", 0x20}, {&(0x7f0000000940)="6506252bdf628112e047d8c402df10f6312bbf2139c6848f9240705a500353a042f22aa0377bd495b55cc9f803693cb1c9c17291180472abd3b63ef030", 0x3d}], 0xa, &(0x7f0000001980)=[{0x148, 0x10c, 0x1, "8774ab5246636e95f956a9cc624545a26d15c4ea46092320e920edeaf5b6f45ae226737f0e73a2cbba45ca32e13db1f48bbbdf500dc5feff5a2a043a6718dd6f684b16931e5374300efb7a9e2389ec08455aa3332f919e8edf4557eaa8ae165e2847e72edfdee751e333467f36a3aa3f0aa16dba35e4c817009e3143cd73fde248ff35331c95acfe74ae626e572e42056423763161b81f3b7d6deea00238b8effb6974da0d38a679f99b8a634016fbfbc7cd1953220ce6191e8682357aa69e2174341c558708bfc7f558481e8a48d476a6c4313720fb63118b9c541690d783c7d38c4732bb2619641a13aea30190bbcd709dabae8627b07b304d71995cbed93618c27ba4e2b10e4591df0d500213710134e4d4aeeedd086f73785740b54aeab0bb63350f3127f6989b425390f22116a1696a859f8aeaf3"}, {0xb8, 0xff, 0xffff80c9, "d54fbd5bf629affaa0b21d7173cfd07d31b3c3d54001d18c5c10e4a22bd16604c09f6664373cff4f0e8fda363d9d153c71d79238352735549a0236067222b499d5e1fe6db754c3303a139020dcf79606d01e7421e1ef3a6a6841c03c29072c6029797f6b1304a9370bb5b64dda4651816f24a7757e09a7884e5ea532f8585e08268c4e0b7c4cc1b83d2a5edd508d0b9570541af08cc858dd1996d200d1d64ebca7"}, {0x18, 0x10a, 0x90e, "a90b10371b8562"}, {0x60, 0x88, 0x7, "a03eddc7d35753dca2bf52fc9ef41541b8beb709893c1d3bbdfacd78b1253863373dabe962e362db29c9ac746d2254cec7d3fa75692e9f3c2a965d8aacab90df81512b8f0cd02b5d07c7ce05"}, {0xa0, 0x6, 0x8, "b620cc917ff386af1855f6b5a3e53633fc4c7e49aa26bb63a6741aef6ab8d77ef279afc6560bd253710669dafb75e6f1f7c62b1a3b781df56ad8c6118ace17063c4ff30bdd165a25868e45c9c668455dd063bfea8c9e6f4dcecd3f3e6ab21d28ca202ca2a043913aac6395982784f2ac73439428d81336095293e16c9f19424ac112682f9844696b7bfebb6aae0f"}, {0xd8, 0x101, 0x1, "560101e36ae000357607fbc618a01a1d08349505883feebc2e8c5985f4a39ad880e7be136a7e975e7e0f7a88e0660b15e0e902857c861f663bf22ee90e5d24ad119aac0317a4e8c7ff9ffb0e2d8d5ed13cb574fdad211e9aa69f706ac252248a7b0bb56ca507cbf32a211bf1124af8a895d75a289dda31a7c3d275539a3ebb7b08607380fe775bdcf82e839e450e4046fffb8aabc7ee7fab0b39ab6bed6f6fed6734d448dbd2f60a0c63e53c716323becbb9952107b37d12a6ee6c657face7d7563a"}, {0x78, 0xff, 0x0, "165e04730d6d34a375a7b26c365afb63e03e59ceac83f6cece4fb94646757a9b9afbc7cfdf34924f24f4dc7285d4a3880b90db6f3c9972dd4c9d4a4aa5c9ab503b7850bcecd0816cf66e8a37412bbd48a15ff29b8d2ddb0a8492e7760b8d328b7e4d"}, {0x60, 0x118, 0x2, "9ca86e58d96e72a1863404f31144dffc7fd2c52fbbe4abe15451d15d72ae8c0f7d6ecdf37a34376ae274d1f95f6208c3c54db52db4b79ec5c958d388c3f9e36eb37d1db9e5278bb0674de0e465bb15"}, {0x60, 0x118, 0xfff, "d663615384a6a5a2f1c199dd071afa70f4da662ba94169c357167d4ff13f93c3e019072ffed2db68491afb7278e479b1d1313b4234327380ec58065bff2c4cf0f5ff40fb361d392af2"}, {0x60, 0x10d, 0x5, "26a4e6e620516eb292cad5165df143b440b00d728fb613b8f132a8a5451c1d3cfa19c278e0809f65b562fe8163384691fb1bae64b338efaac61e8a2b0eec1f139654586dce5e8c33999eff23c6"}], 0x588}}, {{&(0x7f0000000f80)=@ax25={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001000)="419eb202f18167e794e3365317a701e355353b3e72e402177835e5949552409e77795a384e1e37501ed3a9d04f901fac876c3d075b57617e2d05fe20f03d6c9a69d25d6b852151e1d17a5a849e80b48d65b7617b4b285224a2b4cf7e1f6b19bd8ef81e15f800d148b2d486aa3b08cafdf4ff69e8e5fa5a20edcc7a9312a4074f3ea14eab63e30507a8c61a2b14816360a0ccee6d5a1df464a0d76f01c917c2", 0x9f}, {&(0x7f00000010c0)="248ddbf832dd91510ec0dea0faffa95f39c339bf4d13f2ae00193777bcec3dc64dd09b4ea1082edd5f2c863d0c9c509b6c007f63b6fcf6c6c997f41dd38cbfcf8393d180cdae53d1ae9ce5014621f5f1945248bc84cf353b500667843689c8309ec8bf4586d6058de49878b21586111fea504c3c263193e41fafa4d393d265c22baac9aa252dd4c1d6448631df6d7a82fdec1fc529c582aa51f6d3f28f2ce251fcf347aaf30aed86df6d9292c4a09e5ce4a14a81a123a600353f2f7fd4065ec3290f075ba5c1f1962e04b5894e8d8e8758811e", 0xd3}, {&(0x7f00000011c0)="fddf883e4900d123d07dc362cb53add73da7b1a21fc30b553023060ac05185", 0x1f}, {&(0x7f0000001200)="40edcd073b17aa763050c1dfc39907919909ded032bc1766ad8ab985399ba1e9678b0fcfdf8dc38a7840f33891287c3cc9fc8baf5b359d0ef88813d08114881b3665878669598d469badfbb680ef26e84f9b59a005fbe95e2bd1ba7566b3cfa43f612eb0d75c7fe7354992f9caf75eeb4f09f7992cdbcfe54ddac3d807feb7852c4a4edbb097ea49657c4b68ea8be4ccd4c975c35ebfe051e13f411d0393fc324d0ade253002347d11732a7a7fca7b8e4a054d282870a6b734cff4490df8e3f52221468031053f515fd622b1693507", 0xcf}, {&(0x7f0000001300)="e63163293b9a019bf309721df6d72ac356f528c607e8c0a69f550be4f2a7b0d7cf68ad58900d841eba2dd1dbdd3cc7a2e08c5d74288d8e8b2b12335610ad53de6e8294a0ce0bf27b781304654d", 0x4d}, {&(0x7f0000001380)="75f78ec0b5367ca58b8bceec6f2894a294daccd48c2c725d3b4d587ef4f7d0dba093ff9ad6ecba5b6b18d72adba3464ae7ebe609267bb4f6caef1b21c696e919b31b4678cf0dec07c9ec53f805dd651d0128af80bcb8ab6f08e00dbca55f048680b3866aa21cb5e92964e035dc16b2b3875a7801325649e5df0164e051ae63c9e7484f1d8e64e5b3bf0fcc5664aacf330c254726f4c9cf5a30af49b405cc94b18983b2f0a04480f3147b201385c78d9bd45c0742252aa1ac", 0xb8}, {&(0x7f0000001440)="fd1a268bf8217a04c8ec6644ca46193747decd1cb1f43663a24804d5e06bc91b8e8f439e83c95f9590a98d01ccc9ae38bf61bca95934a42cfbd10c2fd80dcc35d95746ec835e4288f363f71af9d71ed4f5fb7cdbc642c3851d480db79a6050aacccbf767dda365fd9c52508f3eb1e9249625a599ef9eabe82fbdddf67badf1ae2af91b9114512202908056cc75d58d8922b360a0c8eae5d85edf7d98a58d0387f4e26c6974ece1b6730b34f99ea79a0889f86e5b9035dbe824789aa4c8b9aa786950127c3939f1b40547cd04459c60f18ac9a149bc69ed44397cba359f2926c29cfb", 0xe2}], 0x7, &(0x7f00000015c0)=[{0xb8, 0x107, 0x800, "a054d58b4bb55f81d5ee1e43cc1b7ad799b212db7684f3f18c8ba6ed14fdd4c7c9eef001bc7f3ae419cda686e849ad337a2cd7fad62538981f5a78ff5aeb93961cd948ecacf1d03b47de5cf616d6a61cb484def0d965aa6c4c30e3528a77023cb6ab93d3b4c16cc38d65930e03493ccacd263f32bc6a8a8c0609b457f06c359c747cce364550bd8eaad76e4a6c83c502d2ed477a7cfb2010bd4c69228de047bfd84cfaff96e6c3d0"}, {0xd8, 0x113, 0x9, "1816c078a58d945b2323305ceff71d760ffd4eb9b5439f7d9234ebff19fc80c94afb233475bf1033f610e190d4540c975d642520fada81fcc4ce35b782b821b3bafcd8b066134768c2ff8b7c1ec77a60c10d2693643e7fb8981b4261b74c07a5da563fd120019d8bd747a8ad5156ed4b659936ee852648d57086ef78dd26762db8d7490b9dc849fe816695b5a012de495fe3201d4b2c61eeb5a9afa4a09962b08bd2705fe27180c8d1707136ea2ce34220b24ce1a7d096eedcf69b6d751c6242a4b44eb8"}, {0x30, 0x101, 0x2, "97e9d73468200dd291dbe920210bfac5df13009896dae1671baba3"}], 0x1c0}}], 0x4, 0x4000044) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x800043, &(0x7f0000000100)=ANY=[@ANYBLOB='no_splitbrain_check,degraded,errors=continue,nocow_enabled,wide_macs,version_upgrade=none,nocow,wide_macs,nochanges,wK\x00\x00\x00macs,background_compression=gzip,\x00'], 0x0, 0x594f, &(0x7f0000005c80)="$eJzs3XuQXFX9IPBzu3synZk8JgF+RJDJEMhPBDUTXoWP0uj6KkAqFpYSNgoDmWA0CakkCASU4IILBVhoaSnqH2ghtWi0qIIVIiXy2IRVlGJ1qS2kFnfRP9xClpRAlrVcZ2um7+npudN3bk9PT0jg86lkbp/Tp7/n3HNP377ndM90AAAA4A1h7/Xb9p9z1Id+/eXhV6756M83XRt6y2P51VigL91e8Vq1kAOpu7JkbJsdF2+56kd/Hrj4A7+6u+eHr+5Zd+z6P3zwsIsf+NyZu2/77sMvz7/3n88VxY3j6cTxdPJCEkL1F/u++ZU9jx85mpeEEMpJ384QFiWLH16UZEIM/j2EsC5NLMncec8rp6wf3V57U/eE/IWZcsb7G1s1HWc79l9+Unj2/Wuu++3Sn/6ka9fzO8eLJNWG8RTCggsbH98VQpib/h8VR1scj3HQrg4h9DQ87oyCdh3XYvtX5KSPTrdz0m1vQZx4/7JMupQpl01HXZltT0F9M5XXjnbLFZmXSWdPRjOV186Yvyjd3pduT2wp6v8dqQlh9Kw29j8JpSRU6s3fmIyPkdBw3JKQjB3Laj1dqh/bkO5/Jp1k0qVMutyV2a+xetOBVk6SifmxXCY/no4raf6xjefqJs7NyX9Tuq2mT9RXYzpkb9T0TrpR368xsV37pmjLgVBqOAc1y68f+PRg9KZ5vcniSY8ZaSLet2fNzcvLax/Z25fTjuTuJI2ftBV/x28WzfvMj2+8LPu6Xo9/YSmNX2or/h/PeuLF82/8wXdy498a45fbin/ygz0vnPXo9cty+2df7J9KW/GHnnvslqWHX7Qrt/23x/jVtuKv2v1E9/z9Dz6U2/7B2D9z24r/zLs//Ke7nrr/+dz4tTNfuTf0tBV/7e4tX+3u339CbvyHYv/0tjd+Xtp1+tP9/X8ZyIv/ZIw/Pwy0Ef/Onbe9646FN52Ze3xXx/7va6v9Zx//wHXz9t9/TN65M7m9U6+cAG9Mh6XXWDek6XbnmTPVMF/49kClds03L/0/v5MVZS4+R+tZ0Mn4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBCOOKk//yR//nJvhcqabo7vfFMqbaN+XNCSOaGELZtH9q6fcPmSwY+d+llWzcPbRwY2j4wvHn71isHTn3bwNbhLRuHrhy9d/Dtp9QetzgktW1yzKS6u0dGRkp9E/Niff/m+F3PLj/jf/01hMEjft9fyW3/its23XF4k58ZyaqR92267Jzfn/b9dL/60nb1NWnXyMjISMhp1/8+7x93fH3fn08IYfBfpmrXY8+895cTGjSWMR4nVeoOtQZ1Jz1N21Fvddqe2F+V9Rs2Dg9O3b+jjy/n7Me/ver5v6+/4mv/qPVvNXc/WuzfuatGNpa+tebs//etq2sZTdv1ifF2vVbHvai/417E9sX+q6b9vSDdrwU5/V3J2a/rf/vQU7846saXd4bByktLJ9ddtF9d6QDoSt7UUr2xhp5k0YT8alo+HvH4uBXbN21Zse3KHW/fsGnokuFLhje/c+WpK08fPO3001aM7fmKDu9/rP9fW9z/onHemfG08As774s/WxtPRe0q6o/RdhX3R2OL8p5/Ped+5RvvvO3Rc2oZReM8lq6fT9Jtz+hxXhkaxtvkvmq2X0X9EEIYaNYPL758Zjjyv224rug81HhkGn9mJKtGHl/2t++f8b0l76llHJDzfGOD2jzP11s93p6x/qqmx2PkIO3f7lBO96u3abtWPv5o1817//rFevvmzAlXDG3fvnVl7ee8tKXzkqObtiubG/dr6djPcki7JdSHaZPxOqor1NqXPX/G4tle7U3v600WN92vrHjfnjU3Ly+vfWRvXk8nd9dqnBvm17bJm3NKbsw8sFxvcLP6D5Ln37PTHR/9H/nevZ+892enThofJ9d+Fu1XkrNfP33qzm/88Gv//medG/cfee8TfX/7759dXss4VM4r9Van7Ukazysnh1D0/Fsamu9H7vOv1Hx/ip5/2XrGyzePN5BJj4yU23q+nvxgzwtnPXr9stzn675Wn69XT0iVC56vB8v4yT6/ksrEdsze82vCQElWjfzqhsN2PnzN6qNqGUXjul662bg+pfh6pJSzX788/+n+Swf+3X/t3HnjR2+754I/DK36Ui2j/eMe29KZ415N+7ea07/1Vsd5Z2P/vuPiSzeuq+UfvNe/6bZg/hNPJduu3PH5oY0bh7dua22/Wn09jfVke7nd6614dlvcfL+6Yro0ab9m70Yr/dXq8y3217q2+2vi8603JG29Luz4zaJ5n/nxjZf1TXpUWtGFpTR+qa34fzzriRfPv/EH38mNf2uMX2kr/tBzj92y9PCLduXGvz1J41fbir9q9xPd8/c/+FBu/MHY/rltxX/m3R/+011P3f98bvwQ4/e21/8v7Tr96f7+v+TGfzJJ6xm9RgrhnldOWV9LJ6Erfb7FdnRNaFfIppNMupRJlxvTpdpaa72CcpJMzI/l0vxjG9rSzKdy8uNVWHVJbftqTIfsjanzDzalhnN/s/yi61QAgNetebVNfP8/XoPG9/+H0wul/JUGGDfTediSnLhxHja+njNnwv1L0vjx8XEdsP8dYXB0e+1A7UJ/uu8jxOdDdp0z1nPCcRNjtLvOWbT+viyTju2qrZdXGuahqcnzmkpoYf19cj1Tr79ndr94fXzghknNGmhYj8sev650xazZ5x0y7a2MRsgbH9n1vvh5jv4FYfVYfS2Oj+znaOJxyH6OJtZzVObE2e7naGY6PmKzpxgfY00ufn9j8vELU/Tv+PFrHi17/KZxvKuj5Wf7/dkOrBs2PaUduHXD2X0/7JBfl9w5u+uSHVw3TMIsrBvG/LgflRbXEz+Zk9+p9cR4uojt2jdFWw4E64nA61Wc/8fXiNH5/+gF+P/JlCu6Ds1eNcZ4uZ8TKjdvT9G8Y/Ln9Hraeh1fu3vLV7v795+Qe53zUKuf+9kyIdVT8Lmfon5cnkkX9mPOAk3RfC9bT1G/Zz+X0Rvmt9Xvd+687V13LLzpzNx+X117IS3u929MSM0v6PdDYL7QPP4bbb5wfC0j3nfQzBcO8s8xFK2fvWafY0g/+DRb85FP5ORPdz7SM+lGfb/GHHLzka4D2y4A4NAR5//198/S+f//iAXS64iieeuJmXSMlztvzbk+yZu3fizdXpEp35v+RsV0r5vPPv6B6+btv/+Y3HnL7a3OQ//DhFRf4Tx0ZvPm3HnE6s58Xjx3HlGfZ81snpjb/vo8cWbz9Nz49Xn6zObRuf1Tn0fPbB0gN359HeBQn+cWrNdlKovJVtfrXrfz6PTXZ2drHn1uTv5059G9k27U92uMeTQAwGsrzv/jZVyc/z+aKTfT99lz5wUdum7P/j2QevwnD9S8crbnfbM9b53tef1sr0sc6vPi2V4Xmt11sjf8vDit1Lx4XLM4AAC8tuL8f26azp//z2x+0mz+1jVhfmJ+3jS++flBMj8/1Ne/zP+9L17M++IAAK9vcf4ff+0x/v2//5Sms3+33jw9J755unn6VOOn5Xl659fZgs8BvLbrAHPHy7+x1gG+PyttAwBg+rrGZkqTf8/+0+k2+3v2eb+Xf35O+VZV0svji7ZvHR6+4LIt64a2D1+w+dJ1w9suuHzrhu3bhzfXys103pg7b0nnjV2hkvZH83LZedvC9O8hLMz5ewjZ8jHs0WM3Jv89hGy1cwv+jsD48WutvXnHrzRF+WbjI+9458X/VE75qH78L/7syRes33bBhs0btm8Y2rhhx/DEcqOz1p5pfG9m7JZpfV9q5sckpel/f2dn2lGa1I6utD/yvp89ybRjUdqSRXnff5DT7l//l69/4fiRf9wVwuAR5TfPqP+SVSP/8bzhj23f+/sto+0vTdn+esm0XUXfV5otH/ensvHSbdtPWn/pZZuz3yjZnrieUaqnZ2k9I336l1tcn1ibkz/dzymUJ904OLW8PgEAwATx/f94PRvfP/xaegEV81ufp8/s/ePcefpga/P07PeSFc3Ts+Xj/rY6T6/OcJ6erb9ont6sfLN5+qfSK/tW5+nx72i3u44TtT5OZvY5j9xxcmFr4yT7fQZF4yRbfrrjJJnhOMnWXzROmpVvNk7yjnte/I/nlM/T+niY2edycsfDra2Nh7dm0kXjIVt+uuOhNMPxkK2/aDw0K99sPOQd37z45+SUb9XE8TE6MMbGxfAFl1+69fMN5Wb7+y9m3r7Z/f6PdrXe/tn93Nfst392P1c2++2f2efKctuffq4szGlvRa/19s/u90G264Ct16YfNiv6/FnROu6anPzpruPOmXTj4GQdF147cf4fXxzi/P+mdNvpt4EO/e9JO8S/9/gg/x6zousYr+dTVHYQ8HoOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0JruypKx7d7rt+0/56gP/frLw69c89Gfb7r2LVf96M8DF3/gV3f3/PDVPeuOXf+HDx528QOfO3P3bd99+OX59/7zucLAfWM/KyemyWoIyQtJCNVf7PvmV/Y8fuRoXhJCKCd9O0NYlCx+eFGSiTD49xDCuno7J955zyunrB/dXntT94T8hZkg2f0KveXYnsZ2hnBF4R5xCKqm42zH/stPCs++f811v13605907Xp+53iRpNownkJYcGHj47tCCHPT/6PiaFsSH5xuV4cQehoed0ZBu45rsf0rctJHp9s56ba3IE68f1kmXcqUy6ajrsy2p6C+mcprR7vliszLpLMno5nKa2fMX5Ru70u3J04z/uhZrVwaa3gpCZV68zcm42MkNBy3JCRjx7JaT5fqxzak+59JJ5l0KZMud2X2a6zedKCVk2RifiyXyY+n40qaf2zjubqJc3Py35Ruq+kT9dWYDtkbNb2TbtT3a0xs174p2nIglBrOQc3y6wc+PRi9aV5vsnjSY0aaiPftWXPz8vLaR/b25bQjuTtJ4ydtxd/xm0XzPvPjGy9bkhf/wlIav9RW/D+e9cSL59/4g+/kxr81xi+3Ff/kB3teOOvR65c17Z/7Qkj2xf6ptBV/6LnHbll6+EW7ctt/e4xfbSv+qt1PdM/f/+BDucd3MPbP3LbiP/PuD//prqfufz43fojxe9qKv3b3lq929+8/ITf+Q7F/etsbPy/tOv3p/v6/DOTFfzLGn99W/Dt33vauOxbedGbu8V0d+6evrfhnH//AdfP2339M3rkzub1Tr5wAb0yHpddYN6TpdueZM9UwX/j2QKV2zTcv/T+/kxVljNazYBbjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw+vS7q0/99Hnv+/iaShJCklNmpIl4X3nOqlUDbdQ79Nxjtyw9/KJdjXlL2ogDAAAAFIvz8FI9pxqWhMuTueHopuXjGsHRMZVMzM+uIcQ42TWCduOUOhSn3KE4lQ7F6epQnDkditPdoTjVgjjV0FqcuVPEqYyOihbb0zNle1qP09uhOPM6FGd+h+Is6FCchR2K0zdlnNbH4aIOxVncoTiHdSjO4R2Kc0SH4vxLh+Ic2aE42TXl6Y7D+WnJo/LijN0oF8apJOX6Hc3W049M6zlmhvX0FtQzv+j1uMV65rZYz3GZx5WmWU+1xXr+dYb1JC3W89YZ1lMqqCeO2yuy7Yv1xFSL4//KDsXZ0aE4V3UoztUdivPFDsX5UofiXDPDOACtivP/8fleX+iuvCf0pGec7CpAnO8uHfs5+fUu74QU4705kz+nKF52op6Jt3S67csuIGTiLcvkd02IV6nPR6aIV22MtzxzZ+H+ZhcUMu07MZPfXRQvu7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPod1ef+unz3vfxNSEJo/+aGmki3lees2rVQBv17llz8/Ly2kf2NuZ1V9oIBAAAABSK8/Cuek41dFdWhu5kzoRy2fl/ua+W378grB7dJgOlsXRPsmjC46rpY6tpupI+bsX2TVtWbLtyx9s3bBq6ZPiS4c3vXHnqytMHTzv9tBXrN2wcHqz9DKG7IF4IYWz5YduVOz4/tHHj8NZttcxs+5ekj1uSppP0cf3vCIOj22vT9i8uqK80qb7Zu9HaEQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4/u/YXI1dVxwH83JnZmWGhdgwFhoZuJ/1DqhJt62KKEuYmJpJA23RDYmbQlTTSRuKWNtCSiiM0EbCNxgTSpKnpgzWVCBJf+CPEyJ80qcFqE7c2BojyoA8aUEwhfTAlY7o7d3ZmdqazjISF+vk83Hvn3N85v3vmYZPv3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD44k7XR8Up5rDochRD1qKl3kdxLZ+O4NEDfrz6344e5kTOrWsdymQEWAgAAAPpKcvhQcyQfcpl0SIcrpz4tCy03wkzuBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v9M1kbHK+Wx6sVRCFGPmnoXyb10No5LA/R9/e0nPvfKyMjfW8eKA6wDAAAA9Jfk8FRzJB+KYXkYiq5sq0veDSzumN9Zl6yzZI51ne8OetUtn2Pd1XOs+0Sfuo2N8+4AAAAAH31J/s80Rwohl1nQM//3y/VJ3dKOunTjPMhvBQAAAID/TZL/c82RYshlis28Pte8v6yjLpnf7//2yfyVPeb3+3/+hsbZ/+kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KNjsjY6XimPVdNRCFGPmnoXyb10No5LA/Rd+/zwP28++uCy1rFcZoCFAAAAgL6SHD4TvfMhlxkOQ+Hiqdw/cuOhp7781DOjIYTpmJ/Nht2bd+68a+30Malbc/zo0A+OvfmdWXVrpo/ztkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB9M1kbHa+Ux6oXRSFEPWrqXST30tk4Lg3Q97UvfOmvj5169o3WseIA6wAAAAD9JTl8JvvnQzFkQzZcPvWpNeufkzp3WDTzudc7AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODCcfe37v3m5omJLXe5cOHCRfNivv8yAQAA77elIQr19+iKTfP91AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIfBZG10vFIeq+ajEKIeNfUuknvpbByXBugbP3cit+DM8y+2jhUHWAcAAADoL8nhM9k/H4phKAyFy6Y+dXsnMJX/Cx/gQwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfKpO10fFKeay6IAoh6lFT7yK5l87GcWmAvo/uOfj5Iwu/f1PrWC4zwEIAAABAX0kOzzZH8iGX+WTIhasanyfaJ0Tpxrn7e4GZeTvapg3PeV6tbV56zvP2duws09jN9Lx8sl5h+tycV5o9r9Qyrxia7Utt88L+tlkL+jxnAAAAgHmU5P9cc6QQcplcS879WVt9Qc4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHqYrI2OV8pj1SgKIepRU+8iuZfOxnFp6irKvJe+9/7u45d87ef7drWOFQfbAgAAANBHksNnsn8+FMOS8LGwZCr3h0J7fVL3r8rZI4/8+2+rQlh9+cmRWdH/x8nFb1674YXOQwip9upUCAsb/aIe/X77h0fuWVE/+1gIqy9LX9X7VUP3fu1LxvWnK1s27Dx2ckefLwcAAAAuEEn+H2qOFEIuc2fP/J8k7z75v2kqgC+8Z88vFzWOjUTeMSNVaPRL9ej3xRVP/GXlun+8eS7/n6/fZw5uO7KoreH0SIcorpe37dp48trDqWTX0/3THf2T7+Ur337jP1t3P3x2un8+5BvjizPd+s8+drgork+kDlTXv3ug1t4/02P/D/7+xVO/XrzvnXP931463Ox/9Xn2f/7+w7c8tP+6g0c3tvcPIZS69X/rnZvCFX+644HO/Q93LNz6zbceO0Rx/fiy04fXHSpe394/6uiffP+/OPXo/p8+/L1nkv7Jb0VWLZ9r/1RH/5f3Xrrnpfs3LW7vn+qx/xdufWVke+m7f+zc/+1tq2Z6PsXs/T9+zZO3vbo5vq/zFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIVlsjY6XimPVVNRCFGPmnoXyb10No5LA/R9/eYTb9267yc/ah0rDrAOAAAA0F+Sw2eyfz4UQzZkw/BU7n+6smXDzmMnd4TC9N2occ5MbL9756e2bt915+3z9OQAAADAXCX5P9McKYRcZkUYauT/8rZdG09eeziV5P9Ukv+33jGxZXVo1r2899I9L92/aXHzPUEIUz8LyJ+r++xM3Y03nCic/vM3VnatWztTd3zZ6cPrDhWvT+pCa92a0Hw/8fg1T9726ub4vubztdZ9+uvbJxqvJ5J1h295aP91B49ubO6jcR5urJvUTaQOVNe/e6CW1KUb53xj3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAbJO10fFKeawa0iFEPWrqXST30tk4Lg3Qd/2KXz1wyZlnl7SO5TIDLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCfv2ExlH2cQB/nt3kzTabtEn7glExTaui1INFQUQvKirSihQ8VYpUW3sQBUFEqQdTacVSFS+C1UsRFdQoBQUbi6VVUvFf8eJBBYXqQSjFgHYpHlSy+8x2M91xdVIF9fOB4cnzzMx3fjPPs7NZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH+Ugb6xZnt4x/2NW8654aNH7zrxyE3v3Lvtoodf/W5i03Uf7h186eTM5hVbvrx+2ab9d6+Z3v38oZ+G3/rlaM/gh1rNqtSthRCPxxBq784+89jMx2fNjcUQQjWOTIYwGpceGo25hNU/hxA2t+ucv/PNE5dvmWu37RqYN74kF5K/r1CvZvW0jMyvl3+XWlpnWxsPXhK+vnb99k+Xv/F6/9SxyVOHxFrHegph8cbO8/tDCIvSNidbbWPZyaldF0IY7Djvyh51nf8H67+0oH9uav+X2nqPnGz/yly/kjsu38/059rBHtdbqKI6yh7Xy1Cun38ZLVRRndn4aGrfTu2qP5lfzbYYKjH0tcu/J55aI6Fj3mKIzbmstfuV9tyGdP+5fsz1K7l+tT93X83rpoVWjXH+eHZcbjx7Hfel8RWd7+oubi0YPzu1tfRBPZn1Q/6Plvppf7Tvqymra/Z3avk7VDreQd3G2xOfJqOexupx6Wnn/NpFtm9m/RMXVje8d3ikoI64N6b8WCp/6yejQ7e/tvOBsaL8jZWUXymV/83aIz/ctvOF5wrzn87yq6XyLzsweHzt+ztWFj6f2ez59JXKv+PoB08u//+dU93mupm/J8uvlcq/ZvrIwHDjwMHC+ldnz2dRqfyvrr7x21c+33esMD9k+YOl8jdM3/fUwHjj4sL8g62PQr25Qkusnx+nrvhifPz7iaL8z7LnP9wlP/bMf3ly91UvLtm1pnB9rsuez0ip+m++YP/2oca+84renXHPmfrmBPhvWpb+x3o89cv+zlyojt8Lz070tb6BhtI2fCYvlDN3ncV/YT4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+xAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPBQAA///8Jzyc") [ 89.247966][ T5311] Bluetooth: hci0: command tx timeout [ 89.488846][ T5333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.0'. [ 89.492950][ T5333] unsupported nlmsg_type 40 [ 89.822112][ T5333] loop0: detected capacity change from 0 to 32768 [ 89.852274][ T5333] ======================================================= [ 89.852274][ T5333] WARNING: The mand mount option has been deprecated and [ 89.852274][ T5333] and is ignored by this kernel. Remove the mand [ 89.852274][ T5333] option from the mount to silence this warning. [ 89.852274][ T5333] ======================================================= [ 90.007833][ T5333] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,wide_macs,degraded=yes,no_splitbrain_check,nochanges,nojournal_transaction_names,read_only,version_upgrade=none,nocow [ 90.007847][ T5333] allowing incompatible features above 0.0: (unknown version) [ 90.007852][ T5333] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 90.030720][ T5333] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 90.035016][ T5333] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 90.039953][ T5333] bcachefs (loop0): Version upgrade required: [ 90.039953][ T5333] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 90.039953][ T5333] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 90.039953][ T5333] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 90.131552][ T5333] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:U64_MAX:U32_MAX len 4294967295 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0 [ 90.131597][ T5333] checksum offset + key size > uncompressed size, deleting [ 90.149508][ T5333] bcachefs (loop0): btree node read error at btree inodes level 0/0 [ 90.149547][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 90.149556][ T5333] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 0 too large: 18446744073709551615 + 67174400 > 18446744073709551615 [ 90.149564][ T5333] u64s 3 fields 64:67174400, 64:0, 32:0, 0:0, 0:0, 0:0 [ 90.149570][ T5333] flagging btree inodes lost data [ 90.149575][ T5333] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 90.149583][ T5333] ret btree_node_read_validate_error [ 90.184091][ T5333] bcachefs (loop0): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 90.200486][ T5333] bcachefs (loop0): invalid bkey in btree_node btree=snapshots level=0: u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 5120 children 0 0 subvol 1 tree 0 [ 90.200510][ T5333] bad parent node (5120 <= 4294967295), deleting [ 90.213961][ T5333] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 90.224031][ T5333] bcachefs (loop0): check_topology... [ 90.224170][ T5333] bcachefs (loop0): btree root inodes unreadable, must recover from scan [ 90.232496][ T5333] bcachefs (loop0): no nodes found for btree inodes, continuing [ 90.237548][ T5333] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 90.241915][ T5333] bcachefs (loop0): no nodes found for btree snapshots, continuing [ 90.249470][ T5333] done [ 90.250679][ T5333] bcachefs (loop0): accounting_read... done [ 90.254260][ T5333] bcachefs (loop0): alloc_read... done [ 90.258047][ T5333] bcachefs (loop0): snapshots_read... done [ 90.261313][ T5333] bcachefs (loop0): check_allocations... [ 90.264602][ T5333] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 90.264631][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 90.282326][ T5333] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 90.282337][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 90.294937][ T5333] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 90.294954][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 90.308758][ T5333] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 90.308774][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 90.321353][ T5333] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 90.326012][ T5333] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 90.344445][ T5333] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 90.350456][ T5333] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 90.355766][ T5333] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 90.361902][ T5333] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 90.368041][ T5333] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 90.373903][ T5333] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 90.380546][ T5333] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 90.384900][ T5333] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 90.390169][ T5333] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 90.394545][ T5333] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 90.401515][ T5333] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 90.405857][ T5333] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 90.417080][ T5333] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 90.421340][ T5333] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 90.427363][ T5333] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 90.432278][ T5333] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 90.439867][ T5333] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 90.444317][ T5333] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 90.450135][ T5333] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 90.450150][ T5333] Ratelimiting new instances of previous error [ 90.461206][ T5333] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 90.461222][ T5333] Ratelimiting new instances of previous error [ 90.481706][ T5333] done [ 90.484354][ T5333] bcachefs (loop0): going read-write [ 90.621670][ T5333] bcachefs (loop0): journal_replay... done [ 90.668646][ T5333] bcachefs (loop0): check_alloc_info... [ 90.669900][ T5333] bcachefs (loop0): bucket incorrectly unset in need_discard btree [ 90.669924][ T5333] u64s 13 type alloc_v4 0:32:0 len 0 ver 0: [ 90.669929][ T5333] gen 0 oldest_gen 0 data_type need_discard [ 90.669935][ T5333] journal_seq_nonempty 1 [ 90.669943][ T5333] journal_seq_empty 0 [ 90.669947][ T5333] need_discard 1 [ 90.669952][ T5333] need_inc_gen 1 [ 90.669957][ T5333] dirty_sectors 0 [ 90.669962][ T5333] stripe_sectors 0 [ 90.669967][ T5333] cached_sectors 0 [ 90.669973][ T5333] stripe 0 [ 90.669978][ T5333] stripe_redundancy 0 [ 90.669984][ T5333] io_time[READ] 1 [ 90.669988][ T5333] io_time[WRITE] 1 [ 90.669993][ T5333] fragmentation 0 [ 90.669998][ T5333] bp_start 8 [ 90.670006][ T5333] , fixing [ 90.722015][ T5333] bcachefs (loop0): bucket incorrectly unset in need_discard btree [ 90.722026][ T5333] u64s 13 type alloc_v4 0:37:0 len 0 ver 0: [ 90.722030][ T5333] gen 0 oldest_gen 0 data_type need_discard [ 90.722035][ T5333] journal_seq_nonempty 6 [ 90.722040][ T5333] journal_seq_empty 0 [ 90.722045][ T5333] need_discard 1 [ 90.722050][ T5333] need_inc_gen 1 [ 90.722054][ T5333] dirty_sectors 0 [ 90.722059][ T5333] stripe_sectors 0 [ 90.722063][ T5333] cached_sectors 0 [ 90.722068][ T5333] stripe 0 [ 90.722073][ T5333] stripe_redundancy 0 [ 90.722078][ T5333] io_time[READ] 1 [ 90.722083][ T5333] io_time[WRITE] 1024 [ 90.722088][ T5333] fragmentation 0 [ 90.722093][ T5333] bp_start 8 [ 90.722099][ T5333] , fixing [ 90.767267][ T5333] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 90.767294][ T5333] device 0 buckets 38-39, fixing [ 90.775811][ T5333] done [ 90.778740][ T5333] bcachefs (loop0): check_lrus... [ 90.779510][ T5333] bcachefs (loop0): incorrect lru entry: lru fragmentation time 134217728 [ 90.779521][ T5333] u64s 5 type set 18446462598867058688:34:0 len 0 ver 0 [ 90.779528][ T5333] for u64s 13 type alloc_v4 0:34:0 len 0 ver 0: [ 90.779533][ T5333] gen 0 oldest_gen 0 data_type user [ 90.779538][ T5333] journal_seq_nonempty 5 [ 90.779544][ T5333] journal_seq_empty 134217728 [ 90.779549][ T5333] need_discard 1 [ 90.779555][ T5333] need_inc_gen 1 [ 90.779560][ T5333] dirty_sectors 8 [ 90.779564][ T5333] stripe_sectors 0 [ 90.779569][ T5333] cached_sectors 0 [ 90.779574][ T5333] stripe 0 [ 90.779579][ T5333] stripe_redundancy 0 [ 90.779584][ T5333] io_time[READ] 1 [ 90.779589][ T5333] io_time[WRITE] 512 [ 90.779595][ T5333] fragmentation 67108864 [ 90.779600][ T5333] bp_start 8 [ 90.779606][ T5333] , fixing [ 90.835120][ T5333] done [ 90.837240][ T5333] bcachefs (loop0): check_btree_backpointers... done [ 90.840946][ T5333] bcachefs (loop0): check_backpointers_to_extents... done [ 90.850176][ T5333] bcachefs (loop0): check_extents_to_backpointers... [ 90.851235][ T5333] bcachefs (loop0): scanning for missing backpointers in 7/128 buckets [ 90.859459][ T5333] done [ 90.861547][ T5333] bcachefs (loop0): check_alloc_to_lru_refs... [ 90.863140][ T5333] bcachefs (loop0): missing fragmentation lru entry [ 90.863152][ T5333] u64s 13 type alloc_v4 0:34:0 len 0 ver 0: [ 90.863159][ T5333] gen 0 oldest_gen 0 data_type user [ 90.863165][ T5333] journal_seq_nonempty 5 [ 90.863171][ T5333] journal_seq_empty 134217728 [ 90.863176][ T5333] need_discard 1 [ 90.863181][ T5333] need_inc_gen 1 [ 90.863187][ T5333] dirty_sectors 8 [ 90.863192][ T5333] stripe_sectors 0 [ 90.863197][ T5333] cached_sectors 0 [ 90.863202][ T5333] stripe 0 [ 90.863207][ T5333] stripe_redundancy 0 [ 90.863213][ T5333] io_time[READ] 1 [ 90.863218][ T5333] io_time[WRITE] 512 [ 90.863223][ T5333] fragmentation 67108864 [ 90.863230][ T5333] bp_start 8 [ 90.863235][ T5333] , fixing [ 90.911913][ T5333] done [ 90.913292][ T5333] bcachefs (loop0): bucket_gens_init... done [ 90.917297][ T5333] bcachefs (loop0): reconstruct_snapshots... [ 90.917544][ T5333] bcachefs (loop0): snapshot node 4294967295 from tree 4294967295 missing, recreating [ 90.938765][ T5333] done [ 90.940891][ T5333] bcachefs (loop0): check_snapshot_trees... done [ 90.944053][ T5333] bcachefs (loop0): check_snapshots... done [ 90.947824][ T5333] bcachefs (loop0): check_subvols... [ 90.948492][ T5333] bcachefs (loop0): subvolume 1 points to missing subvolume root 4096:4294967295, fixing [ 90.957802][ T5333] bcachefs (loop0): subvolume 1 is not set as snapshot but is not master subvolume, fixing [ 90.968596][ T5333] done [ 90.970948][ T5333] bcachefs (loop0): check_subvol_children... done [ 90.974166][ T5333] bcachefs (loop0): delete_dead_snapshots... done [ 90.978114][ T5333] bcachefs (loop0): check_inodes... done [ 90.980733][ T5333] bcachefs (loop0): check_extents... [ 90.981805][ T5333] bcachefs (loop0): inode 4100:4294967295 has incorrect i_sectors: got 0, should be 8, fixing [ 90.992100][ T5333] bcachefs (loop0): inode 536870912:4294967295 has incorrect i_sectors: got 0, should be 8, fixing [ 90.997967][ T5333] bcachefs (loop0): inode 536870913:4294967295 has incorrect i_sectors: got 0, should be 24, fixing [ 91.003869][ T5333] bcachefs (loop0): inode 536870914:4294967295 has incorrect i_sectors: got 0, should be 8, fixing [ 91.010637][ T5333] done [ 91.012194][ T5333] bcachefs (loop0): check_indirect_extents... done [ 91.015041][ T5333] bcachefs (loop0): check_dirents... [ 91.017179][ T5333] bcachefs (loop0): hash table key at wrong offset: should be at 1156460114154118077 [ 91.017192][ T5333] u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing [ 91.030312][ T5333] bcachefs (loop0): dirent points to missing inode: [ 91.030325][ T5333] u64s 7 type dirent 4096:1156460114154118077:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing [ 91.039294][ T5333] bcachefs (loop0): hash table key at wrong offset: should be at 7940636618472695337 [ 91.039308][ T5333] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 91.051804][ T5333] bcachefs (loop0): hash table key at wrong offset: should be at 5332773422870276894 [ 91.051819][ T5333] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 91.063535][ T5333] bcachefs (loop0): hash table key at wrong offset: should be at 3255617022301071799 [ 91.063550][ T5333] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 91.073677][ T5333] bcachefs (loop0): inode 536870913:4294967295 has wrong backpointer: [ 91.073691][ T5333] got 0:5332773422870276894 [ 91.073698][ T5333] should be 4096:5332773422870276894, fixing [ 91.085096][ T5333] bcachefs (loop0): inode 536870913:4294967295 type reg has multiple links but i_nlink 0 [ 91.085115][ T5333] u64s 7 type dirent 4096:7940636618472695337:U32_MAX len 0 ver 0: file3 -> 536870913 type reg [ 91.085123][ T5333] u64s 7 type dirent 4096:5332773422870276894:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 91.102540][ T5333] bcachefs (loop0): hash table key at wrong offset: should be at 2950079037446857271 [ 91.102557][ T5333] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 91.112686][ T5333] bcachefs (loop0): hash table key at wrong offset: should be at 1226914193389872777 [ 91.112700][ T5333] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 91.124903][ T5333] bcachefs (loop0): directory 4096:4294967295 with wrong i_nlink: got 0, should be 1, fixing [ 91.133961][ T5333] bcachefs (loop0): hash table key at wrong offset: should be at 7160597411514769168 [ 91.133974][ T5333] u64s 7 type dirent 4098:5675548428000973578:U32_MAX len 0 ver 0: file1 -> 4100 type lnk, fixing [ 91.144094][ T5333] bcachefs (loop0): inode 4100:4294967295 has wrong backpointer: [ 91.144108][ T5333] got 0:7160597411514769168 [ 91.144114][ T5333] should be 4098:7160597411514769168, fixing [ 91.153683][ T5333] bcachefs (loop0): incorrect d_type: got lnk, should be reg: [ 91.153696][ T5333] u64s 7 type dirent 4098:7160597411514769168:U32_MAX len 0 ver 0: file1 -> 4100 type lnk, fixing [ 91.164069][ T5333] bcachefs (loop0): hash table key at wrong offset: should be at 5821258563491939297 [ 91.164086][ T5333] u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 4099 type reg, fixing [ 91.174084][ T5333] bcachefs (loop0): check_dirents requires second pass [ 91.178043][ T5333] bcachefs (loop0): inode 536870914:4294967295 has wrong backpointer: [ 91.178056][ T5333] got 0:1226914193389872777 [ 91.178062][ T5333] should be 4096:1226914193389872777, fixing [ 91.188877][ T5333] bcachefs (loop0): dirent points to missing inode: [ 91.188890][ T5333] u64s 8 type dirent 4096:2950079037446857271:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 91.198436][ T5333] bcachefs (loop0): inode 536870912:4294967295 has wrong backpointer: [ 91.198449][ T5333] got 0:3255617022301071799 [ 91.198454][ T5333] should be 4096:3255617022301071799, fixing [ 91.208844][ T5333] bcachefs (loop0): directory 4096:4294967295 with wrong i_nlink: got 1, should be 0, fixing [ 91.213565][ T5333] bcachefs (loop0): dirent points to missing inode: [ 91.213577][ T5333] u64s 7 type dirent 4098:5821258563491939297:U32_MAX len 0 ver 0: file0 -> 4099 type reg, fixing [ 91.222252][ T5333] done [ 91.223796][ T5333] bcachefs (loop0): check_xattrs... [ 91.225065][ T5333] bcachefs (loop0): hash table key at wrong offset: should be at 8969581541486972395 [ 91.225081][ T5333] u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.xattr2:xattr2, fixing [ 91.239132][ T5333] ================================================================== [ 91.242853][ T5333] BUG: KASAN: slab-use-after-free in bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 91.246474][ T5333] Read of size 8 at addr ffff88804336a628 by task syz.0.0/5333 [ 91.249464][ T5333] [ 91.250455][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 91.250467][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.250474][ T5333] Call Trace: [ 91.250483][ T5333] [ 91.250489][ T5333] dump_stack_lvl+0x189/0x250 [ 91.250587][ T5333] ? __virt_addr_valid+0x1c8/0x5c0 [ 91.250624][ T5333] ? rcu_is_watching+0x15/0xb0 [ 91.250640][ T5333] ? __kasan_check_byte+0x12/0x40 [ 91.250664][ T5333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.250678][ T5333] ? rcu_is_watching+0x15/0xb0 [ 91.250691][ T5333] ? lock_release+0x4b/0x3e0 [ 91.250706][ T5333] ? __virt_addr_valid+0x1c8/0x5c0 [ 91.250715][ T5333] ? __virt_addr_valid+0x4a5/0x5c0 [ 91.250724][ T5333] print_report+0xd2/0x2b0 [ 91.250739][ T5333] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 91.250752][ T5333] kasan_report+0x118/0x150 [ 91.250762][ T5333] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 91.250775][ T5333] bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 91.250790][ T5333] ? __pfx_xattr_hash_bkey+0x10/0x10 [ 91.250803][ T5333] ? bch2_str_hash_repair_key+0x573/0x3fa0 [ 91.250817][ T5333] ? __pfx_xattr_cmp_bkey+0x10/0x10 [ 91.250828][ T5333] ? bch2_str_hash_repair_key+0xdb9/0x3fa0 [ 91.250839][ T5333] ? __pfx_bch2_str_hash_repair_key+0x10/0x10 [ 91.250856][ T5333] ? kasan_quarantine_put+0xdd/0x220 [ 91.250870][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.250930][ T5333] ? bch2_printbuf_exit+0x6f/0xb0 [ 91.250941][ T5333] ? kfree+0x18e/0x440 [ 91.250957][ T5333] ? bch2_printbuf_exit+0x6f/0xb0 [ 91.250967][ T5333] ? __bch2_fsck_err+0xd1c/0xfb0 [ 91.250983][ T5333] ? bch2_str_hash_repair_key+0xdb9/0x3fa0 [ 91.250999][ T5333] __bch2_str_hash_check_key+0xa65/0xd40 [ 91.251016][ T5333] ? __pfx___bch2_str_hash_check_key+0x10/0x10 [ 91.251028][ T5333] ? __lock_acquire+0xab9/0xd20 [ 91.251042][ T5333] ? bch2_str_hash_repair_key+0xfdd/0x3fa0 [ 91.251055][ T5333] ? __pfx_xattr_hash_bkey+0x10/0x10 [ 91.251065][ T5333] ? bch2_check_key_has_snapshot+0x73/0x370 [ 91.251075][ T5333] ? bch2_check_key_has_snapshot+0x2af/0x370 [ 91.251084][ T5333] bch2_check_xattrs+0x933/0xcc0 [ 91.251102][ T5333] ? __pfx_bch2_check_xattrs+0x10/0x10 [ 91.251114][ T5333] ? vprintk_emit+0x63e/0x7a0 [ 91.251124][ T5333] ? __pfx_vprintk_emit+0x10/0x10 [ 91.251138][ T5333] ? bch2_check_xattrs+0x1f2/0xcc0 [ 91.251152][ T5333] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.251166][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.251180][ T5333] __bch2_run_recovery_passes+0x392/0x1010 [ 91.251194][ T5333] bch2_run_recovery_passes+0x184/0x210 [ 91.251203][ T5333] bch2_fs_recovery+0x25fd/0x3950 [ 91.251216][ T5333] ? check_noncircular+0xe0/0x160 [ 91.251227][ T5333] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 91.251243][ T5333] ? __lock_acquire+0xab9/0xd20 [ 91.251257][ T5333] ? __lock_acquire+0xab9/0xd20 [ 91.251271][ T5333] ? __lock_acquire+0xab9/0xd20 [ 91.251287][ T5333] ? bch2_fs_start+0x9fe/0xd90 [ 91.251297][ T5333] ? up_write+0x1c4/0x420 [ 91.251306][ T5333] ? bch2_fs_start+0x5c4/0xd90 [ 91.251315][ T5333] bch2_fs_start+0xa99/0xd90 [ 91.251324][ T5333] ? bch2_fs_start+0x5c4/0xd90 [ 91.251333][ T5333] ? __pfx_bch2_fs_start+0x10/0x10 [ 91.251345][ T5333] ? sget+0x267/0x620 [ 91.251361][ T5333] bch2_fs_get_tree+0xb02/0x14f0 [ 91.251382][ T5333] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 91.251399][ T5333] ? aa_get_newest_label+0xf7/0x5d0 [ 91.251413][ T5333] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 91.251442][ T5333] ? apparmor_capable+0x137/0x1b0 [ 91.251452][ T5333] vfs_get_tree+0x8f/0x2b0 [ 91.251461][ T5333] do_new_mount+0x24a/0xa40 [ 91.251474][ T5333] __se_sys_mount+0x317/0x410 [ 91.251485][ T5333] ? __pfx___se_sys_mount+0x10/0x10 [ 91.251495][ T5333] ? rcu_is_watching+0x15/0xb0 [ 91.251509][ T5333] ? do_syscall_64+0xbe/0x3b0 [ 91.251518][ T5333] ? __x64_sys_mount+0x20/0xc0 [ 91.251528][ T5333] do_syscall_64+0xfa/0x3b0 [ 91.251536][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.251549][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.251559][ T5333] ? clear_bhb_loop+0x60/0xb0 [ 91.251570][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.251579][ T5333] RIP: 0033:0x7fb848d900ca [ 91.251593][ T5333] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.251602][ T5333] RSP: 002b:00007fb849bd8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.251620][ T5333] RAX: ffffffffffffffda RBX: 00007fb849bd8ef0 RCX: 00007fb848d900ca [ 91.251627][ T5333] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 00007fb849bd8eb0 [ 91.251633][ T5333] RBP: 00002000000000c0 R08: 00007fb849bd8ef0 R09: 0000000000800043 [ 91.251640][ T5333] R10: 0000000000800043 R11: 0000000000000246 R12: 0000200000000040 [ 91.251646][ T5333] R13: 00007fb849bd8eb0 R14: 000000000000594f R15: 0000200000000100 [ 91.251656][ T5333] [ 91.251659][ T5333] [ 91.469086][ T5333] Allocated by task 5333: [ 91.471043][ T5333] kasan_save_track+0x3e/0x80 [ 91.473353][ T5333] __kasan_kmalloc+0x93/0xb0 [ 91.475658][ T5333] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 91.478705][ T5333] krealloc_noprof+0x124/0x340 [ 91.480840][ T5333] __bch2_trans_kmalloc+0x26c/0xc80 [ 91.483209][ T5333] bch2_str_hash_repair_key+0x2a65/0x3fa0 [ 91.485753][ T5333] __bch2_str_hash_check_key+0xa65/0xd40 [ 91.488586][ T5333] bch2_check_xattrs+0x933/0xcc0 [ 91.491046][ T5333] __bch2_run_recovery_passes+0x392/0x1010 [ 91.493835][ T5333] bch2_run_recovery_passes+0x184/0x210 [ 91.496256][ T5333] bch2_fs_recovery+0x25fd/0x3950 [ 91.498209][ T5333] bch2_fs_start+0xa99/0xd90 [ 91.499966][ T5333] bch2_fs_get_tree+0xb02/0x14f0 [ 91.502000][ T5333] vfs_get_tree+0x8f/0x2b0 [ 91.503853][ T5333] do_new_mount+0x24a/0xa40 [ 91.506046][ T5333] __se_sys_mount+0x317/0x410 [ 91.508669][ T5333] do_syscall_64+0xfa/0x3b0 [ 91.511011][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.513704][ T5333] [ 91.514951][ T5333] Freed by task 5333: [ 91.516673][ T5333] kasan_save_track+0x3e/0x80 [ 91.518651][ T5333] kasan_save_free_info+0x46/0x50 [ 91.520718][ T5333] __kasan_slab_free+0x62/0x70 [ 91.522753][ T5333] kfree+0x18e/0x440 [ 91.524677][ T5333] krealloc_noprof+0x1cd/0x340 [ 91.527002][ T5333] __bch2_trans_kmalloc+0x26c/0xc80 [ 91.529561][ T5333] bch2_str_hash_repair_key+0x2fde/0x3fa0 [ 91.532320][ T5333] __bch2_str_hash_check_key+0xa65/0xd40 [ 91.534713][ T5333] bch2_check_xattrs+0x933/0xcc0 [ 91.536795][ T5333] __bch2_run_recovery_passes+0x392/0x1010 [ 91.539254][ T5333] bch2_run_recovery_passes+0x184/0x210 [ 91.541594][ T5333] bch2_fs_recovery+0x25fd/0x3950 [ 91.543754][ T5333] bch2_fs_start+0xa99/0xd90 [ 91.545817][ T5333] bch2_fs_get_tree+0xb02/0x14f0 [ 91.548355][ T5333] vfs_get_tree+0x8f/0x2b0 [ 91.550643][ T5333] do_new_mount+0x24a/0xa40 [ 91.553047][ T5333] __se_sys_mount+0x317/0x410 [ 91.555313][ T5333] do_syscall_64+0xfa/0x3b0 [ 91.557344][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.559817][ T5333] [ 91.560814][ T5333] The buggy address belongs to the object at ffff88804336a600 [ 91.560814][ T5333] which belongs to the cache kmalloc-128 of size 128 [ 91.566644][ T5333] The buggy address is located 40 bytes inside of [ 91.566644][ T5333] freed 128-byte region [ffff88804336a600, ffff88804336a680) [ 91.573539][ T5333] [ 91.574697][ T5333] The buggy address belongs to the physical page: [ 91.577419][ T5333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4336a [ 91.581125][ T5333] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 91.584388][ T5333] page_type: f5(slab) [ 91.586366][ T5333] raw: 04fff00000000000 ffff88801a441a00 dead000000000122 0000000000000000 [ 91.590408][ T5333] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 91.594053][ T5333] page dumped because: kasan: bad access detected [ 91.596791][ T5333] page_owner tracks the page as allocated [ 91.599147][ T5333] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5333, tgid 5332 (syz.0.0), ts 91213435563, free_ts 91147880069 [ 91.607589][ T5333] post_alloc_hook+0x240/0x2a0 [ 91.609561][ T5333] get_page_from_freelist+0x21e4/0x22c0 [ 91.611710][ T5333] __alloc_frozen_pages_noprof+0x181/0x370 [ 91.614246][ T5333] alloc_pages_mpol+0x232/0x4a0 [ 91.616496][ T5333] allocate_slab+0x8a/0x3b0 [ 91.618482][ T5333] ___slab_alloc+0xbfc/0x1480 [ 91.620822][ T5333] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 91.624135][ T5333] krealloc_noprof+0x124/0x340 [ 91.626410][ T5333] bch2_printbuf_make_room+0x1f5/0x360 [ 91.628773][ T5333] bch2_prt_printf+0x282/0x740 [ 91.630839][ T5333] bch2_bkey_val_to_text+0x83/0x150 [ 91.633132][ T5333] bch2_check_dirents+0x231f/0x3390 [ 91.635645][ T5333] __bch2_run_recovery_passes+0x392/0x1010 [ 91.638769][ T5333] bch2_run_recovery_passes+0x184/0x210 [ 91.641595][ T5333] bch2_fs_recovery+0x25fd/0x3950 [ 91.643815][ T5333] bch2_fs_start+0xa99/0xd90 [ 91.645759][ T5333] page last free pid 5333 tgid 5332 stack trace: [ 91.648490][ T5333] __free_frozen_pages+0xc71/0xe70 [ 91.650568][ T5333] rcu_core+0xca5/0x1710 [ 91.652331][ T5333] handle_softirqs+0x286/0x870 [ 91.654307][ T5333] __irq_exit_rcu+0xca/0x1f0 [ 91.656489][ T5333] irq_exit_rcu+0x9/0x30 [ 91.658955][ T5333] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 91.661778][ T5333] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 91.664577][ T5333] [ 91.665633][ T5333] Memory state around the buggy address: [ 91.667981][ T5333] ffff88804336a500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.671304][ T5333] ffff88804336a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.674644][ T5333] >ffff88804336a600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.678237][ T5333] ^ [ 91.680989][ T5333] ffff88804336a680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.684903][ T5333] ffff88804336a700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.688354][ T5333] ================================================================== [ 91.692869][ T5311] Bluetooth: hci0: command tx timeout [ 91.706263][ T5333] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.709495][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 91.715178][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.720516][ T5333] Call Trace: [ 91.722070][ T5333] [ 91.723364][ T5333] dump_stack_lvl+0x99/0x250 [ 91.725404][ T5333] ? __asan_memcpy+0x40/0x70 [ 91.727496][ T5333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.729965][ T5333] ? __pfx__printk+0x10/0x10 [ 91.732149][ T5333] panic+0x2db/0x790 [ 91.734002][ T5333] ? __pfx_panic+0x10/0x10 [ 91.736123][ T5333] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 91.739120][ T5333] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.742026][ T5333] ? print_memory_metadata+0x314/0x400 [ 91.744277][ T5333] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 91.746610][ T5333] check_panic_on_warn+0x89/0xb0 [ 91.748659][ T5333] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 91.751223][ T5333] end_report+0x78/0x160 [ 91.753163][ T5333] kasan_report+0x129/0x150 [ 91.755439][ T5333] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 91.758289][ T5333] bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 91.761005][ T5333] ? __pfx_xattr_hash_bkey+0x10/0x10 [ 91.763268][ T5333] ? bch2_str_hash_repair_key+0x573/0x3fa0 [ 91.766063][ T5333] ? __pfx_xattr_cmp_bkey+0x10/0x10 [ 91.768377][ T5333] ? bch2_str_hash_repair_key+0xdb9/0x3fa0 [ 91.771011][ T5333] ? __pfx_bch2_str_hash_repair_key+0x10/0x10 [ 91.773852][ T5333] ? kasan_quarantine_put+0xdd/0x220 [ 91.776522][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.779116][ T5333] ? bch2_printbuf_exit+0x6f/0xb0 [ 91.781425][ T5333] ? kfree+0x18e/0x440 [ 91.783212][ T5333] ? bch2_printbuf_exit+0x6f/0xb0 [ 91.785352][ T5333] ? __bch2_fsck_err+0xd1c/0xfb0 [ 91.787566][ T5333] ? bch2_str_hash_repair_key+0xdb9/0x3fa0 [ 91.790487][ T5333] __bch2_str_hash_check_key+0xa65/0xd40 [ 91.793633][ T5333] ? __pfx___bch2_str_hash_check_key+0x10/0x10 [ 91.796635][ T5333] ? __lock_acquire+0xab9/0xd20 [ 91.798684][ T5333] ? bch2_str_hash_repair_key+0xfdd/0x3fa0 [ 91.801167][ T5333] ? __pfx_xattr_hash_bkey+0x10/0x10 [ 91.803399][ T5333] ? bch2_check_key_has_snapshot+0x73/0x370 [ 91.805904][ T5333] ? bch2_check_key_has_snapshot+0x2af/0x370 [ 91.808729][ T5333] bch2_check_xattrs+0x933/0xcc0 [ 91.811438][ T5333] ? __pfx_bch2_check_xattrs+0x10/0x10 [ 91.814025][ T5333] ? vprintk_emit+0x63e/0x7a0 [ 91.816087][ T5333] ? __pfx_vprintk_emit+0x10/0x10 [ 91.818212][ T5333] ? bch2_check_xattrs+0x1f2/0xcc0 [ 91.820341][ T5333] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.822812][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.825678][ T5333] __bch2_run_recovery_passes+0x392/0x1010 [ 91.828943][ T5333] bch2_run_recovery_passes+0x184/0x210 [ 91.831472][ T5333] bch2_fs_recovery+0x25fd/0x3950 [ 91.833699][ T5333] ? check_noncircular+0xe0/0x160 [ 91.835888][ T5333] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 91.838155][ T5333] ? __lock_acquire+0xab9/0xd20 [ 91.840281][ T5333] ? __lock_acquire+0xab9/0xd20 [ 91.843049][ T5333] ? __lock_acquire+0xab9/0xd20 [ 91.846339][ T5333] ? bch2_fs_start+0x9fe/0xd90 [ 91.848699][ T5333] ? up_write+0x1c4/0x420 [ 91.850502][ T5333] ? bch2_fs_start+0x5c4/0xd90 [ 91.852527][ T5333] bch2_fs_start+0xa99/0xd90 [ 91.854415][ T5333] ? bch2_fs_start+0x5c4/0xd90 [ 91.856485][ T5333] ? __pfx_bch2_fs_start+0x10/0x10 [ 91.858727][ T5333] ? sget+0x267/0x620 [ 91.860607][ T5333] bch2_fs_get_tree+0xb02/0x14f0 [ 91.863337][ T5333] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 91.866094][ T5333] ? aa_get_newest_label+0xf7/0x5d0 [ 91.868672][ T5333] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 91.871125][ T5333] ? apparmor_capable+0x137/0x1b0 [ 91.873210][ T5333] vfs_get_tree+0x8f/0x2b0 [ 91.874984][ T5333] do_new_mount+0x24a/0xa40 [ 91.876922][ T5333] __se_sys_mount+0x317/0x410 [ 91.878950][ T5333] ? __pfx___se_sys_mount+0x10/0x10 [ 91.881965][ T5333] ? rcu_is_watching+0x15/0xb0 [ 91.885037][ T5333] ? do_syscall_64+0xbe/0x3b0 [ 91.887160][ T5333] ? __x64_sys_mount+0x20/0xc0 [ 91.889190][ T5333] do_syscall_64+0xfa/0x3b0 [ 91.891143][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.893285][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.895929][ T5333] ? clear_bhb_loop+0x60/0xb0 [ 91.898093][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.901085][ T5333] RIP: 0033:0x7fb848d900ca [ 91.903551][ T5333] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.911366][ T5333] RSP: 002b:00007fb849bd8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.915084][ T5333] RAX: ffffffffffffffda RBX: 00007fb849bd8ef0 RCX: 00007fb848d900ca [ 91.918769][ T5333] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 00007fb849bd8eb0 [ 91.922292][ T5333] RBP: 00002000000000c0 R08: 00007fb849bd8ef0 R09: 0000000000800043 [ 91.925553][ T5333] R10: 0000000000800043 R11: 0000000000000246 R12: 0000200000000040 [ 91.928934][ T5333] R13: 00007fb849bd8eb0 R14: 000000000000594f R15: 0000200000000100 [ 91.932334][ T5333] [ 91.933971][ T5333] Kernel Offset: disabled [ 91.935850][ T5333] Rebooting in 86400 seconds..