program: syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000180)='./file0\x00', 0x1800000, &(0x7f00000001c0)=ANY=[], 0x1, 0x593d, &(0x7f0000008a00)="$eJzs3X+QHFWdAPDXM7PZyW422QSQCLJZAlEENRt+Ff4ojZ6/CpCKhaWEi8JCNhhNQipZBAJK8MCDAiy0tBT1D7SQOjRaVMEpkRL5cQmnKMXpUVdInd6hdeUVcqQEcpTluVe70z070zO9PTs7G/Lj86lke/rNm2+/fv2mp79vZncCAAAAh4Td12/de85R7/nZZ0deuub9P9p4begtTpSXkwr98fKKV6qF7EvdpcUTy/S4eN1V3/n94MXv+undPd9+edfaY9f9+t2HXXz/J87cedvXH3qx796/PpMXNxlPJ06uR89FIZR/vOfLn9v12JHjZVEIoS++f9FDC6NUiKE/hxDWVttZf+c9L52ybnx57U3ddeULUkGM90NbOR5n2/ZeflL4zTtXX/eLJd//XteOZ7dPVonKNeMphPkX1j6+K4QwN/4/Lhlti5MHx8tVIYSemsedkdOu41ps//KM9aPj5Zx42ZsTJ7l/aWq9kKqXXk90pZY9Odubqax2tFsvz7zUevpkNFNZ7UzKF8bLH8bLE6cZvxjvQzEKhSiUqs3fEE2OkVBz3KIQTRzLcnW9UFcvqjnW8XqUWi+k1otdqf2aiBcPtGIU1Zcn9VLlyem4FJcfW3uubuLcjPJXx8ty/ER9OVkP6RsVvQ03qvs1IWnXninasi8Uas5B9eXdE+XVAx8fjN64rDda1PCYsSaS+3atvnlZcc3Du/sz2hHdHcXxo7bib/v5wnkf++6Nly3Oin9hIY5faCv+b896/Pnzb/zW1zLj35rEL7YV/+QHep4765Hrl2b2z56kf0ptxR9+5tFblhx+0Y7M9t+exC+3FX/lzse7+/Y+8GBm+4eS/qm88rUSv1AT/+m3vvd3dz1537OZ8UMSv6et9q/Zufnz3QN7T8iM/2DSP73tjZ8Xdpz+1MDAHwaz4j+RxO9rK/6d2297yx0Lbjoz8/iuSvqnv634Zx9//3Xz9t53TNa5M7q9U6+cAIemw+JrrBvi9XbzzJmqyRe+OliqXPPNi//3dXJDKePbmT+L8QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NB1x0j+/7z8/3P9cKV7vjm88Xagsk/I5IURzQwhbR4e3jK7fdMngJy69bMum4Q2Dw6ODI5tGt1w5eOobBreMbN4wfOX4vUNvPKXyuEUhqiyjYxq2PTY2Nlbory9Ltvc3x+/4zbIz/vuPIQwd8auBUmb7l9+28Y7Dm/xMiVaOvWPjZef86rRvxvvVH7erP6NdIaNd/3PeX+744p7fnxDC0KumatejT7/9J3UNmiiYjBMrdIdKg7qjnqbtqLY6bk/SX6V16zeMDOX3bzFjP/72qmf/vO6KL/yl0r/lzP1osX/nrhzbUPjK6rP/7ytXVwr21+Oe19/JXiTtS/qvHPf3/Hi/5mfsVyljv67/xYNP/vioG1/cHoZKLyxp3HbefnXFA6ArenVL20220BMtrCsvx/WTI548bvnoxs3Lt1657Y3rNw5fMnLJyKY3rzh1xelDp51+2vKJPV/e4f1Ptv/aFvd/34ynBZ/a/sPkZ2vjKa9def0x3q78/qhtUdbzr+fcz33pzbc9ck6lIG+cJ7Wr55N42TN+nFeEmvHW2FfN9iuvH0IIg8364fkXzwxH/tv66/LOQ7VHpvZnSrRy7LGlf/rmGd9Y/LZKwT45z9c2qM3zfLXVk+2Z6K9yfDz2m/79r/r+7Q7FeL96m7ZrxWOPdN28+4+frrZvzpxwxfDo6JYVlZ/z4pbOi45u2q50abJfSyZ+FkPcLaE6TJuM13FdodK+9PkzqZ7u1d74vt5oUdP9Skvu27X65mXFNQ/vzurp6O7KFueGvsoyek1GzQ2pBxarDW62/f1mfIxNb3wMvO8b93743h+c2jA+Tq78zNuvKGO/vv/knV/69hf+/ged26/3vf3x/j/9+8eXVQoOlPNKtdVxe6La88rJIeQ9/5aE5vuR+fwrNN+fvOdfejuT9ZvHG0yt94ZiW8/Xkx/oee6sR65fmvl83dPq8/XqurVizvN1fxk/r9zzq26gRCvHfnrDYdsfumbVUZWCvHFdrd1sXJ/SQv6RsV8/Of+pgUsH/+5fO3fe+M4b7rng18MrP1Mp2F+Oeznu33JG/1ZbneSdtf37posv3bC2Ur7/Xv/Gy5z8JzmVbL1y2yeHN2wY2bK1tf1q9fU02U66l9t9PU3Oboty9qvQsF+zd6OV/mr1+Za0f23b/VX/fOsNUVuvC9t+vnDex75742X9DY+KN3RhIY5faCv+b896/Pnzb/zW1zLj35rEL7UVf/iZR29ZcvhFOzLj3x7F8cttxV+58/Huvr0PPJgZfyhp/9y24j/91vf+7q4n73s2M35I4ve21/8v7Dj9qYGBP2TGfyKKtzN+jRTCPS+dsq6yHoWu+PmWtKOrrl0hvR6l1gup9WLteqEy11rdQDGK6suTenH5sTVtaeYjGeXJVVh5cWX5crIe0jemLn/Fpa4PCzXn/mbledepAAAHu+T9/+QaNHn/fyS+UMqeaYBJM83DFmfETfKwyfmcOXX3L47jJ49P5gEH3hSGxpfXDlYu9Kc7z5k8H9LznMl2TjiuPka785x58+9LU+tJuyrz5aWaPDTWmNeUQgvz743bmXr+PbX7+fPjgzc0NGuwZt4qffy64hmzZp93SLW3NB4ha3yk58WSz3MMzA+rJrbX4vhIf44mOQ7pz9Ek2zkqdeJs93M0Mx0fSbOnGB8TTc5/f6Px+IUp+nfy+DWPlj5+0zje5fH6s/3+7IE/bzi774c1mZec10r8Q2Vecn+fN0zKk/0otTif+OGM8k7NJyani6Rde6Zoy75gPhE4WCX5f/IaMZ7/j1+A/2+qXt51aPqqMYmX+TmhYvP25OUdjZ/T62nrdXzNzs2f7x7Ye0Lmdc6DrX7uZ3PdWk/O537y+nFZaj23HzMmaPLyvfR28vo9/bmM3tDXVr/fuf22t9yx4KYzM/t9VeWFNL/fv1S31pfT7/KFjPivXL7QEL9rbCyk4x8q+cJsz5+9YvlI/MGn2cpHPpRRPt18pKfhRnW/Jhxw+UhXQ5WMV1wA4FCT5P/V98/i/P8/UvXy8tYTU+tJvMy8tfH6JC5unrd+IF5ekarfG/9GxXSvm88+/v7r5u2975jMvOX2VvPQf6hb68/NQ2eWN2fmEas683nxzDyimmfNLE/MbH81T5xZnp4Zv5qnzyyPzuyfah49s3mAzPjVeYADPc+d3fm6gzaPjn99drby6HMzyqebR/c23Kju14SDII8GADigJfl/chmX5P+PpOpNXrc3vuHcynV7Zl6Qvm7vau+6Pf33QKrxn9hXeeVs532znbfOdl4/2/MSB3pePNvzQrM7TyYvjtdD+kaFvBgAgP1Bkv/Pjdez8/+Z5SeZ+Vs1P5GfN41fm59nfARhqvjy8/3jfeuW57/afN86f/5L/i//zyf/BwA4uCX5f/Jrj8nf//uneD39d+vl6RnxvY8uT59q/LScp8/2PNtBOg8Q//0l8wCdYR4AAODg0jWRKTX+nv1H42X69+yzfi///Iz6rSpN/I59CBeNbhkZueCyzWuHR0cu2HTp2pGtF1y+Zf3o6MimSr26vPHl+j+22kremJm3xIlDVyjF/dG8XjpvWxD/PYQFGX8PIV0/CXv0xI3Gv4eQ3uzcnL8jMHn8Wmtv1vErTFG/2fjIOt5Z8T+SUT9RPf4Xf/zkC9ZtvWD9pvWj64c3rN82Ul9vPGvtmcb3ZibdMq3vzUz9aFCY/vd3dqYdhYZ2dMX9kfX97FGqHQvjlizM+v6DjHb/7F+++Knjx/5yVwhDRxRfM6P+i1aO/eN5Ix8Y3f2rzePtL0zZ/mrNuF1531earp/sT2nDpVtHT1p36WWb0t8o2Z5kPqNQXZ+l+Yz46V+sn5/IzLbXZJRPd36i2HBj/9Ty/AQAAHWS9/+T69nk/cMvxBdQSXnreXqr7x931eXpyfvHmXn6UGt5evp7yfLy9HT9ZH9bzdPLM8zT09vPy9Ob1W+Wp2fl3VnxP5RRf7paHycz+5xH5ji5sLVxkv4+g7xxkq4/3XESZY2T6pvUU4+T9Pbzxkmz+s3GSdZxz4r/wYz6WVofDzP7XE7meLi1tfHw+tR63nhI15/ueCjM8LyR3n7eeGhWv9l4yDq+WfHPyajfqvrxMT4wJsbFyAWXX7rlkzX1Zvv7L2bevtn9/o92td7+2f3c1+y3f3Y/Vzb77Z/Z58oy2//EzGbCWm//zD6XmPf9Lu3aZ/O18et43ufP8j5ntjqjfLrzuHMabuyfzOPCKyfJ/5O3e5L8/6Z42em3gfaz70mrnnpa/5602X2dO/A/fz+71zFez6fY2H7A6zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa7pLiyeWu6/fuveco97zs8+OvHTN+3+08drXXfWd3w9e/K6f3t3z7Zd3rT123a/ffdjF93/izJ23ff2hF/vu/eszuYH7K4sT49VyCNFzUQjlH+/58ud2PXbkeFkUQihG/dtDWBgtemhhlIow9OcQwtpqO+vvvOelU9aNL6+9qbuufEEqSHq/Qm8xaU9dO8MVuXvEAagcj7Ntey8/Kfzmnauv+8WS73+va8ez2yerROWa8RTC/AtrH98VQpgb/x+XjLbFyYPj5aoQQk/N487IaddxLbZ/ecb60fFyTrzszYmT3L80tV5I1UuvJ7pSy56c7c1UVjvarZdnXmo9fTKaqax2JuUL4+UP4+WJ04xfTP5HoRCFUrX5G6LJMRJqjlsUooljWa6uF6rHNsT7n1qPUuuF1HqxK7VfE9uNB1oxiurLk3qp8uR0XIrLj609Vzdxbkb5q+NlOX6ivpysh/SNit6GG9X9mpC0a88UbdkXCjXnoGbl1QMfH4zeuKw3WtTwmLEmkvt2rb55WXHNw7v7M9oR3R3F8aO24m/7+cJ5H/vujZctzop/YSGOX2gr/m/Pevz582/81tcy49+axC+2Ff/kB3qeO+uR65dm9s+epH9KbcUffubRW5YcftGOzPbfnsQvtxV/5c7Hu/v2PvBgZvuHkv6Z21b8p9/63t/d9eR9z2bGD0n8nrbir9m5+fPdA3tPyIz/YNI/ve2Nnxd2nP7UwMAfBkPNi39t/CeS+H1txb9z+21vuWPBTWdmHt9VSf/0txX/7OPvv27e3vuOyTp3Rrd36pUT4NB0WHyNdUO83m6eOUOFmnzhq4OlyjXfvPh/Xwc3lDa+nfmzGB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIPTL68+9aPnveODq0tRCFFGnbEmkvuKc1auHGxju8PPPHrLksMv2lFbtriNOAAAAEC+JA8vVEvKYXG4PJobjm5aP5kjODpZi+rL03MIcydrdiROoUNxih2KU+pQnK4OxZnToTjdHYpTzolTDq3FmTtlnELL7enJidNqe3o71J55HYrT16E48zsUZ0GH4vRPGaf1cbiwQ3EWdSjOYR2Kc3iH4hzRoTiv6lCcIzsUJz2nPN1x2BfXPCorzsSNYm6cUlSs3tFsPj3ZzjEz3E5vZTvlvO2k5+ynu525Le7PcanHFaa5nXKL23ntDLcTtbid189wO4Wc7STj9op0+5LtJGstjv8rOxRnW4fiXNWhOFd3KM6nOxTnMx2Kc80M4wC0Ksn/J/O9/tBdelvoic846VmAJN9dMvGz8fUu64SUxHtNqnxOXrx0op6Kt2S67UtPIKTiLU2Vd9XFK1XzkSnilWvjLUvdmbu/6QmFVPtOTJV358VLTywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCz65dWnfvS8d3xwdYjC+L+mxppI7ivOWblysI3t7lp987Limod315Z1l9oIBAAAAORK8vCuakk5dJdWhO5oTl29cghhrG9srByvF/sry4H5YdX4MhosTKz3RAsbHzc2+bhS/Ljloxs3L9965bY3rt84fMnIJSOb3rzi1BWnD512+mnL163fMDJU+RlCd068EMLE9MPWK7d9cnjDhpEtWyuF6fYvjh+3OF6P4scNvCkMjS+vjdu/KGd7hYbtzd6N/KMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D+79hfq5lnHAfx5k5wkO1tdZP+ysp6Frh1Vh7b1TDodywuCg60tPQwkmR5HcS0bnq5la0edcSu4zRZF2CiUSm8qdbg5vNkfN8T9oVCZ1YKnFtmG7kIvlFUn3eiFdER6Tt6cJE1OTrPSM+vnc/G+yfP8nueXJxcHvu8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB+TdZGxyvlsepwFELUo6beRTKXzsZxaYC+X395y49yIyeXtY7lMgNsBAAAAPSV5PCh5kg+5DLpkA5XT71bHFomwkzuBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v9M1kbHK+Wx6sVRCFGPmnoXyVw6G8elAfq+8/6zX3hzZOTvrWPFAfYBAAAA+ktyeKo5kg/FcF0Yiq5uq0ueDSzsWN9Zl+yzaI51nc8OetVdN8e66+dY96k+dWsb9+0BAAAA/vcl+T/THCmEXGZBz/zfL9cnddd21KUb90F+KwAAAAB8NEn+zzVHiiGXKTbz+lzz/uKOumR9v//bJ+uX9ljf7//5axr32f9PPzbrLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfk3WRscr5bFqOgoh6lFT7yKZS2fjuDRA35WvDP/z9oOPLW4dy2UG2AgAAADoK8nhM9E7H3KZ4TAULp7K/SO37nv+q8+/OBpCmI752WzYvn7r1vtXTl+TuhWHDw798NDx755Rt2L6Om8HBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzpnJ2uh4pTxWvSgKIepRU+8imUtn47g0QN+3v/SVvz597KV3W8eKA+wDAAAA9Jfk8Jnsnw/FkA3ZcOXUu9asf1qqY32vZwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAheOBbz/0rfUTExvu/+gv0o0tz9mGXnjhxXy9mOc/TAAAwDl3bYhC/SxdtW6+PzUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBxMFkbHa+Ux6r5KISoR029i2QunY3j0gB945eP5BacfOW11rHiAPsAAAAA/SU5fCb750MxDIWhcMXUu27PBKbyf+E8fkgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgY2WyNjpeKY9VF0QhRD1q6l0kc+lsHJcG6PvUjr1fPHDpD25rHctlBtgIAAAA6CvJ4dnmSD7kMp8OuXBN4/1E+4Io3bh3fy4ws25L27LhOa+rta1Lz3ndzo6TZRqnmV6XT/YrTN+b60pnriu1rCuGZvtS27qwu23Vgj6fMwAAAMA8SvJ/rjlSCLlMriXn/qytviDnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9TNZGxyvlsWoUhRD1qKl3kcyls3FcGqDvQ7/75CXf+Pmuba1jxQH2AQAAAPpLcvhM9s+HYlgUPhEWTeX+UGivT+r+VTl14Ml//21ZCMuvPDqS6bn/b96+5dXOSwip9qJUCJc2+kU9+v32D08+uKR+6ukQll+RvuZs+7VvGddfqGxYs/XQ0S2zfDEAAABwAUny/1BzpBBymft65v8keZ9V/r/0wR2/vLxxbSTy5orj95y+pgqNfqke/b685Nm/LF31j+On8/9s/T63d9OBy9saTo90iOJ6edO2tUdv3J9KTj3dP93RP/levvadd/+zcfsTp6b750O+Mb4w063/mdcOF8X1idSe6uoP99Ta+2d6nP+x37927NcLd31wuv/71w43+18/y/ln7z98x+O7b9p7cG17/xBCqVv/9z64LVz1p3sf7Tz/cMfGrd9867VDFNcPLz6xf9W+4s3t/aOO/sn3/4tjT+3+6RPffzHpn/xWZNl17Q+TevdPdfR/Y+dlO15/ZN3C9v6pHud/9c43RzaXvvfHzvPfPfD5n7nhubveWh8/3DkFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwYZmsjY5XymPVVBRC1KOm3kUyl87GcWmAvu/cfuS9O3f95MetY8UB9gEAAAD6S3L4TPbPh2LIhmwYnsr9L1Q2rNl66OiWUJiejRr3zMTmB7Z+ZuPmbffdPU+fHAAAAJirJP9nmiOFkMssCUON/F/etG3t0Rv3p5L8n0ry/8Z7JzYsD826N3ZetuP1R9YtbD4nCGHqZwH503Wfn6m79ZYjhRN/vmdp17qVM3WHF5/Yv2pf8eakLrTWrQjN5xPP3PDcXW+tjx9ufr7Wus9+c/NE4/FEsu/wHY/vvmnvwbXNczTuw419k7qJ1J7q6g/31JK6dOOeb5wbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjTZG10vFIeq4Z0CFGPmnoXyVw6G8elAfquXvKrRy85+dKi1rFcZoCNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWF/foJjaOK4wD+ZndjttmkTVrBqJimVVHqwaIgohcVFWlFCp4qRaqtPYiCIKLUg6m0YqmKF8HqpYgKapSCgo3F0iqp+K948aCCQvUglGJAG4oHK7t5b7OZZtw6RkH9fGB5+3s7853fzLxMdgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4F+ltzbcGg/veHD6tvNu+uTxe048dst792+75NHXfxjddMPHe/teOTm5ecWWr29ctmn/vWsmdr946JeBd3472jX4kZlhVSzrIWTHsxDq708998Tkp+c057IQQjUbHAthKFt6aKhZnuqdTVj9awhhc7vPufFvn7hyS3Pctqt3zvySXBv58wqNaupnxuDcfvlvqcd1tnX64cvCt9ev3/758rfe7Bk/Nja7SVbvWE8hLN7YuX9PCGFRfDWl1Tacdo7juhBCX8d+V3fp68Iz7P/ygvr8OJ4Vx0aXnPT5ylxdyW2Xr5Oe3NjX5XjFqme0VVEfZbfrpj9XZwuUmxT1meaH4vhuHFf9yfxqemWhkoVau/37stk1EjruWxay1r1sPQdrzbrSvrchnn+uznJ1JVdXe3Ln1TpuXGjVLJs7n7bLzafHcS3Or+h8Vs/j9oL5c+NYj3+oJ1Md8m9mNE570z6vltTX1B/08k+odDyD5ptv3/h4MxpxrpEtPW2fU/NIn02uf+ri6oYPDg8W9JHtzWJ+Vip/62dD/Xe+sfOh4aL8jZWYXymV/93aIz/dsfOlFwrzn0351VL5VxzoO772wx0rC6/PVLo+tVL5dx396OnlZ989Xtj/npRfL5V/3cSR3oHpAwcL+1+drs+iUvnfXHvz9699ue9YYX5I+X2l8jdMPPBM78j0pYX5B9P1aZRbPz+PX/XVyMiPo0X5X6T8gVL5r47tvublJbvWFN7fden6DJbKv/Wi/dv7p/ddUPTszPYs1H9OgP+nZfE71pOxLvs786/q+L3w/Ght5jtff3wNLOSBcprHWfw35gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA7O3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBUAAAA//89Vyge") renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) open(&(0x7f0000000140)='./file2\x00', 0x0, 0xa0) (fail_nth: 50) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) [ 67.813157][ T4669] Bluetooth: hci0: command tx timeout [ 68.182819][ T5323] loop0: detected capacity change from 0 to 32768 [ 68.196262][ T5323] bcachefs (/dev/loop0): error reading default superblock: unknown checksum type 3 [ 68.445082][ T5323] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 68.452654][ T5323] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 68.455697][ T5323] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 68.455697][ T5323] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 68.482617][ T5323] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 68.487290][ T5323] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree freespace level 0/0 [ 68.487307][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 0:0:2304 durability: 1 ptr: 0:29:0 gen 0 [ 68.487315][ T5323] node offset 0/32: incorrect min_key: got POS_MIN should be 0:0:2304, btree topology error: [ 68.502212][ T5323] bcachefs (loop0): flagging btree freespace lost data [ 68.504929][ T5323] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 68.509381][ T5323] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 68.515640][ T5323] bcachefs (loop0): running explicit recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 68.523032][ T5323] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 68.532146][ T5323] bcachefs (loop0): check_topology... done [ 68.535055][ T5323] bcachefs (loop0): accounting_read... done [ 68.538051][ T5323] bcachefs (loop0): alloc_read... done [ 68.540289][ T5323] bcachefs (loop0): snapshots_read... done [ 68.543654][ T5323] bcachefs (loop0): check_allocations... [ 68.545852][ T5323] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.545867][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 68.561398][ T5323] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.561413][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 68.572453][ T5323] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.572466][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 68.584321][ T5323] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.584335][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 68.596756][ T5323] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.596770][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 68.609207][ T5323] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 8, should be 256, fixing [ 68.615828][ T5323] bcachefs (loop0): bucket 0:29 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 68.620101][ T5323] bcachefs (loop0): bucket 0:29 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 68.626985][ T5323] done [ 68.632394][ T5323] bcachefs (loop0): going read-write [ 68.637978][ T5323] bcachefs (loop0): journal_replay... [ 68.655304][ T1034] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 68.655324][ T1034] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 68.672889][ T5323] done [ 68.674774][ T5323] bcachefs (loop0): check_alloc_info... [ 68.676212][ T5323] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 68.676227][ T5323] device 0 buckets 25-26, fixing [ 68.698959][ T1034] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 68.698975][ T1034] u64s 5 type deleted 0:39:0 len 0 ver 0, , continuing [ 68.707543][ T5323] bcachefs (loop0): bucket incorrectly unset in need_discard btree [ 68.707557][ T5323] u64s 13 type alloc_v4 0:29:0 len 0 ver 0: [ 68.707563][ T5323] gen 0 oldest_gen 0 data_type need_discard [ 68.707569][ T5323] journal_seq_nonempty 1 [ 68.707574][ T5323] journal_seq_empty 0 [ 68.707579][ T5323] need_discard 1 [ 68.707584][ T5323] need_inc_gen 1 [ 68.707589][ T5323] dirty_sectors 0 [ 68.707594][ T5323] stripe_sectors 0 [ 68.707599][ T5323] cached_sectors 0 [ 68.707604][ T5323] stripe 0 [ 68.707609][ T5323] stripe_redundancy 0 [ 68.707614][ T5323] io_time[READ] 1 [ 68.707619][ T5323] io_time[WRITE] 1 [ 68.707624][ T5323] fragmentation 0 [ 68.707630][ T5323] bp_start 8 [ 68.707634][ T5323] , fixing [ 68.746514][ T13] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 68.746529][ T13] u64s 5 type deleted 0:44:0 len 0 ver 0, , continuing [ 68.754278][ T5323] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 68.754292][ T5323] device 0 buckets 33-34, fixing [ 68.760115][ T5323] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 68.760125][ T5323] device 0 buckets 33-34, fixing [ 68.766202][ T5323] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 68.766215][ T5323] device 0 buckets 36-37, fixing [ 68.772306][ T5323] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 68.772318][ T5323] device 0 buckets 40-41, fixing [ 68.777546][ T5323] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 68.777556][ T5323] device 0 buckets 43-44, fixing [ 68.783946][ T5323] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 68.783958][ T5323] device 0 buckets 45-120, fixing [ 68.790893][ T5323] done [ 68.794016][ T5323] bcachefs (loop0): check_lrus... done [ 68.796803][ T5323] bcachefs (loop0): check_backpointers_to_extents... done [ 68.803355][ T5323] bcachefs (loop0): check_extents_to_backpointers... [ 68.805044][ T5323] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets [ 68.813395][ T5323] done [ 68.815465][ T5323] bcachefs (loop0): check_inodes... done [ 68.818626][ T5323] bcachefs (loop0): resume_logged_ops... done [ 68.821804][ T5323] bcachefs (loop0): delete_dead_inodes... done [ 68.829357][ T5323] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 68.837061][ T5323] bcachefs (loop0): check_alloc_info... done [ 68.842340][ T5323] bcachefs (loop0): check_lrus... done [ 68.844569][ T5323] bcachefs (loop0): check_backpointers_to_extents... done [ 68.848257][ T5323] bcachefs (loop0): check_extents_to_backpointers... done [ 68.852911][ T5323] bcachefs (loop0): check_inodes... done [ 68.855359][ T5323] bcachefs (loop0): resume_logged_ops... done [ 68.857856][ T5323] bcachefs (loop0): delete_dead_inodes... done [ 68.864048][ T5323] bcachefs (loop0): done starting filesystem [ 68.898908][ T5323] ================================================================== [ 68.902287][ T5323] BUG: KASAN: slab-use-after-free in bchfs_read+0x2ac0/0x3290 [ 68.905288][ T5323] Read of size 4 at addr ffff888055524148 by task syz.0.0/5323 [ 68.908293][ T5323] [ 68.909334][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(full) [ 68.909350][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.909357][ T5323] Call Trace: [ 68.909363][ T5323] [ 68.909369][ T5323] dump_stack_lvl+0x241/0x360 [ 68.909389][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.909402][ T5323] ? __virt_addr_valid+0x183/0x530 [ 68.909417][ T5323] ? rcu_is_watching+0x15/0xb0 [ 68.909431][ T5323] ? __virt_addr_valid+0x183/0x530 [ 68.909443][ T5323] ? lock_release+0x4e/0x3e0 [ 68.909455][ T5323] ? __virt_addr_valid+0x183/0x530 [ 68.909467][ T5323] ? __virt_addr_valid+0x183/0x530 [ 68.909481][ T5323] print_report+0x16e/0x5b0 [ 68.909494][ T5323] ? __virt_addr_valid+0x183/0x530 [ 68.909507][ T5323] ? __virt_addr_valid+0x183/0x530 [ 68.909518][ T5323] ? __virt_addr_valid+0x45f/0x530 [ 68.909531][ T5323] ? __phys_addr+0xba/0x170 [ 68.909543][ T5323] ? bchfs_read+0x2ac0/0x3290 [ 68.909554][ T5323] kasan_report+0x143/0x180 [ 68.909567][ T5323] ? bchfs_read+0x2ac0/0x3290 [ 68.909578][ T5323] bchfs_read+0x2ac0/0x3290 [ 68.909597][ T5323] ? __pfx_bchfs_read+0x10/0x10 [ 68.909607][ T5323] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 68.909663][ T5323] ? lockdep_hardirqs_on+0x9d/0x150 [ 68.909673][ T5323] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 68.909684][ T5323] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.909694][ T5323] ? rcu_is_watching+0x15/0xb0 [ 68.909710][ T5323] ? bchfs_read+0x33e/0x3290 [ 68.909724][ T5323] ? __pfx_bio_add_page+0x10/0x10 [ 68.909737][ T5323] ? bio_alloc_bioset+0x80e/0x1130 [ 68.909749][ T5323] bch2_readahead+0xe7a/0x12d0 [ 68.909760][ T5323] ? lockdep_hardirqs_on+0x9d/0x150 [ 68.909774][ T5323] ? __pfx_bch2_readahead+0x10/0x10 [ 68.909785][ T5323] ? folio_batch_move_lru+0x3ae/0x430 [ 68.909806][ T5323] ? blk_start_plug+0x70/0x1b0 [ 68.909820][ T5323] read_pages+0x193/0x590 [ 68.909830][ T5323] ? folio_add_lru+0x231/0x3e0 [ 68.909843][ T5323] ? filemap_add_folio+0x250/0x380 [ 68.909862][ T5323] ? __pfx_read_pages+0x10/0x10 [ 68.909877][ T5323] page_cache_ra_order+0xa37/0xca0 [ 68.909892][ T5323] filemap_get_pages+0x9ec/0x1fc0 [ 68.909914][ T5323] ? __pfx_filemap_get_pages+0x10/0x10 [ 68.909928][ T5323] ? __pfx___might_resched+0x10/0x10 [ 68.909940][ T5323] ? atime_needs_update+0x565/0x6c0 [ 68.909951][ T5323] ? touch_atime+0xf8/0x690 [ 68.909963][ T5323] filemap_read+0x466/0x1260 [ 68.909978][ T5323] ? __lock_acquire+0xad5/0xd80 [ 68.909991][ T5323] ? __pfx_filemap_read+0x10/0x10 [ 68.910011][ T5323] ? __wake_up_common_lock+0x18c/0x1e0 [ 68.910028][ T5323] bch2_read_iter+0x1179/0x14b0 [ 68.910042][ T5323] ? do_raw_spin_lock+0x151/0x370 [ 68.910058][ T5323] ? __pfx_bch2_read_iter+0x10/0x10 [ 68.910069][ T5323] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 68.910079][ T5323] ? lockdep_hardirqs_on+0x9d/0x150 [ 68.910090][ T5323] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 68.910100][ T5323] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.910110][ T5323] ? stack_trace_save+0x11a/0x1d0 [ 68.910132][ T5323] ? stack_depot_save_flags+0x43f/0x940 [ 68.910147][ T5323] ? kasan_save_track+0x51/0x80 [ 68.910158][ T5323] ? iov_iter_kvec+0x4e/0x180 [ 68.910172][ T5323] __kernel_read+0x532/0xa10 [ 68.910185][ T5323] ? __pfx___kernel_read+0x10/0x10 [ 68.910197][ T5323] ? kernel_fpu_end+0xf9/0x150 [ 68.910215][ T5323] integrity_kernel_read+0xb2/0x100 [ 68.910229][ T5323] ? __pfx_integrity_kernel_read+0x10/0x10 [ 68.910243][ T5323] ? sha256_avx2_update+0x136/0x200 [ 68.910256][ T5323] ima_calc_file_hash+0xb22/0x1c10 [ 68.910268][ T5323] ? rcu_is_watching+0x15/0xb0 [ 68.910280][ T5323] ? lock_release+0x4e/0x3e0 [ 68.910289][ T5323] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 68.910306][ T5323] ? __bch2_err_class+0x1d7/0x380 [ 68.910321][ T5323] ? bch2_xattr_get_handler+0x12e7/0x1410 [ 68.910335][ T5323] ? make_vfsgid+0x51/0xa0 [ 68.910346][ T5323] ? bch2_getattr+0x9a9/0xdb0 [ 68.910359][ T5323] ? __pfx_bch2_getattr+0x10/0x10 [ 68.910370][ T5323] ? __asan_memset+0x23/0x50 [ 68.910382][ T5323] ima_collect_measurement+0x52b/0xb20 [ 68.910395][ T5323] ? __pfx_ima_collect_measurement+0x10/0x10 [ 68.910408][ T5323] ? trace_contention_end+0x3c/0x120 [ 68.910425][ T5323] ? ima_get_hash_algo+0x157/0x520 [ 68.910438][ T5323] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 68.910453][ T5323] process_measurement+0x13a3/0x1fe0 [ 68.910471][ T5323] ? __pfx_process_measurement+0x10/0x10 [ 68.910486][ T5323] ? tomoyo_check_open_permission+0x209/0x4f0 [ 68.910500][ T5323] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 68.910519][ T5323] ? __pfx_apparmor_file_open+0x10/0x10 [ 68.910531][ T5323] ? do_raw_spin_unlock+0x58/0x8b0 [ 68.910545][ T5323] ? file_set_fsnotify_mode_from_watchers+0x12a/0x640 [ 68.910560][ T5323] ? inode_to_bdi+0x69/0xf0 [ 68.910573][ T5323] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 68.910586][ T5323] ima_file_check+0xdb/0x130 [ 68.910600][ T5323] ? __pfx_ima_file_check+0x10/0x10 [ 68.910616][ T5323] security_file_post_open+0xb9/0x280 [ 68.910630][ T5323] path_openat+0x2cf7/0x35d0 [ 68.910648][ T5323] ? __pfx_path_openat+0x10/0x10 [ 68.910658][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.910673][ T5323] do_filp_open+0x284/0x4e0 [ 68.910684][ T5323] ? __pfx_do_filp_open+0x10/0x10 [ 68.910694][ T5323] ? do_raw_spin_lock+0x151/0x370 [ 68.910716][ T5323] do_sys_openat2+0x12b/0x1d0 [ 68.910732][ T5323] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.910746][ T5323] ? __fget_files+0x2a/0x420 [ 68.910755][ T5323] ? __fget_files+0x2a/0x420 [ 68.910765][ T5323] __x64_sys_open+0x226/0x280 [ 68.910780][ T5323] ? __pfx___x64_sys_open+0x10/0x10 [ 68.910797][ T5323] ? do_syscall_64+0xb6/0x230 [ 68.910810][ T5323] do_syscall_64+0xf3/0x230 [ 68.910822][ T5323] ? clear_bhb_loop+0x45/0xa0 [ 68.910833][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.910844][ T5323] RIP: 0033:0x7fbbf718d169 [ 68.910862][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.910870][ T5323] RSP: 002b:00007fbbf7f57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 68.910883][ T5323] RAX: ffffffffffffffda RBX: 00007fbbf73a5fa0 RCX: 00007fbbf718d169 [ 68.910890][ T5323] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000200000000140 [ 68.910903][ T5323] RBP: 00007fbbf7f57090 R08: 0000000000000000 R09: 0000000000000000 [ 68.910910][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.910916][ T5323] R13: 0000000000000000 R14: 00007fbbf73a5fa0 R15: 00007fff75093c68 [ 68.910926][ T5323] [ 68.910930][ T5323] [ 69.168405][ T5323] Allocated by task 5323: [ 69.170197][ T5323] kasan_save_track+0x3f/0x80 [ 69.172159][ T5323] __kasan_mempool_unpoison_object+0x9e/0x170 [ 69.174618][ T5323] remove_element+0x129/0x1a0 [ 69.176581][ T5323] mempool_alloc_noprof+0x552/0x5a0 [ 69.178685][ T5323] bio_alloc_bioset+0x26f/0x1130 [ 69.180668][ T5323] bch2_readahead+0xbaf/0x12d0 [ 69.182490][ T5323] read_pages+0x193/0x590 [ 69.184339][ T5323] page_cache_ra_order+0xa37/0xca0 [ 69.186368][ T5323] filemap_get_pages+0x9ec/0x1fc0 [ 69.188399][ T5323] filemap_read+0x466/0x1260 [ 69.190226][ T5323] bch2_read_iter+0x1179/0x14b0 [ 69.192200][ T5323] __kernel_read+0x532/0xa10 [ 69.194121][ T5323] integrity_kernel_read+0xb2/0x100 [ 69.196279][ T5323] ima_calc_file_hash+0xb22/0x1c10 [ 69.198317][ T5323] ima_collect_measurement+0x52b/0xb20 [ 69.200506][ T5323] process_measurement+0x13a3/0x1fe0 [ 69.202585][ T5323] ima_file_check+0xdb/0x130 [ 69.204523][ T5323] security_file_post_open+0xb9/0x280 [ 69.206665][ T5323] path_openat+0x2cf7/0x35d0 [ 69.208546][ T5323] do_filp_open+0x284/0x4e0 [ 69.210291][ T5323] do_sys_openat2+0x12b/0x1d0 [ 69.212159][ T5323] __x64_sys_open+0x226/0x280 [ 69.214172][ T5323] do_syscall_64+0xf3/0x230 [ 69.216005][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.218398][ T5323] [ 69.219394][ T5323] Freed by task 5323: [ 69.220939][ T5323] kasan_save_track+0x3f/0x80 [ 69.222766][ T5323] kasan_save_free_info+0x40/0x50 [ 69.224824][ T5323] __kasan_mempool_poison_object+0xaa/0x120 [ 69.227220][ T5323] mempool_free+0x1c8/0x390 [ 69.229132][ T5323] bch2_readpages_end_io+0x17c/0x1d0 [ 69.231222][ T5323] __bch2_read_extent+0x1348/0x4400 [ 69.233254][ T5323] bchfs_read+0x2379/0x3290 [ 69.235057][ T5323] bch2_readahead+0xe7a/0x12d0 [ 69.236961][ T5323] read_pages+0x193/0x590 [ 69.238626][ T5323] page_cache_ra_order+0xa37/0xca0 [ 69.240634][ T5323] filemap_get_pages+0x9ec/0x1fc0 [ 69.242529][ T5323] filemap_read+0x466/0x1260 [ 69.244559][ T5323] bch2_read_iter+0x1179/0x14b0 [ 69.246799][ T5323] __kernel_read+0x532/0xa10 [ 69.248847][ T5323] integrity_kernel_read+0xb2/0x100 [ 69.250896][ T5323] ima_calc_file_hash+0xb22/0x1c10 [ 69.252954][ T5323] ima_collect_measurement+0x52b/0xb20 [ 69.255026][ T5323] process_measurement+0x13a3/0x1fe0 [ 69.257187][ T5323] ima_file_check+0xdb/0x130 [ 69.259011][ T5323] security_file_post_open+0xb9/0x280 [ 69.261122][ T5323] path_openat+0x2cf7/0x35d0 [ 69.262895][ T5323] do_filp_open+0x284/0x4e0 [ 69.264701][ T5323] do_sys_openat2+0x12b/0x1d0 [ 69.266533][ T5323] __x64_sys_open+0x226/0x280 [ 69.268388][ T5323] do_syscall_64+0xf3/0x230 [ 69.270159][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.272389][ T5323] [ 69.273395][ T5323] The buggy address belongs to the object at ffff888055524000 [ 69.273395][ T5323] which belongs to the cache bio-488 of size 488 [ 69.278682][ T5323] The buggy address is located 328 bytes inside of [ 69.278682][ T5323] freed 488-byte region [ffff888055524000, ffff8880555241e8) [ 69.283979][ T5323] [ 69.285094][ T5323] The buggy address belongs to the physical page: [ 69.287719][ T5323] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55524 [ 69.291338][ T5323] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 69.294821][ T5323] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 69.297859][ T5323] page_type: f5(slab) [ 69.299504][ T5323] raw: 04fff00000000040 ffff8880532f2140 dead000000000122 0000000000000000 [ 69.303040][ T5323] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 69.306750][ T5323] head: 04fff00000000040 ffff8880532f2140 dead000000000122 0000000000000000 [ 69.310375][ T5323] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 69.314447][ T5323] head: 04fff00000000001 ffffea0001554901 00000000ffffffff 00000000ffffffff [ 69.317837][ T5323] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 69.321152][ T5323] page dumped because: kasan: bad access detected [ 69.323846][ T5323] page_owner tracks the page as allocated [ 69.326191][ T5323] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5323, tgid 5322 (syz.0.0), ts 68396540438, free_ts 0 [ 69.333947][ T5323] post_alloc_hook+0x1f4/0x240 [ 69.335640][ T5323] get_page_from_freelist+0x352b/0x36c0 [ 69.337873][ T5323] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 69.340204][ T5323] alloc_pages_mpol+0x339/0x690 [ 69.342221][ T5323] allocate_slab+0x8f/0x3a0 [ 69.344067][ T5323] ___slab_alloc+0xc3b/0x1500 [ 69.345954][ T5323] __slab_alloc+0x58/0xa0 [ 69.347797][ T5323] kmem_cache_alloc_noprof+0x270/0x390 [ 69.349952][ T5323] mempool_init_node+0x1ee/0x4e0 [ 69.351918][ T5323] mempool_init_noprof+0x3a/0x50 [ 69.353930][ T5323] bioset_init+0x2ea/0x820 [ 69.355711][ T5323] bch2_fs_io_read_init+0x29/0xc0 [ 69.357759][ T5323] bch2_fs_open+0x2f37/0x32a0 [ 69.359693][ T5323] bch2_fs_get_tree+0x77b/0x18f0 [ 69.361632][ T5323] vfs_get_tree+0x90/0x2b0 [ 69.363487][ T5323] do_new_mount+0x2cf/0xb70 [ 69.365360][ T5323] page_owner free stack trace missing [ 69.367445][ T5323] [ 69.368412][ T5323] Memory state around the buggy address: [ 69.370714][ T5323] ffff888055524000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.373967][ T5323] ffff888055524080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.377173][ T5323] >ffff888055524100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.380437][ T5323] ^ [ 69.383013][ T5323] ffff888055524180: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 69.386128][ T5323] ffff888055524200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.389286][ T5323] ================================================================== [ 69.418512][ T5323] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.421602][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(full) [ 69.426188][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.430367][ T5323] Call Trace: [ 69.431697][ T5323] [ 69.432907][ T5323] dump_stack_lvl+0x241/0x360 [ 69.434759][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.436764][ T5323] ? __pfx__printk+0x10/0x10 [ 69.438579][ T5323] ? vscnprintf+0x5d/0x90 [ 69.440313][ T5323] panic+0x349/0x880 [ 69.441935][ T5323] ? check_panic_on_warn+0x21/0xb0 [ 69.444036][ T5323] ? __pfx_panic+0x10/0x10 [ 69.445902][ T5323] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 69.448396][ T5323] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.450977][ T5323] ? print_report+0x519/0x5b0 [ 69.452979][ T5323] check_panic_on_warn+0x86/0xb0 [ 69.455000][ T5323] ? bchfs_read+0x2ac0/0x3290 [ 69.456884][ T5323] end_report+0x77/0x160 [ 69.458584][ T5323] kasan_report+0x154/0x180 [ 69.460376][ T5323] ? bchfs_read+0x2ac0/0x3290 [ 69.462272][ T5323] bchfs_read+0x2ac0/0x3290 [ 69.464097][ T5323] ? __pfx_bchfs_read+0x10/0x10 [ 69.466076][ T5323] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 69.468399][ T5323] ? lockdep_hardirqs_on+0x9d/0x150 [ 69.470516][ T5323] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 69.472931][ T5323] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.475491][ T5323] ? rcu_is_watching+0x15/0xb0 [ 69.477532][ T5323] ? bchfs_read+0x33e/0x3290 [ 69.479380][ T5323] ? __pfx_bio_add_page+0x10/0x10 [ 69.481449][ T5323] ? bio_alloc_bioset+0x80e/0x1130 [ 69.483528][ T5323] bch2_readahead+0xe7a/0x12d0 [ 69.485482][ T5323] ? lockdep_hardirqs_on+0x9d/0x150 [ 69.487541][ T5323] ? __pfx_bch2_readahead+0x10/0x10 [ 69.489645][ T5323] ? folio_batch_move_lru+0x3ae/0x430 [ 69.491829][ T5323] ? blk_start_plug+0x70/0x1b0 [ 69.493775][ T5323] read_pages+0x193/0x590 [ 69.495184][ T5323] ? folio_add_lru+0x231/0x3e0 [ 69.496913][ T5323] ? filemap_add_folio+0x250/0x380 [ 69.498955][ T5323] ? __pfx_read_pages+0x10/0x10 [ 69.500937][ T5323] page_cache_ra_order+0xa37/0xca0 [ 69.502805][ T5323] filemap_get_pages+0x9ec/0x1fc0 [ 69.504738][ T5323] ? __pfx_filemap_get_pages+0x10/0x10 [ 69.506770][ T5323] ? __pfx___might_resched+0x10/0x10 [ 69.508723][ T5323] ? atime_needs_update+0x565/0x6c0 [ 69.510756][ T5323] ? touch_atime+0xf8/0x690 [ 69.512555][ T5323] filemap_read+0x466/0x1260 [ 69.514381][ T5323] ? __lock_acquire+0xad5/0xd80 [ 69.516255][ T5323] ? __pfx_filemap_read+0x10/0x10 [ 69.518527][ T5323] ? __wake_up_common_lock+0x18c/0x1e0 [ 69.520891][ T5323] bch2_read_iter+0x1179/0x14b0 [ 69.522920][ T5323] ? do_raw_spin_lock+0x151/0x370 [ 69.525003][ T5323] ? __pfx_bch2_read_iter+0x10/0x10 [ 69.526971][ T5323] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 69.529732][ T5323] ? lockdep_hardirqs_on+0x9d/0x150 [ 69.531923][ T5323] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 69.534291][ T5323] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.536459][ T5323] ? stack_trace_save+0x11a/0x1d0 [ 69.538311][ T5323] ? stack_depot_save_flags+0x43f/0x940 [ 69.540310][ T5323] ? kasan_save_track+0x51/0x80 [ 69.542455][ T5323] ? iov_iter_kvec+0x4e/0x180 [ 69.544408][ T5323] __kernel_read+0x532/0xa10 [ 69.546348][ T5323] ? __pfx___kernel_read+0x10/0x10 [ 69.548349][ T5323] ? kernel_fpu_end+0xf9/0x150 [ 69.550397][ T5323] integrity_kernel_read+0xb2/0x100 [ 69.552427][ T5323] ? __pfx_integrity_kernel_read+0x10/0x10 [ 69.554800][ T5323] ? sha256_avx2_update+0x136/0x200 [ 69.556791][ T5323] ima_calc_file_hash+0xb22/0x1c10 [ 69.558790][ T5323] ? rcu_is_watching+0x15/0xb0 [ 69.560715][ T5323] ? lock_release+0x4e/0x3e0 [ 69.562571][ T5323] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 69.564795][ T5323] ? __bch2_err_class+0x1d7/0x380 [ 69.566718][ T5323] ? bch2_xattr_get_handler+0x12e7/0x1410 [ 69.568923][ T5323] ? make_vfsgid+0x51/0xa0 [ 69.570626][ T5323] ? bch2_getattr+0x9a9/0xdb0 [ 69.572925][ T5323] ? __pfx_bch2_getattr+0x10/0x10 [ 69.575198][ T5323] ? __asan_memset+0x23/0x50 [ 69.576962][ T5323] ima_collect_measurement+0x52b/0xb20 [ 69.578969][ T5323] ? __pfx_ima_collect_measurement+0x10/0x10 [ 69.581280][ T5323] ? trace_contention_end+0x3c/0x120 [ 69.583444][ T5323] ? ima_get_hash_algo+0x157/0x520 [ 69.585415][ T5323] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 69.587515][ T5323] process_measurement+0x13a3/0x1fe0 [ 69.589589][ T5323] ? __pfx_process_measurement+0x10/0x10 [ 69.591819][ T5323] ? tomoyo_check_open_permission+0x209/0x4f0 [ 69.594301][ T5323] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 69.596827][ T5323] ? __pfx_apparmor_file_open+0x10/0x10 [ 69.599000][ T5323] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.601067][ T5323] ? file_set_fsnotify_mode_from_watchers+0x12a/0x640 [ 69.603723][ T5323] ? inode_to_bdi+0x69/0xf0 [ 69.605544][ T5323] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 69.607963][ T5323] ima_file_check+0xdb/0x130 [ 69.609795][ T5323] ? __pfx_ima_file_check+0x10/0x10 [ 69.611894][ T5323] security_file_post_open+0xb9/0x280 [ 69.614133][ T5323] path_openat+0x2cf7/0x35d0 [ 69.615958][ T5323] ? __pfx_path_openat+0x10/0x10 [ 69.617912][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.620347][ T5323] do_filp_open+0x284/0x4e0 [ 69.622101][ T5323] ? __pfx_do_filp_open+0x10/0x10 [ 69.624353][ T5323] ? do_raw_spin_lock+0x151/0x370 [ 69.626877][ T5323] do_sys_openat2+0x12b/0x1d0 [ 69.629355][ T5323] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.631966][ T5323] ? __fget_files+0x2a/0x420 [ 69.634016][ T5323] ? __fget_files+0x2a/0x420 [ 69.635827][ T5323] __x64_sys_open+0x226/0x280 [ 69.637672][ T5323] ? __pfx___x64_sys_open+0x10/0x10 [ 69.639606][ T5323] ? do_syscall_64+0xb6/0x230 [ 69.641380][ T5323] do_syscall_64+0xf3/0x230 [ 69.643145][ T5323] ? clear_bhb_loop+0x45/0xa0 [ 69.644935][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.647219][ T5323] RIP: 0033:0x7fbbf718d169 [ 69.648949][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.655955][ T5323] RSP: 002b:00007fbbf7f57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 69.659173][ T5323] RAX: ffffffffffffffda RBX: 00007fbbf73a5fa0 RCX: 00007fbbf718d169 [ 69.662183][ T5323] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000200000000140 [ 69.665300][ T5323] RBP: 00007fbbf7f57090 R08: 0000000000000000 R09: 0000000000000000 [ 69.668217][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.671219][ T5323] R13: 0000000000000000 R14: 00007fbbf73a5fa0 R15: 00007fff75093c68 [ 69.674095][ T5323] [ 69.675680][ T5323] Kernel Offset: disabled [ 69.677376][ T5323] Rebooting in 86400 seconds..