program: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) syz_mount_image$bcachefs(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000500)=ANY=[], 0xfd, 0x599a, &(0x7f000000dc40)="$eJzs3X+QXFW9IPBzu3synZn8mAR4jCCTIZD3ePA0E34Vyqtn3tv39BUgFQtLCRuFgUwwmoRUEgQCSnDBhQIstLQU9Q+0kFo0WlTBKpES+bEJqyjF6lJbSK3uon+4hSwpgSxluc6rmb6np+dO37k9PT35AZ9PJXP7nr79Peeee/r2/Z7umQ4AAAC8Jey7ZfuBC4/7l59+ZuT1G//1h5tvCr3l8fJq3KAvXV57qFrIwdRd6R9fZsfF31z/7d8NXvFPP3mg51tv7F1/4oZf/fNRVzzy8fP23P21x19b+NBfXiyKG8fTqRPryctJCNUf7f/SZ/c+fexYWRJCKIfSrhCWJEsfX5JkQgz9KYSwPl3pz9z54OtnbBhb3nR796TyxZntjPe3tmo6znYeuOa08Ot/XHvzz5d977tdu1/aNbFJUm0YTyEsuqzx8V0hhPnp/zFxtMXxGAftmhBCT8Pjzilo10kttn9lzvrx6XJeuuwtiBPvX55ZL2W2y65HXZllT0F9s5XXjna3K7Igs549Gc1WXjtj+ZJ0+YN0eeoM45fj/ySUklCpN39TMjFGQsNxS0Iyfiyr9fVS/diGdP8z60lmvZRZL3dl9mu83nSglZNkcnncLlMeT8eVtPzExnN1ExfllL8tXVbTJ+obcT1kb9T0TrlR369xsV37p2nLwVBqOAc1K68f+PRg9KZlvcnSKY8ZbSLet3ftHSvK657Y15fTjuSBJI2ftBV/58+WLPjod267Ovu6Xo9/WSmNX2or/m/Of+aVS2775ldz498V45fbin/6oz0vn//kLctz+2d/7J9KW/GHX3zqzmVHX747t/33xPjVtuKv3vNM98IDjz6W2/6h2D/z24r/wrnv/e39zz38Um78EOP3tBV/3Z6tn+seOHBKbvzHYv/0tjd+Xt199vMDA78fzIv/bIy/sK349+26+933Lr79vNzjuyb2T19b8S84+ZGbFxx4+IS8c2dyT6deOQHemo5Kr7FuTdfbzTNnqyFf+MpgpXbNtyD9v7CTFWUuPsfqWdTJ+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQQjjmtP/6vv/9ob6XK+l6d3rjhVJtGcvnhZDMDyFs3zG8bcfGLVcOfvyqq7dtGd40OLxjcGTLjm3XDZ75d4PbRrZuGr5u7N6hd5xRe9zSkNSWyQlT6u4eHR0t9U0ui/X9u5N3/3rFOf/nDyEMHfPLgUpu+1fevfneo5v8zEhWj75n89UX/vKsb6T71Ze2q69Ju0ZHR0dDTrv+78V/vvcL+393SghDfzVdu5564R9+PKlB4wUTcVKl7lBrUHfS07Qd9Van7Yn9VdmwcdPI0PT9O/b4cs5+/PvrX/rThms//+da/1Zz96PF/p2/enRT6ctrL/j/X76hVlDUrkN13Iv6O+5FbF/sv2ra34vS/VqUs1+VnP265eePPfej4257bVcYqry6bGrdRfvVlQ6AruRtLdUba+hJlkwqr6bbxyMeH7dyx+atK7dft/MdGzcPXzly5ciWd606c9XZQ2edfdbK8T1f2eH9j/X/dYv7f3DG0+JP7vpB/NnaeCpqV1F/jLWruD8aW5T3/Ou56LNffNfdT15YKyga53Hr+vkkXfaMHedVoWG8Te2rZvtV1A8hhMFm/fDKa+eFY//HxpuLzkONR6bxZ0ayevTp5X/8xjlf7//7WsGU8/y8TLs6cZ5vbFCb5/l6qyfaM95f1fR4jB6m/dsdyul+9TZt16qnn+y6Y98fPlVv37x54drhHTu2rar9XJC2dEFyfNN2ZUvjfi0b/1kOabeE+jBtMl7HdIVa+7Lnz7h5tld70/t6k6VN9ysr3rd37R0ryuue2JfX08kDtRrnh4W1ZfL2nC03ZR5Yrje4Wf2H6/OvaHwMvO/rD33ooe+fOWV8nF77WbRfSc5+fe+5+774rc//x+93br/e9w/P9P3xf35sRa3goFw/zua8Uq41pN7qtD1J43nl9BCKnn/LQvP9yH3+lZrvT9HzL1vPxPbN4w1m1ntDua3n6+mP9rx8/pO3LM99vu5v9fl6w6S1csHz9XAZP9nnV1KZ3I65e35NGijJ6tGf3HrUrsdvXHNcraDo9bK+dbNxfUYL+UfOfv34kucHrhr8D/+9c+eNb//dg5f+anj1p2sF7R/32JbOHPdq2r/VnP6ttzrmnY39+84rrtq0vlZ++F7/psuC/CeeSrZft/MTw5s2jWzb3tp+tfp6GuvJ9nK7r6fx7La0YL9KU/Zr7m600l+tPt9i+9e33V+Tn2+9IWnrdWHnz5Ys+Oh3bru6b8qj0oouK6XxS23F/835z7xyyW3f/Gpu/Lti/Epb8YdffOrOZUdfvjs3/j1JGr/aVvzVe57pXnjg0cdy4w/F9s9vK/4L5773t/c/9/BLufFDjN/bXv+/uvvs5wcGfp8b/9kkrWfsGimEB18/Y0NtPQld6fMttqNrUrtCdj3JrJcy6+XG9VJMUdMKykkyuTxul5af2NCWZj6cUx6vwqr9teUbcT1kb0xffrgpNZz76/omyouuUwEA3uzi+//xGjS+/z+SXijlzzTAhNnmYf05cWMeNjGfM2/S/f1p/P40MYnzgAPvDENjy5sGaxf6M30fIT4fsvOc/Zn7o3bnObsK5t+XZ9ZjvbX58kpDHpqamtdUQgvz71PrmX7+/aTMeuH8+OCtU5o12DBv1T/RnsFa/T1N2xumtrcyFiFvfGTnxeLnOQYWhTXj9bU4PrKfo4nHIfs5mljPcZkTZ7ufoyl6f6ZofMRmTzM+xptc/P7G1OMXpunfiePXPFr2+M3geFfHtp/r92c7MG/Y9JR28OYNZ/5+WHUG74cd1vOS83OCH8R5ycN93jCWx/2otDif+KGc8k7NJ8bTRWzX/mnacjA0nU8M5hOBI1/M/+NrxFj+P3YB/v8y2xVdh2avGmO83M8JlZu3pyjvmPo5vZ62XsfX7dn6ue6BA6fkXuc81urnfrZOWusp+NxPUT+uyKwX9mPOBE1Rvpetp6jfs5/L6A0L2+r3+3bd/e57F99+Xm6/r6m9kBb3+xcnrS0s6PcjIF9oHv8wzhfCmyVfOJSfY+jqzOcYiubPDlk+kn7waa7ykQ/mlM80H+mZcqO+X+MO33xk4oV0Uj6SnaAEAEjF/L/+/lma//+vuEF6HVGUt56aWY/xcvPWnOuTvLz1/eny2sz2velvVMz0uvmCkx+5ecGBh0/IzVvuaTUP/U+T1voK89DZ5c25ecSaznxePDePqOdZs8sTc9tfzxNnl6fnxq/n6bPLo3P7p55Hz24eIDd+fR7gCM1z65/XL5ivy1QWV1udrzskefSiyfs5J3l0+uuzc5VHX5RTPtM8unfKjfp+jTt88+jJ5fJoAODNKub/8TIu5v9PZrab7fvsuXlBh67bs38PpB7/2YOVV8513jfXeetc5/VzPS9xpOfFcz0vNLfzZIfs/eXDJS9OK5UXAwBwOIv5f/yVufz8f3b5SbP8rWtSfnLk5eeN28nPc+IX5udJ01rivYdPfn6kz3/J/70vXqxUlf8DALyZxfw//tpj/Pt//yVdz/7d+iMxTw/eR38LvY9+pOfpnZ9nCx35HEDVPEATLc0DNPw9siNmHsDnAAAA3lS6xjOlqb9n/5F0mf09+7zfy78kZ/tWVdLL48t3bBsZufTqreuHd4xcuuWq9SPbL71m28YdO0a21Labbd6Ym7ekeWNXqKT90Xy7bN62OP17CItz/h5CdvsY9vjxG1P/HkK22vkFf0dg4vhlHriref15x6+U09688ZF3vPPifzhn+6h+/K/42OmXbth+6cYtG3dsHN60cefI5O3GstaeGXxvZpL+n9H3pWZ+TFGa+fd3xsMzu3aUprSjK+2PvO9nTzLtWJK2ZEne9x/ktPun/+0Lnzx59M/3hzB0TPnts+q/ZPXof7545P079v1y61j7S9O2v75l2q6i7yvNbh/3p7Lpqu07Tttw1dVbst8o2Z44n1Gqr8/RfEb69C+3OD+xLqd8pp9TKE+5cXhqeX4CAIBJ4vv/8Xo2vn/4+fQCKpa3nqfP7v3j3Dx9qLU8Pfu9ZEV5enb7uL+t5unV9vL07rz6i/L0Zts3y9Pz8u68+B/M2X6mWh8ns/ucR+44uay1cZL9PoOicZLdfqbjJGl3Pien/qJx0mz7ZuMk77jnxf9AzvZ5isZDpT4eZve5nNzxcFdr4+FvM+tF4yG7/UzHQ2mW4yFbf9F4aLZ9s/GQd3zz4l+Ys32rJo+PsYExPi5GLr3mqm2faNhurr//os32zZto39x+/0e7Wu/fuf3c19y3f24/Vzb37Z/d58py2//s7GbCWm//3H6/S5TOleZtPvXxB2u+Nj0TFH3+rGged21O+UzncedNuXF4etA8LhwyMf+Pb/fE/P/2dNnpt4GO/O9J8z1mTeOHznyPWdF1zKF5Pa89C7yeF/O+LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBruiv948t9t2w/cOFx//LTz4y8fuO//nDzTX9z/bd/N3jFP/3kgZ5vvbF3/YkbfvXPR13xyMfP23P31x5/beFDf3mxMHDf+M/KqelqNYTk5SSE6o/2f+mze58+dqwsCSGUk75dISxJlj6+JMlEGPpTCGF9vZ2T73zw9TM2jC1vur17UvniTJDsfoXecmxPYztDuLZwjzgCVdNxtvPANaeFX//j2pt/vux73+3a/dKuiU2SasN4CmHRZY2P7wohzE//j4mjrT8+OF2uCSH0NDzunIJ2ndRi+1fmrB+fLuely96COPH+5Zn1Uma77HrUlVn2FNQ3W3ntaHe7Igsy69mT0WzltTOWL0mXP0iXp84wfjn+T0IpCZV68zclE2MkNBy3JCTjx7JaXy/Vj21I9z+znmTWS5n1cldmv8brTQdaOUkml8ftMuXxdFxJy09sPFc3cVFO+dvSZTV9or4R10P2Rk3vlBv1/RoX27V/mrYcDKWGc1Cz8vqBTw9Gb1rWmyyd8pjRJuJ9e9fesaK87ol9fTntSB5I0vhJW/F3/mzJgo9+57ar+/PiX1ZK45faiv+b85955ZLbvvnVWvz5U+PfFeOX24p/+qM9L5//5C3Lc/tnf+yfSlvxh1986s5lR1++O7d/7onxq23FX73nme6FBx59LLf9Q7F/5rcV/4Vz3/vb+597+KXc+CHG72kr/ro9Wz/XPXDglNz4j8X+6W1v/Ly6++znBwZ+P5gX/9kYf2Fb8e/bdfe77118+3m5x3dN7J++tuJfcPIjNy848PAJeefO5J5OvXICvDUdlV5j3Zqut5tnzlZDvvCVwUrtmm9B+n9hJyvKGKtn0RzGBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzekXN5z5kYvf84G1lSSEJGeb0SbifeV5q1cPtlHv8ItP3bns6Mt3N5b1txEHAAAAKBbz8FK9pBr6wzXJ/HB80+3jHMHxcS2ZXJ6dQ4hxsnME7cYpdShOuUNxKh2K09WhOPM6FKe7Q3GqBXGqobU486eJUxkbFS22p2fa9rQep7dDcRZ0KM7CDsVZ1KE4izsUp2/aOK2PwyUdirO0Q3GO6lCcozsU55gOxfmrDsU5tkNxsnPKMx2HC9Mtj8uLM36jXBinkpTrdzSbTz82reeEWdbTW1DPwqLX4xbrmd9iPSdlHleaYT3VFuv561nWk7RYz9/Osp5SQT1x3F6bbV+sJ661OP6vayVOaer92Tg7O9Se6zsU54YOxflUh+J8ukNxbpxlHIBWxfx/It/rC92Vvw896RknOwsQ891l4z+nvt7lnZBivLdnyucVxcsm6pl4y2bavuwEQibe8kx516R4lXo+Mk28amO8FZk7p9vfc1c3b1tjvFMz5d3TxJu0AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEPzihjM/cvF7PrA2JGHsX4Nd9VujTcT7yvNWrx5so969a+9YUV73xL7Gsu5KW7sAAAAAFIh5eFe9pBq6K6uq2e2q6TxAvKPcV1sOLAprxpbJYGl8vSdZMu3jKunjVu7YvHXl9ut2vmPj5uErR64c2fKuVWeuOnvorLPPWrlh46aRodrPELoL4oUQxqcftl+38xPDmzaNbNteK+xO5k16XH/6uP50PUkfN/DOMDS2vClt/9KC+kpT6pu7GwWHDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/o1duwuR6ywfAP6emdmZ6bb5d/70axqa7ZCPErVqEreSaukeECw0H2QpyGx1LcEmWNw0oU1KrGMbsK0JitASCJFcGInF1uJNP2wR+0EgUqMBNwZpi+ZCL5RWK2nJhaSMZHbO7MzZmcw6lKaNv9/F+Xjf53mf856LhefsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfOCma6OT1bHxieEohKhHTL2LZC6bj+PKAHW/8sK2HxRGTi9vHyvkBlgIAAAA6Cvpw4daI8VQyGVDNlzduFsc2ibCbN8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD875mujU5Wx8YnLo5CiHrE1LtI5oZCHFcGqHvynac++9rIyN/ax8oDrAMAAAD0l/ThmdZIMZTDkjAUXd0Rl3wbWJjKT8cl6yyaZ1z620GvuCXzjLtunnEf6xO3vnneGQAAAOCjL+n/c62RUijkFvTs//v19Unctam4bPM8/98K5OcdCQAAAJxb0v8XWiPlUMiVW/36fPv9xam4bAilbvV65S+bm9/Q7//565pn/6cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+O6droZHVsfCJ/jph6F8lcNh/HlQHqrnpx+B9rDj+8uH2skBtgIQAAAKCvpA+fbb2LoZAbDkPh4kbfP3LLgWe+9MxzoyGEmTY/nw87N27ffs+qmWMSt/Lo4aHvH3nr23PiVs4cz9sGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9810bXSyOjY+cVEUQtQjpt5FMpfNx3FlgLpvfP6Lf3nixPNvto+VB1gHAAAA6C/pw2d7/2Ioh3zIhysbd+29/lmZVH6vbwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhePeb97/jY1TU5vuceHChYvWxfn+ywQAALzfrg1RqP+Xrtpwvp8aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4MJiujU5Wx8YnilEIUY+YehfJXDYfx5UB6sYvHCssOP3iy+1j5QHWAQAAAPpL+vDZ3r8YymEoDIUrGnfdvgk0+v/SB/iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIfKdG10sjo2PrEgCiHqEVPvIpnL5uO4MkDdx3ft/9yhS793a/tYITfAQgAAAEBfSR+eb40UQyH38VAI1zTvpzoTomzz3P27wGzeto604Xnn1TrysvPO253aWa65m5m8YrJeaebcyqvMzau05ZVDq3ylIy/s7cha0Oc5AwAAAJxHSf9faI2UQiFXaOtzf9oRX9LnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9TNdGJ6tj4xNRFELUI6beRTKXzcdxZYC69//2/y/56s/27GgfKw+wDgAAANBf0ofP9v7FUA6Lwv+FRY2+P5Q645O4f1bPHHrsX39dHsKKK4+P5NLL/ii5+PUbN7+UPoSQ6YzOhHBps17Uo95vfv/YfUvrZ54IYcUV2Wvm1Avnrte5ZFx/trpp3fYjx7f1eTkAAABwgUj6/6HWSCkUcnd36/+L7Xl9+v+WRgN+6X27fnF589jsyFMZmVKzXibV/ydxX1j61J+Xrf77W2f7/7n1Ptm6+vT+LYcu7yg4M5ISxfWxLTvWH7/hYCbZ9Uz9bKp+8l6+/K03/71556NnZuoXWy9jYepRZqrNPabKh7g+ldk3sfa9fbXO+rke+3/4dy+f+NXCPe+erf/OtcOt+teFbvXbd951/xfF9eHbHtl74/7D6zvrhxAq3eq//e6t4ao/3vVQev/DqYXb33z7Mf0C4vrRxacOrj5QvqmzfpSqn7z/n594fO9PHv3uc0n95Lciy5fMt34mVf/V3ZfteuXBDQs762d67P+l218b2Vr5zh/S+7+zY9Vcz6eYu/8nr3/6jtc3xg+kpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4s07XRyerY+EQmCiHqEVPvIpnL5uO4MkDdk2uOvX37nh//sH2sPMA6AAAAQH9JHz7b+xdDOeRDPgw3+v5nq5vWbT9yfFsozcxGzXNuauu92z+xeeuOu+88T08OAAAAzNfJNVGj/8+1RkqhkFsahpr9/9iWHeuP33Awk/T/mbPnKISw+a6pTStCK+7V3ZfteuXBDQtb3wlCaPwsoHg27jOzcbfcfKx06k9fX9Y1btVs3NHFpw6uPlC+KYkL7XErQ+v7xJPXP33H6xvjB1rP1x73qa9tnWp+nkjWHb7tkb037j+8PpN8x2ieh5vrJnFTmX0Ta9/bV0viss1zsblvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCu6droZHVsfCJkQ4h6xNS7SOay+TiuDFB37dJfPnTJ6ecXtY8VcgMsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyHHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzXXWgcVR8H4HN2kzfbbNI3aQWjYppWRakXFgURvFFRkVak4FWlSLW1F6IgiCj1wlRasfiBN4LVmyIoqFEKCjYWS6uk4lfxxgsVFKoXQikGtEvxQmV3z2w30x1XJ1VQnweWk3Nm5jf/mXNmNgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/yhDAxOt9vDO+xu3nHvDR4/edeKRm965d/vFD7/63dTm6z7cO/zSybktK7d+ef3yzfvvXju7+4VDP42+9cvRvsEPtZvVqVsLIR6PIdTenX/2sbmPz26OxRBCNY5NhzAelx0aj7mENT+HELZ06ly48c0TV2xtttufGFow/v9cSP66Qr2a1dM2trBe/l1qaZ1tazx4afj62g07Pl3xxuuDM8emT+0Sa13rKYSlm7qPHwwhLEmfpmy1TWQHp3Z9CGG467ir+tR1wR+s/7KC/nmp/V9q631ysu2rcv1Kbr98PzOYa4f7nG+xiuoou18/I7l+/mW0WEV1ZuPjqX07tav/ZH41+8RQiWGgU/498dQaCV3zFkNszWWt06905jak68/1Y65fyfWrg7nrap03LbRqjAvHs/1y49nreCCNr+x+V/dwa8H4OamtpQf1ZNYP+T/a6qf90bmulqyu+d+p5e9Q6XoH9RrvTHyajHoaq8dlpx3zaw/ZtrkNT15U3fje4bGCOuLemPJjqfxtn4yP3P7argcmivI3VVJ+pVT+N+uO/HDbrhefL8x/Jsuvlsq//MDw8XXv71xVeH/ms/szUCr/jqMfPLXirDtnes11K39Pll8rlX/N7JGh0caBg4X1r8nuz5JS+V9dfeO3r3y+71hhfsjyh0vlb5y97+mhycYlhfkH249CvbVCS6yfH2eu/GJy8vupovzPsvs/2iM/9s1/eXp38wldW7g+12f3Z6xU/TdfuH/HSGPf+UXvzrjnTH1zAvw3LU//Yz2e+mV/Zy5W1++F56YG2t9AI+kzeiZPlNM8z9K/MB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5jBw5IAAAAAAT9f92OQAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnAgAA//9/+yFe") [ 82.275119][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.277918][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.281553][ T5303] Bluetooth: hci0: command tx timeout [ 82.664514][ T5320] loop0: detected capacity change from 0 to 32768 [ 82.775023][ T5320] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 82.782573][ T5320] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 82.788409][ T5320] bcachefs (loop0): Version upgrade required: [ 82.788409][ T5320] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 82.788409][ T5320] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 82.788409][ T5320] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 82.822407][ T5320] bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0 [ 82.822436][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 82.822448][ T5320] node offset 0/16: incorrect min_key: got 0:36028797018963968:0 should be POS_MIN [ 82.839859][ T5320] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 82.847455][ T5320] bcachefs (loop0): flagging btree extents lost data [ 82.850951][ T5320] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 82.859893][ T5320] error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 82.866205][ T5320] bcachefs (loop0): error validating btree node at btree inodes level 0/0 [ 82.866228][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 82.866239][ T5320] node offset 16/24 bset u64s 110 bset byte offset 152: keys out of order: u64s 16 type inode_v3 134217728:4096:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0, fixing [ 82.886002][ T5320] invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 134217728:4096:U32_MAX len 0 ver 0: [ 82.886024][ T5320] mode=40755 [ 82.886032][ T5320] flags=(16300000) [ 82.886042][ T5320] journal_seq=0 [ 82.886050][ T5320] hash_seed=28e4f092a4fc58ee [ 82.886058][ T5320] hash_type=siphash [ 82.886067][ T5320] bi_size=0 [ 82.886075][ T5320] bi_sectors=0 [ 82.886084][ T5320] bi_version=0 [ 82.886092][ T5320] bi_atime=200535484 [ 82.886100][ T5320] bi_ctime=2780562352 [ 82.886108][ T5320] bi_mtime=2780562352 [ 82.886118][ T5320] bi_otime=200535484 [ 82.886126][ T5320] bi_uid=0 [ 82.886134][ T5320] bi_gid=0 [ 82.886142][ T5320] bi_nlink=2 [ 82.886149][ T5320] bi_generation=0 [ 82.886157][ T5320] bi_dev=0 [ 82.886164][ T5320] bi_data_checksum=0 [ 82.886171][ T5320] bi_compression=0 [ 82.886179][ T5320] bi_project=0 [ 82.886186][ T5320] bi_background_compression=0 [ 82.886194][ T5320] bi_data_replicas=0 [ 82.886202][ T5320] bi_promote_target=0 [ 82.886209][ T5320] bi_foreground_target=0 [ 82.886217][ T5320] bi_background_target=0 [ 82.886225][ T5320] bi_erasure_code=0 [ 82.886233][ T5320] bi_fields_set=0 [ 82.886240][ T5320] bi_dir=0 [ 82.886248][ T5320] bi_dir_offset=0 [ 82.886255][ T5320] bi_subvol=1 [ 82.886263][ T5320] bi_parent_subvol=0 [ 82.886270][ T5320] bi_nocow=0 [ 82.886277][ T5320] bi_depth=0 [ 82.886285][ T5320] bi_inodes_32bit=0 [ 82.886292][ T5320] nonzero k.p.inode: delete?, fixing [ 82.962245][ T5320] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 82.962245][ T5320] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 82.976094][ T5320] bcachefs (loop0): error validating btree node on loop0 at btree dirents level 0/0 [ 82.976117][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 82.976128][ T5320] node offset 16/24: btree node data missing: expected 24 sectors, found 16, fixing [ 82.991191][ T5320] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 82.991191][ T5320] btree=dirents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 83.004501][ T5320] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 83.004520][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 83.004530][ T5320] node offset 0/16 bset u64s 0: incorrect btree id [ 83.018673][ T5320] bcachefs (loop0): flagging btree xattrs lost data [ 83.022089][ T5320] error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 83.028806][ T5320] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 83.028826][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 83.028837][ T5320] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 83.048243][ T5320] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 83.048243][ T5320] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 83.063617][ T5320] bcachefs (loop0): error validating btree node on loop0 at btree freespace level 0/0 [ 83.063635][ T5320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 83.063645][ T5320] node offset 0/32 bset u64s 0: invalid bkey format: incorrect number of fields: got 0, should be 6 [ 83.063654][ T5320] u64s 5 fields 64:0, 64:0, 32:0, 0:0, 0:0, 0:0 [ 83.083513][ T5320] bcachefs (loop0): flagging btree freespace lost data [ 83.087667][ T5320] error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 83.095103][ T5320] bcachefs (loop0): scan_for_btree_nodes... [ 83.111929][ T5330] invalid bkey in btree_node btree=stripes level=0: u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.xattr2:xattr2 [ 83.111960][ T5330] nonzero snapshot: delete?, fixing [ 83.125802][ T5330] bcachefs (loop0): flagging btree stripes lost data [ 83.177735][ T5320] bcachefs (loop0): btree node scan found 6 nodes after overwrites [ 83.181423][ T5320] done [ 83.184794][ T5320] bcachefs (loop0): check_topology... [ 83.186574][ T5320] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 83.195523][ T5320] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 83.199910][ T5320] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 48 min_key 0:36028797018963968:0 durability: 1 ptr: 0:27:0 gen 0 [ 83.211541][ T38] bcachefs (loop0): error validating btree node at btree extents level 0/0 [ 83.211567][ T38] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 48 min_key 0:36028797018963968:0 durability: 1 ptr: 0:27:0 gen 0 [ 83.211577][ T38] node offset 8/48 bset u64s 2097 bset byte offset 40: bad k->u64s 0 (min 3 max 253), fixing [ 83.226811][ T38] invalid bkey in btree_node btree=extents level=0: u64s 10 type deleted 8825211592396076079:4100:0 len 0 ver 0: [ 83.226827][ T38] snapshot == 0: delete?, fixing [ 83.233230][ T38] bcachefs (loop0): error validating btree node at btree extents level 0/0 [ 83.233244][ T38] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 48 min_key 0:36028797018963968:0 durability: 1 ptr: 0:27:0 gen 0 [ 83.233253][ T38] node offset 8/48 bset u64s 2088 bset byte offset 360: bad k->u64s 0 (min 3 max 253), fixing [ 83.248646][ T38] ================================================================== [ 83.252410][ T38] BUG: KASAN: slab-out-of-bounds in bkey_packed_valid+0x488/0x6c0 [ 83.255651][ T38] Read of size 1 at addr ffff88804470c4d0 by task kworker/0:1H/38 [ 83.258448][ T38] [ 83.259383][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/0:1H Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 83.259397][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.259405][ T38] Workqueue: bcachefs_btree_read_complete btree_node_read_work [ 83.259423][ T38] Call Trace: [ 83.259429][ T38] [ 83.259434][ T38] dump_stack_lvl+0x241/0x360 [ 83.259448][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.259457][ T38] ? __pfx__printk+0x10/0x10 [ 83.259467][ T38] ? _printk+0xd5/0x120 [ 83.259475][ T38] ? __virt_addr_valid+0x183/0x530 [ 83.259485][ T38] ? __virt_addr_valid+0x183/0x530 [ 83.259493][ T38] print_report+0x16e/0x5b0 [ 83.259506][ T38] ? __virt_addr_valid+0x183/0x530 [ 83.259514][ T38] ? __virt_addr_valid+0x183/0x530 [ 83.259522][ T38] ? __virt_addr_valid+0x45f/0x530 [ 83.259529][ T38] ? __phys_addr+0xba/0x170 [ 83.259543][ T38] ? bkey_packed_valid+0x488/0x6c0 [ 83.259553][ T38] kasan_report+0x143/0x180 [ 83.259564][ T38] ? bkey_packed_valid+0x488/0x6c0 [ 83.259576][ T38] bkey_packed_valid+0x488/0x6c0 [ 83.259587][ T38] ? __pfx___btree_err+0x10/0x10 [ 83.259597][ T38] ? __pfx_bkey_packed_valid+0x10/0x10 [ 83.259608][ T38] ? __pfx_bch2_bkey_in_btree_node+0x10/0x10 [ 83.259619][ T38] ? __asan_memset+0x23/0x50 [ 83.259629][ T38] ? validate_bset_keys+0x5df/0x1af0 [ 83.259639][ T38] validate_bset_keys+0xeb5/0x1af0 [ 83.259655][ T38] ? __pfx_validate_bset_keys+0x10/0x10 [ 83.259666][ T38] ? __pfx_validate_bset+0x10/0x10 [ 83.259676][ T38] ? mempool_alloc_noprof+0x1a6/0x5a0 [ 83.259690][ T38] ? bch2_bpos_to_text+0x295/0x3a0 [ 83.259700][ T38] ? __pfx_bch2_bpos_to_text+0x10/0x10 [ 83.259710][ T38] ? prt_str+0x4af/0x7d0 [ 83.259719][ T38] ? bch2_btree_node_read_done+0x2177/0x6180 [ 83.259730][ T38] bch2_btree_node_read_done+0x2298/0x6180 [ 83.259749][ T38] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 83.259759][ T38] ? __pfx_lock_acquire+0x10/0x10 [ 83.259777][ T38] ? bch2_bkey_pick_read_device+0x221/0x1850 [ 83.259789][ T38] ? __pfx_lock_release+0x10/0x10 [ 83.259801][ T38] ? __lock_acquire+0x1397/0x2100 [ 83.259816][ T38] ? bch2_bkey_pick_read_device+0x221/0x1850 [ 83.259826][ T38] ? bch2_bkey_pick_read_device+0x1561/0x1850 [ 83.259839][ T38] ? bch2_bkey_pick_read_device+0x221/0x1850 [ 83.259850][ T38] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 83.259860][ T38] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0 [ 83.259871][ T38] ? __pfx_bch2_btree_ptr_v2_to_text+0x10/0x10 [ 83.259884][ T38] btree_node_read_work+0x6dc/0x1380 [ 83.259900][ T38] ? __pfx_btree_node_read_work+0x10/0x10 [ 83.259910][ T38] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.259926][ T38] ? process_scheduled_works+0x9c6/0x18e0 [ 83.259938][ T38] process_scheduled_works+0xabe/0x18e0 [ 83.259954][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.259966][ T38] ? assign_work+0x364/0x3d0 [ 83.259978][ T38] worker_thread+0x870/0xd30 [ 83.259991][ T38] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 83.260036][ T38] ? __kthread_parkme+0x169/0x1d0 [ 83.260049][ T38] ? __pfx_worker_thread+0x10/0x10 [ 83.260060][ T38] kthread+0x7a9/0x920 [ 83.260073][ T38] ? __pfx_kthread+0x10/0x10 [ 83.260085][ T38] ? __pfx_worker_thread+0x10/0x10 [ 83.260096][ T38] ? __pfx_kthread+0x10/0x10 [ 83.260108][ T38] ? __pfx_kthread+0x10/0x10 [ 83.260121][ T38] ? __pfx_kthread+0x10/0x10 [ 83.260133][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.260143][ T38] ? lockdep_hardirqs_on+0x99/0x150 [ 83.260155][ T38] ? __pfx_kthread+0x10/0x10 [ 83.260167][ T38] ret_from_fork+0x4b/0x80 [ 83.260179][ T38] ? __pfx_kthread+0x10/0x10 [ 83.260192][ T38] ret_from_fork_asm+0x1a/0x30 [ 83.260206][ T38] [ 83.260209][ T38] [ 83.412650][ T38] The buggy address belongs to the object at ffff88804470c000 [ 83.412650][ T38] which belongs to the cache proc_inode_cache of size 1232 [ 83.418391][ T38] The buggy address is located 0 bytes to the right of [ 83.418391][ T38] allocated 1232-byte region [ffff88804470c000, ffff88804470c4d0) [ 83.424495][ T38] [ 83.425478][ T38] The buggy address belongs to the physical page: [ 83.427823][ T38] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4470c [ 83.431365][ T38] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 83.435228][ T38] memcg:ffff888045a3e181 [ 83.437231][ T38] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 83.440124][ T38] page_type: f5(slab) [ 83.441668][ T38] raw: 04fff00000000040 ffff88801c6f0780 dead000000000122 0000000000000000 [ 83.445097][ T38] raw: 0000000000000000 00000000800c000c 00000000f5000000 ffff888045a3e181 [ 83.448740][ T38] head: 04fff00000000040 ffff88801c6f0780 dead000000000122 0000000000000000 [ 83.453048][ T38] head: 0000000000000000 00000000800c000c 00000000f5000000 ffff888045a3e181 [ 83.456748][ T38] head: 04fff00000000002 ffffea000111c301 ffffffffffffffff 0000000000000000 [ 83.460093][ T38] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 83.463616][ T38] page dumped because: kasan: bad access detected [ 83.466907][ T38] page_owner tracks the page as allocated [ 83.469810][ T38] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5321, tgid 5321 (udevd), ts 82693524559, free_ts 0 [ 83.478841][ T38] post_alloc_hook+0x1f4/0x240 [ 83.481279][ T38] get_page_from_freelist+0x365c/0x37a0 [ 83.483748][ T38] __alloc_frozen_pages_noprof+0x292/0x710 [ 83.486150][ T38] alloc_pages_mpol+0x311/0x660 [ 83.488157][ T38] allocate_slab+0x8f/0x3a0 [ 83.490225][ T38] ___slab_alloc+0xc27/0x14a0 [ 83.492603][ T38] __slab_alloc+0x58/0xa0 [ 83.494761][ T38] kmem_cache_alloc_lru_noprof+0x26c/0x390 [ 83.497296][ T38] proc_alloc_inode+0x2a/0xc0 [ 83.499223][ T38] alloc_inode+0x65/0x1a0 [ 83.500955][ T38] new_inode+0x22/0x1d0 [ 83.502959][ T38] proc_pid_make_inode+0x1f/0x130 [ 83.505574][ T38] proc_pid_instantiate+0x54/0x2b0 [ 83.508185][ T38] proc_pid_lookup+0x31f/0x480 [ 83.510165][ T38] proc_root_lookup+0x1f/0x50 [ 83.512180][ T38] __lookup_slow+0x296/0x400 [ 83.514117][ T38] page_owner free stack trace missing [ 83.516334][ T38] [ 83.517475][ T38] Memory state around the buggy address: [ 83.520106][ T38] ffff88804470c380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.523378][ T38] ffff88804470c400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.526639][ T38] >ffff88804470c480: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 83.530693][ T38] ^ [ 83.533602][ T38] ffff88804470c500: fc fc fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 83.536771][ T38] ffff88804470c580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.539881][ T38] ================================================================== [ 83.564974][ T38] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.567915][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/0:1H Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 83.572642][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.577481][ T38] Workqueue: bcachefs_btree_read_complete btree_node_read_work [ 83.580506][ T38] Call Trace: [ 83.581906][ T38] [ 83.583218][ T38] dump_stack_lvl+0x241/0x360 [ 83.585490][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.587913][ T38] ? __pfx__printk+0x10/0x10 [ 83.589877][ T38] ? preempt_schedule+0xe1/0xf0 [ 83.591853][ T38] ? vscnprintf+0x5d/0x90 [ 83.593610][ T38] panic+0x349/0x880 [ 83.595421][ T38] ? check_panic_on_warn+0x21/0xb0 [ 83.597655][ T38] ? __pfx_panic+0x10/0x10 [ 83.599709][ T38] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 83.602150][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.604517][ T38] ? print_report+0x519/0x5b0 [ 83.606475][ T38] check_panic_on_warn+0x86/0xb0 [ 83.608677][ T38] ? bkey_packed_valid+0x488/0x6c0 [ 83.611383][ T38] end_report+0x77/0x160 [ 83.613472][ T38] kasan_report+0x154/0x180 [ 83.615497][ T38] ? bkey_packed_valid+0x488/0x6c0 [ 83.617611][ T38] bkey_packed_valid+0x488/0x6c0 [ 83.619559][ T38] ? __pfx___btree_err+0x10/0x10 [ 83.621449][ T38] ? __pfx_bkey_packed_valid+0x10/0x10 [ 83.623680][ T38] ? __pfx_bch2_bkey_in_btree_node+0x10/0x10 [ 83.626618][ T38] ? __asan_memset+0x23/0x50 [ 83.628906][ T38] ? validate_bset_keys+0x5df/0x1af0 [ 83.631031][ T38] validate_bset_keys+0xeb5/0x1af0 [ 83.633169][ T38] ? __pfx_validate_bset_keys+0x10/0x10 [ 83.635649][ T38] ? __pfx_validate_bset+0x10/0x10 [ 83.637922][ T38] ? mempool_alloc_noprof+0x1a6/0x5a0 [ 83.640247][ T38] ? bch2_bpos_to_text+0x295/0x3a0 [ 83.642342][ T38] ? __pfx_bch2_bpos_to_text+0x10/0x10 [ 83.644528][ T38] ? prt_str+0x4af/0x7d0 [ 83.646265][ T38] ? bch2_btree_node_read_done+0x2177/0x6180 [ 83.648566][ T38] bch2_btree_node_read_done+0x2298/0x6180 [ 83.651023][ T38] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 83.653991][ T38] ? __pfx_lock_acquire+0x10/0x10 [ 83.656363][ T38] ? bch2_bkey_pick_read_device+0x221/0x1850 [ 83.658810][ T38] ? __pfx_lock_release+0x10/0x10 [ 83.660587][ T38] ? __lock_acquire+0x1397/0x2100 [ 83.662704][ T38] ? bch2_bkey_pick_read_device+0x221/0x1850 [ 83.665117][ T38] ? bch2_bkey_pick_read_device+0x1561/0x1850 [ 83.667776][ T38] ? bch2_bkey_pick_read_device+0x221/0x1850 [ 83.670146][ T38] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 83.672591][ T38] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0 [ 83.674756][ T38] ? __pfx_bch2_btree_ptr_v2_to_text+0x10/0x10 [ 83.677294][ T38] btree_node_read_work+0x6dc/0x1380 [ 83.680016][ T38] ? __pfx_btree_node_read_work+0x10/0x10 [ 83.682660][ T38] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.684983][ T38] ? process_scheduled_works+0x9c6/0x18e0 [ 83.687109][ T38] process_scheduled_works+0xabe/0x18e0 [ 83.689344][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.691920][ T38] ? assign_work+0x364/0x3d0 [ 83.693972][ T38] worker_thread+0x870/0xd30 [ 83.695910][ T38] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 83.698336][ T38] ? __kthread_parkme+0x169/0x1d0 [ 83.700564][ T38] ? __pfx_worker_thread+0x10/0x10 [ 83.702556][ T38] kthread+0x7a9/0x920 [ 83.704086][ T38] ? __pfx_kthread+0x10/0x10 [ 83.706207][ T38] ? __pfx_worker_thread+0x10/0x10 [ 83.709335][ T38] ? __pfx_kthread+0x10/0x10 [ 83.711789][ T38] ? __pfx_kthread+0x10/0x10 [ 83.713948][ T38] ? __pfx_kthread+0x10/0x10 [ 83.715680][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.717683][ T38] ? lockdep_hardirqs_on+0x99/0x150 [ 83.719609][ T38] ? __pfx_kthread+0x10/0x10 [ 83.721454][ T38] ret_from_fork+0x4b/0x80 [ 83.723192][ T38] ? __pfx_kthread+0x10/0x10 [ 83.725095][ T38] ret_from_fork_asm+0x1a/0x30 [ 83.727089][ T38] [ 83.728683][ T38] Kernel Offset: disabled [ 83.730555][ T38] Rebooting in 86400 seconds..